Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft
File:                     E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft (raw, json)
Hash identifier:          ntB73EjLgDigmNjPXYcB3sLr3ixO2TXs+yZATBtUsWM=
Subject key identifier:   22:98:42:B8:F0:DE:9E:3B:3C:23:D3:6A:21:73:47:5D:2C:BB:AB:5D
Authority key identifier: 13:67:41:BD:9E:87:0F:06:EC:E5:CB:35:5B:8C:75:71:CC:96:BA:74
Certificate issuer:       /CN=A91CE9D6/serialNumber=136741BD9E870F06ECE5CB355B8C7571CC96BA74
Certificate serial:       0A4F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft
Manifest number:          0A39
Signing time:             Sat 18 Oct 2025 20:44:11 +0000
Manifest this update:     Sat 18 Oct 2025 20:44:10 +0000
Manifest next update:     Sat 25 Oct 2025 20:44:10 +0000
Files and hashes:         1: E2dBvZ6HDwbs5cs1W4x1ccyWunQ.crl (hash: itZhwA9x/ZOlMMrRSVa3We8W0EZphfmJV36JxWQym2s=)
                          2: 722D43AC7A5A11EABD77E486C4F9AE02.roa (hash: dz0lDVUdbKurIPgLKnTIK+TUvk2MtsrFSHr5aV4oHoA=)
                          3: E4EFE6905ECB11ECA9B55A3BC4F9AE02.roa (hash: ACLukHzl4iP7lAUKq3zWaW1x17F+UkqOsay4tSs+0D0=)
                          4: A1C764027A5B11EA98745A0EC4F9AE02.roa (hash: WPHw7kNP0n6c5UltUwmrIvy70bAxnVBFcfWA6in4LsM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.crl
                          rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 20:44:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2639 (0xa4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE9D6, serialNumber=136741BD9E870F06ECE5CB355B8C7571CC96BA74
        Validity
            Not Before: Oct 18 20:44:10 2025 GMT
            Not After : Oct 25 20:44:10 2025 GMT
        Subject: CN=68f3fc1a-fabf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:22:36:c8:c6:c3:c1:ec:03:fd:43:ff:59:22:
                    8e:24:e0:3c:75:5c:1a:79:ff:07:cc:92:82:1b:cd:
                    35:8f:d5:56:ef:b3:5f:fc:a3:48:df:0d:2a:0d:09:
                    c2:4b:61:ec:4b:1e:05:c9:f6:4d:ea:5d:ea:b1:5c:
                    cf:d1:be:2e:6a:de:ab:56:61:8f:fb:0d:f2:c0:f6:
                    59:d6:15:4e:59:e0:26:b6:8a:a0:e3:31:67:50:6d:
                    57:cf:a6:4c:3c:2d:2f:fd:78:9c:7b:8a:b5:40:85:
                    4b:ca:f2:ae:48:3d:96:63:74:34:4d:08:ea:1c:fd:
                    f7:d4:65:b9:5c:32:62:b6:29:c8:43:ba:7c:60:d3:
                    a8:69:78:77:cb:3b:ab:e1:ee:5d:98:11:50:49:c3:
                    17:00:a6:8b:9a:0a:a7:0b:64:82:69:c3:ad:80:da:
                    87:a4:4e:b0:1e:73:6b:87:fa:bf:b8:6e:cc:06:39:
                    b3:92:1a:cf:6b:c3:c4:44:e1:17:36:48:97:d0:1a:
                    15:0a:2a:70:86:21:76:c7:30:54:b5:95:9a:57:7c:
                    95:ee:a6:18:c5:85:4d:cf:df:7f:f5:4c:f4:47:a1:
                    23:7c:31:6f:8d:d9:b6:6c:aa:38:7b:0e:16:bd:8e:
                    c2:65:2c:6e:72:e9:1d:be:13:60:da:26:87:7c:f2:
                    9b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:98:42:B8:F0:DE:9E:3B:3C:23:D3:6A:21:73:47:5D:2C:BB:AB:5D
            X509v3 Authority Key Identifier:
                keyid:13:67:41:BD:9E:87:0F:06:EC:E5:CB:35:5B:8C:75:71:CC:96:BA:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:6f:90:b5:78:2b:57:41:aa:8b:53:d7:cb:45:57:5a:2f:89:
         a3:43:59:2b:34:48:fc:44:63:5e:8a:33:25:4a:42:7e:e5:7f:
         da:60:33:1d:35:f8:e7:62:9a:3e:55:5a:bc:30:f0:b1:9c:c6:
         d9:b3:eb:d3:a2:60:7d:75:f2:b3:cc:92:4a:4f:69:87:50:e2:
         a5:e3:d3:52:a3:ae:96:ce:96:39:33:fd:71:a8:9a:5e:72:d4:
         d5:96:73:8e:e6:40:40:26:ad:07:a1:14:fd:84:0b:98:e8:86:
         e7:f5:38:cd:2f:e9:a9:5f:8c:41:30:0b:68:94:37:2a:48:b8:
         9b:24:e3:7b:9b:17:ee:5e:7e:d6:5b:18:52:bb:74:4a:e5:c5:
         29:3c:79:82:2c:4f:5c:4c:38:13:69:a7:7b:e5:91:7d:27:09:
         6b:99:fb:f7:d9:d3:7e:6d:c9:a2:ae:53:b5:4f:e7:04:f3:ee:
         f4:df:f5:2b:88:18:8b:1f:0b:60:4e:d9:c3:83:dc:d6:ce:5d:
         fe:1f:01:f6:9c:7d:91:29:45:39:11:96:6e:61:b3:b3:29:2a:
         b6:ed:df:63:07:36:a9:67:b8:92:c7:db:e8:2b:a3:2b:9c:17:
         86:a7:49:09:ea:af:e0:71:68:d9:8f:94:0d:c5:1e:9b:b8:46:
         a1:82:7a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:43:38 2025 by rpki-client