Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.mft
File:                     whEvRNRFjxhc25rZqRr4KQZInMY.mft (raw, json)
Hash identifier:          cFpKJ21/IopwtAW5pTM0cMKRzzu6mQ6tY4aCoLp0XuM=
Subject key identifier:   64:AB:3A:16:BF:A9:4F:1D:57:4C:E4:E4:42:1D:B6:BB:F6:CC:E8:8A
Authority key identifier: C2:11:2F:44:D4:45:8F:18:5C:DB:9A:D9:A9:1A:F8:29:06:48:9C:C6
Certificate issuer:       /CN=A91C167F/serialNumber=C2112F44D4458F185CDB9AD9A91AF82906489CC6
Certificate serial:       0143
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/whEvRNRFjxhc25rZqRr4KQZInMY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.mft
Manifest number:          0141
Signing time:             Sun 19 Oct 2025 07:10:20 +0000
Manifest this update:     Sun 19 Oct 2025 07:10:19 +0000
Manifest next update:     Sun 26 Oct 2025 07:10:19 +0000
Files and hashes:         1: whEvRNRFjxhc25rZqRr4KQZInMY.crl (hash: bfSBRPlyAkR5TazLyQh69z5ZFDG01XM57aGj8G/aLwc=)
                          2: 7FC75E34C4B211EEB684BF7FC4F9AE02.roa (hash: ENR1qEuttVnNRROdOyzWRsQ7bm7evUlkAyBRhI4KcO0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.crl
                          rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/whEvRNRFjxhc25rZqRr4KQZInMY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 07:10:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 323 (0x143)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C167F, serialNumber=C2112F44D4458F185CDB9AD9A91AF82906489CC6
        Validity
            Not Before: Oct 19 07:10:19 2025 GMT
            Not After : Oct 26 07:10:19 2025 GMT
        Subject: CN=68f48edc-b622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:be:90:5a:fa:2f:f5:52:27:68:d5:2c:3d:92:
                    d7:ee:1f:16:94:54:3e:77:2e:43:2e:0e:25:d1:92:
                    a7:68:5b:92:61:e2:1d:59:1a:aa:08:0d:1e:ad:a7:
                    a3:e4:0d:a1:cc:cf:5c:d2:01:e8:59:c3:33:26:bb:
                    bd:bc:0b:e4:53:28:9c:87:4e:52:c1:39:67:68:4c:
                    4e:7b:10:ed:a3:5e:c8:2c:f9:99:49:1b:50:81:c8:
                    f8:a4:b1:b2:84:11:53:66:2d:31:1e:8f:19:b8:bb:
                    e0:0f:8c:69:5d:2e:9b:9c:a6:06:4e:fd:91:c4:7a:
                    65:aa:05:e4:e2:5a:b6:55:9c:f2:0f:4e:51:36:56:
                    67:a0:12:31:4a:4a:1a:09:5c:b8:c2:d8:53:cb:6e:
                    bb:db:50:98:15:b8:1e:2b:69:75:20:c2:29:14:da:
                    e4:ff:26:ec:71:96:13:0e:f7:d0:f7:27:f3:15:6f:
                    92:92:ab:d2:69:43:8e:d1:fc:4a:86:2e:82:0b:21:
                    77:87:53:5a:a0:7e:d3:0c:15:63:90:41:73:a8:48:
                    5a:b6:1a:6d:76:7c:f1:c6:b1:4b:4d:e8:66:d7:37:
                    88:95:8d:ba:5f:19:bd:00:b9:84:f1:f3:24:46:b0:
                    d7:cb:8d:48:0f:5c:89:c8:34:13:6a:10:3f:0c:7b:
                    bf:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:AB:3A:16:BF:A9:4F:1D:57:4C:E4:E4:42:1D:B6:BB:F6:CC:E8:8A
            X509v3 Authority Key Identifier:
                keyid:C2:11:2F:44:D4:45:8F:18:5C:DB:9A:D9:A9:1A:F8:29:06:48:9C:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/whEvRNRFjxhc25rZqRr4KQZInMY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:ca:67:7c:e5:82:ab:bd:66:9c:68:8e:c3:3c:90:d4:06:7f:
         1c:4e:20:14:6c:94:9b:59:92:55:62:84:c3:99:10:28:a8:17:
         d8:6d:d0:e8:3c:b9:b0:5e:7a:6b:72:bd:1e:cf:db:cf:63:79:
         a3:0a:47:0c:e5:06:f5:95:7e:7b:9d:ba:e8:9b:24:db:f6:6c:
         73:3e:22:54:2e:6d:c2:81:c4:53:6e:96:68:9d:20:c4:c6:2b:
         74:7a:d9:18:24:b7:b1:a5:b1:1a:d6:b0:1c:f9:0a:80:61:0b:
         9a:d9:09:92:cf:39:74:ef:6d:21:60:0f:57:7e:08:7e:d0:17:
         81:93:aa:2a:29:6e:2d:4c:04:fe:8c:27:13:64:b3:81:d9:83:
         93:6a:c3:a2:2e:45:75:83:5e:75:17:29:9f:46:72:62:d3:a1:
         e3:a5:9a:f0:22:2d:97:45:65:d8:91:15:f0:ca:f6:11:f2:25:
         01:98:3c:91:ea:e0:8c:a3:d6:5e:17:78:4b:c5:df:a0:be:9a:
         62:e5:0d:f2:09:3c:b4:bb:6d:32:b1:61:0c:73:32:c0:d7:54:
         a1:42:61:8e:6c:3a:fd:89:57:0c:9a:b3:5f:70:17:c0:06:60:
         69:2e:7b:87:28:ac:52:af:72:2f:80:45:53:ba:d7:41:1b:a8:
         63:c9:48:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:38:02 2025 by rpki-client