Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.mft
File:                     M1EvnGdsMJ4181WPA7muZBm_dBU.mft (raw, json)
Hash identifier:          NbxrYY4yKmIu2OUtqDAgRWixVixMvYHMfl66Brzf648=
Subject key identifier:   23:5B:00:70:D2:37:72:CF:6B:A6:E2:4C:6A:28:4C:D4:2B:19:D8:CB
Authority key identifier: 33:51:2F:9C:67:6C:30:9E:35:F3:55:8F:03:B9:AE:64:19:BF:74:15
Certificate issuer:       /CN=A91CB763/serialNumber=33512F9C676C309E35F3558F03B9AE6419BF7415
Certificate serial:       01D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1EvnGdsMJ4181WPA7muZBm_dBU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.mft
Manifest number:          01CF
Signing time:             Sun 19 Oct 2025 05:17:28 +0000
Manifest this update:     Sun 19 Oct 2025 05:17:28 +0000
Manifest next update:     Sun 26 Oct 2025 05:17:28 +0000
Files and hashes:         1: M1EvnGdsMJ4181WPA7muZBm_dBU.crl (hash: r99XhemzsgCLH21gLJDre2/bO6TFTxI9Qzkry2FJFWk=)
                          2: 1FB8AA58E9AB11ED8B614C43C4F9AE02.roa (hash: oCS3tdZ6gguGFimJ8+AyVEXE/8R/Gcn35NJsKRSfeUM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.crl
                          rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1EvnGdsMJ4181WPA7muZBm_dBU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 05:17:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 467 (0x1d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB763, serialNumber=33512F9C676C309E35F3558F03B9AE6419BF7415
        Validity
            Not Before: Oct 19 05:17:28 2025 GMT
            Not After : Oct 26 05:17:28 2025 GMT
        Subject: CN=68f47468-0502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d8:8d:c3:14:d4:b8:9b:9d:27:4a:53:d3:5a:
                    ec:20:22:8c:26:bc:89:03:44:dc:ba:b5:3a:90:2e:
                    5e:4b:bf:90:d7:0b:26:d8:a3:ea:19:7b:fe:74:77:
                    5a:43:bf:14:88:bb:05:52:2c:ca:c0:2a:9c:6b:46:
                    fa:91:20:ce:2e:a3:50:9a:28:f4:64:34:0a:ec:cf:
                    f5:94:62:67:78:f1:3f:44:ce:03:ca:a5:89:19:ea:
                    32:38:9b:57:17:dc:0b:91:f9:5d:c8:64:05:f8:e9:
                    1f:f6:a6:56:58:be:8c:40:d9:74:37:7c:e2:d2:82:
                    b0:c8:54:ed:84:15:46:93:4e:f4:ef:35:cd:95:69:
                    c7:ae:8f:2d:d8:2d:f3:84:8c:5b:b6:8b:e9:8b:10:
                    a3:f7:16:a2:a6:b5:89:ff:11:6c:56:a0:ca:08:b0:
                    7d:07:e0:f1:9b:f3:b3:e9:25:e6:dd:42:47:a7:c4:
                    a8:50:02:77:02:27:c0:28:0e:09:ce:2c:36:98:62:
                    b1:a5:9d:34:34:b9:14:60:35:15:02:cb:0a:7b:11:
                    dd:3a:3e:c8:c3:88:1a:8a:a1:33:3b:81:0e:61:b3:
                    6a:6f:ce:57:5c:4a:26:f9:cd:b9:c8:10:81:82:09:
                    e7:08:2b:73:82:30:fc:2f:a0:14:2e:de:84:b8:4b:
                    f7:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:5B:00:70:D2:37:72:CF:6B:A6:E2:4C:6A:28:4C:D4:2B:19:D8:CB
            X509v3 Authority Key Identifier:
                keyid:33:51:2F:9C:67:6C:30:9E:35:F3:55:8F:03:B9:AE:64:19:BF:74:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1EvnGdsMJ4181WPA7muZBm_dBU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:a7:6c:96:17:c0:28:88:8c:8f:a3:6d:a9:d7:02:b5:4b:8d:
         69:6b:80:92:37:18:fc:ab:00:fc:7e:de:45:ac:34:0e:5c:a4:
         de:e7:5e:95:2d:12:80:e2:81:bb:6c:60:c8:67:e3:de:01:67:
         c9:12:e1:8d:68:23:da:5d:34:a4:c7:78:37:73:81:f5:b7:cc:
         94:e8:f2:45:4e:9d:57:f4:8d:b1:fa:ed:3e:e1:b7:74:36:25:
         0c:f3:04:00:4c:44:88:b6:a1:46:63:5b:5f:89:65:fb:be:4e:
         43:75:19:bf:ce:79:f4:6b:18:08:8d:e5:98:94:5e:c9:50:a1:
         97:64:a6:44:15:97:12:89:a2:d6:e8:d6:1c:29:ab:3e:09:db:
         d4:2b:b4:6f:c7:03:24:5e:24:18:fa:d5:1a:c9:e4:b7:0f:af:
         47:ac:24:f7:dc:73:6a:33:ef:1c:31:3e:5a:7b:a7:d1:92:f2:
         0f:dd:b8:4e:3e:0c:12:6b:d4:ac:a1:71:7c:57:1c:f5:cb:75:
         e5:b6:97:fc:1a:fc:0c:24:7c:59:33:2c:ca:dd:f1:69:b1:67:
         97:21:28:35:69:51:63:67:4a:97:6a:b8:4c:c1:80:80:97:d3:
         bf:19:f1:6b:b9:7c:82:7f:62:8d:84:a4:09:96:39:3b:54:83:
         e1:4d:cc:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:36:40 2025 by rpki-client