Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft
File:                     4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft (raw, json)
Hash identifier:          D0hH4XNKbtFGIuphkLJOMhHYfgHUpiihL85paHEkDzk=
Subject key identifier:   07:55:E3:36:2E:AE:38:6A:ED:02:B2:92:6F:D4:E2:E1:D1:20:EF:29
Authority key identifier: E0:39:8D:54:AC:D9:DB:33:ED:4F:CA:A8:D2:28:05:D4:5E:80:CB:B6
Certificate issuer:       /CN=A91BBA4F/serialNumber=E0398D54ACD9DB33ED4FCAA8D22805D45E80CBB6
Certificate serial:       4C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft
Manifest number:          4B
Signing time:             Sun 19 Oct 2025 10:44:54 +0000
Manifest this update:     Sun 19 Oct 2025 10:44:53 +0000
Manifest next update:     Sun 26 Oct 2025 10:44:53 +0000
Files and hashes:         1: 4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.crl (hash: wW/Jd/bMlgnm/+SkJUVr2UJUT6I6LKByw+va+wqctSU=)
                          2: 58C16E043B7811F099AF3F55C4F9AE02.roa (hash: EdyHrGdK241FduLFJE474YipzEeOWQ4qQLPgbqAJOd8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.crl
                          rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 10:44:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76 (0x4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BBA4F, serialNumber=E0398D54ACD9DB33ED4FCAA8D22805D45E80CBB6
        Validity
            Not Before: Oct 19 10:44:53 2025 GMT
            Not After : Oct 26 10:44:53 2025 GMT
        Subject: CN=68f4c125-996e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:32:bb:fa:c6:f8:0c:53:98:b0:e0:2c:cc:e4:
                    5b:a5:2c:3f:ed:98:46:2e:1e:e1:36:89:dd:7b:c9:
                    f9:e5:e1:a7:2f:41:89:df:a3:5d:f6:d9:6a:7e:08:
                    59:9e:56:78:5f:aa:ff:d5:90:d5:2e:22:5d:f1:5d:
                    4d:ee:3b:c0:34:7b:66:10:2d:56:62:e9:c5:91:f7:
                    a4:d2:f2:02:0c:59:55:da:f2:92:8c:9a:da:28:13:
                    d6:ce:79:9f:65:b5:dd:93:0a:ad:33:15:74:67:89:
                    ae:b7:f4:27:ba:0f:a6:03:36:31:00:57:30:ec:36:
                    9e:04:a0:a0:4f:97:cf:32:10:4c:66:3b:a5:62:86:
                    49:d9:b5:1f:a8:22:87:7d:0d:0e:1f:05:87:d6:36:
                    33:fb:46:5f:bf:0a:7f:d1:a3:f2:67:8c:de:40:9b:
                    a4:fe:57:14:d4:03:7b:bc:74:b1:a1:8c:0a:01:43:
                    02:06:b2:d8:7b:27:e6:98:52:ef:e9:7b:9e:54:03:
                    6d:b8:4c:bb:bc:1a:55:b5:7f:88:bc:06:bf:12:8a:
                    c7:c3:b2:66:67:77:27:8f:7a:42:38:af:fc:9a:e3:
                    87:89:fb:30:67:1a:4a:a6:68:9e:e2:ee:12:51:33:
                    3f:dd:16:33:0a:4b:f3:a9:9c:73:8b:da:25:8f:b2:
                    0b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:55:E3:36:2E:AE:38:6A:ED:02:B2:92:6F:D4:E2:E1:D1:20:EF:29
            X509v3 Authority Key Identifier:
                keyid:E0:39:8D:54:AC:D9:DB:33:ED:4F:CA:A8:D2:28:05:D4:5E:80:CB:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:45:a1:48:7d:de:c2:4c:bc:9e:00:62:a3:27:fe:a7:5d:d7:
         6b:0d:d8:ff:7b:47:b1:b9:83:3a:7a:54:91:2d:55:d0:48:1c:
         58:22:ca:42:58:c9:49:06:d8:f8:af:37:52:cc:c5:54:6a:a1:
         fd:3e:d4:e8:63:6e:f1:c5:2e:1d:4c:15:e7:b1:93:a8:a9:4e:
         bf:87:fe:0c:66:77:ac:6b:35:2b:86:a6:9e:0c:2c:b3:42:df:
         83:3e:4d:e3:11:70:a0:08:2f:54:ed:3a:b7:30:15:44:37:67:
         50:a9:d4:04:57:7e:bf:a5:38:90:c8:c9:23:38:c3:f9:41:c9:
         57:4d:ee:4e:06:1b:f6:49:47:a4:97:79:48:83:06:da:e4:b2:
         89:4d:e1:6b:55:b7:39:16:d8:aa:31:ab:3f:29:b5:b8:06:0f:
         2b:6b:32:d2:08:5e:ea:60:45:0b:56:ae:61:7b:75:f8:8f:7f:
         5f:a7:59:0b:cb:1b:f5:fc:a9:46:9c:fd:cd:40:b0:ad:cc:bd:
         c1:bc:30:4e:ac:15:79:33:ed:a5:2c:b7:5d:c1:75:30:d4:81:
         d1:52:f5:75:86:ce:00:ff:62:2d:d5:d6:57:a3:d2:cb:36:fd:
         4b:57:25:de:68:b5:68:a2:f7:d0:85:f4:78:80:06:a7:ec:c7:
         75:c6:f0:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:16:12 2025 by rpki-client