Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/-mfVMKhwCqjrfU9svpZHvlN_X84.mft
File:                     -mfVMKhwCqjrfU9svpZHvlN_X84.mft (raw, json)
Hash identifier:          Fw4O+kGZvALDtKejQrwREO0P/j3C2vwMeKHd9mY6L5g=
Subject key identifier:   D2:1D:0E:09:20:26:61:82:8E:82:51:90:15:EE:25:0B:11:4E:1B:56
Authority key identifier: FA:67:D5:30:A8:70:0A:A8:EB:7D:4F:6C:BE:96:47:BE:53:7F:5F:CE
Certificate issuer:       /CN=A91CD056/serialNumber=FA67D530A8700AA8EB7D4F6CBE9647BE537F5FCE
Certificate serial:       0370
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-mfVMKhwCqjrfU9svpZHvlN_X84.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/-mfVMKhwCqjrfU9svpZHvlN_X84.mft
Manifest number:          036C
Signing time:             Sun 19 Oct 2025 02:55:49 +0000
Manifest this update:     Sun 19 Oct 2025 02:55:48 +0000
Manifest next update:     Sun 26 Oct 2025 02:55:48 +0000
Files and hashes:         1: -mfVMKhwCqjrfU9svpZHvlN_X84.crl (hash: V0x8/kIq0UaDx4N5Q0YWTjhQFwAoQ8eXm6tb5z8OJLY=)
                          2: 3E62F2ECC9EA11ECB6295B34C4F9AE02.roa (hash: mfXzwKGY7gUqiLkJW1SqazxLmJ2CAU7Yff9kCtQmKuM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/-mfVMKhwCqjrfU9svpZHvlN_X84.crl
                          rsync://rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/-mfVMKhwCqjrfU9svpZHvlN_X84.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-mfVMKhwCqjrfU9svpZHvlN_X84.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 02:55:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 880 (0x370)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD056, serialNumber=FA67D530A8700AA8EB7D4F6CBE9647BE537F5FCE
        Validity
            Not Before: Oct 19 02:55:48 2025 GMT
            Not After : Oct 26 02:55:48 2025 GMT
        Subject: CN=68f45335-c98c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:9d:18:a7:c3:fb:df:f2:ef:12:4a:fe:36:78:
                    4b:27:d5:fd:a6:dd:6d:8f:33:f2:08:b7:b4:65:7e:
                    84:50:8f:93:e1:23:be:80:ca:b4:04:55:1d:9e:c6:
                    b0:27:5d:ff:b7:ce:e6:2b:d8:06:47:d1:d0:25:d3:
                    e2:a4:e2:ab:d7:16:c7:f0:c3:d8:60:63:02:78:c7:
                    8a:e2:da:75:77:a2:83:29:ed:d2:dc:71:c6:04:1f:
                    aa:ce:4e:36:3b:56:da:3b:76:6a:17:5c:9f:78:4b:
                    57:26:42:82:7c:ff:0f:b1:3b:d5:38:13:b1:c3:00:
                    26:be:dc:f6:11:e7:d0:d8:b3:a0:41:3a:03:4e:54:
                    5a:3a:d2:5e:f9:72:c0:ad:bf:bc:54:5e:df:db:31:
                    d7:97:10:27:65:90:c4:6b:4f:8d:57:51:e3:80:57:
                    62:7c:5b:05:e1:f5:bd:20:39:0c:e7:5a:08:49:09:
                    02:a8:0d:e8:3c:33:75:c2:9e:67:bc:29:cf:0c:7f:
                    b7:11:6b:b7:8f:4c:90:48:b4:3d:2e:fd:f9:4e:5e:
                    9b:08:33:d5:74:00:2a:1e:99:d1:03:51:69:93:3a:
                    ee:24:c2:50:60:a3:8c:7a:5e:8b:3b:0c:47:33:8a:
                    e7:57:0d:ea:19:96:af:ab:e5:af:a4:a6:a8:fa:66:
                    ad:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:1D:0E:09:20:26:61:82:8E:82:51:90:15:EE:25:0B:11:4E:1B:56
            X509v3 Authority Key Identifier:
                keyid:FA:67:D5:30:A8:70:0A:A8:EB:7D:4F:6C:BE:96:47:BE:53:7F:5F:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/-mfVMKhwCqjrfU9svpZHvlN_X84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-mfVMKhwCqjrfU9svpZHvlN_X84.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/-mfVMKhwCqjrfU9svpZHvlN_X84.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:67:b2:da:8c:0d:60:dd:5c:d6:5c:12:16:65:ce:07:73:42:
         70:fb:e2:d5:a5:76:39:93:d7:6a:63:c0:35:ef:7c:6a:80:a4:
         91:b5:9b:fc:c2:e5:02:77:e4:42:44:37:7e:5d:33:88:66:50:
         26:0b:58:28:a6:f2:33:40:f6:08:6c:79:e2:68:e3:3b:88:62:
         94:e5:c4:a0:46:9e:66:9a:48:89:6e:ca:87:de:c1:d3:d0:bc:
         7e:bc:fe:32:85:d3:fa:8e:62:36:6b:e1:5e:0e:fe:a5:57:b3:
         aa:66:91:47:44:a3:22:73:ba:c2:63:bb:ec:49:1f:cc:5e:bf:
         2b:83:d2:ac:be:06:36:a1:83:f8:fd:a6:a8:b5:3c:b5:92:d3:
         fd:4c:38:81:09:44:bb:32:79:16:ed:48:b5:a8:3b:57:25:4c:
         84:81:25:bb:68:96:39:4c:c7:b0:62:7e:ca:df:a6:2a:31:60:
         99:09:c5:2d:48:f6:a7:a2:f7:5a:43:cc:fe:72:bf:09:31:2b:
         5b:8f:06:f4:1e:c7:7b:40:00:db:0f:49:da:55:2d:65:6a:43:
         b0:af:cc:37:87:a3:73:ec:5b:f6:f0:fb:8b:33:ea:b9:df:8c:
         41:2d:7b:ee:1f:1b:b7:13:f6:1e:a0:3b:ae:48:45:7c:29:01:
         17:f6:24:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:45:54 2025 by rpki-client