Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B40/2840C8A638E011EF94B84D7FC4F9AE02/vAWTxH2s9senekHgfeuaBhYxpIQ.mft
File:                     vAWTxH2s9senekHgfeuaBhYxpIQ.mft (raw, json)
Hash identifier:          rFBFA8GCMK5N3eEnMw/VUXztTS6tUm6rIFURu/JWeZ4=
Subject key identifier:   DA:05:40:4F:EC:D5:06:19:A6:A9:93:97:0C:99:C7:7D:60:A3:35:DB
Authority key identifier: BC:05:93:C4:7D:AC:F6:C7:A7:7A:41:E0:7D:EB:9A:06:16:31:A4:84
Certificate issuer:       /CN=A91D0B40/serialNumber=BC0593C47DACF6C7A77A41E07DEB9A061631A484
Certificate serial:       F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAWTxH2s9senekHgfeuaBhYxpIQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0B40/2840C8A638E011EF94B84D7FC4F9AE02/vAWTxH2s9senekHgfeuaBhYxpIQ.mft
Manifest number:          F4
Signing time:             Sun 19 Oct 2025 08:10:58 +0000
Manifest this update:     Sun 19 Oct 2025 08:10:58 +0000
Manifest next update:     Sun 26 Oct 2025 08:10:58 +0000
Files and hashes:         1: vAWTxH2s9senekHgfeuaBhYxpIQ.crl (hash: 2eTQ4z4Iub7fTEV0oY6YiFytm4bes/PJSn9nEviTTvw=)
                          2: 0D5C00AC38E311EF99F62432C4F9AE02.roa (hash: xQMEY6P6f4jmqeDgv/TImb1ka64GtPCQvQqQLQx2M8U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0B40/2840C8A638E011EF94B84D7FC4F9AE02/vAWTxH2s9senekHgfeuaBhYxpIQ.crl
                          rsync://rpki.apnic.net/member_repository/A91D0B40/2840C8A638E011EF94B84D7FC4F9AE02/vAWTxH2s9senekHgfeuaBhYxpIQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAWTxH2s9senekHgfeuaBhYxpIQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 08:10:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 246 (0xf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0B40, serialNumber=BC0593C47DACF6C7A77A41E07DEB9A061631A484
        Validity
            Not Before: Oct 19 08:10:58 2025 GMT
            Not After : Oct 26 08:10:58 2025 GMT
        Subject: CN=68f49d12-7144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:71:1f:98:10:77:bd:e9:5b:22:ef:f9:db:c4:
                    30:bd:2b:f1:54:d2:6a:84:ce:05:4a:63:f1:20:04:
                    79:d9:c1:25:7e:3b:42:c4:77:76:f1:bc:0a:d5:d0:
                    f4:d1:a4:26:26:c2:93:9f:90:9d:8c:97:c7:c8:b5:
                    69:b3:1f:08:1b:1c:1b:28:b5:43:67:46:d2:a0:77:
                    ab:2d:1c:36:59:84:23:5d:d5:a3:1f:48:cb:5a:60:
                    de:02:16:9d:72:40:c9:e6:a3:ef:b9:0c:1a:85:07:
                    2e:0f:7b:cc:19:6d:ea:33:c5:9c:6c:35:08:fb:10:
                    a2:d2:dd:68:3f:9c:bd:96:92:61:6b:04:f3:26:c7:
                    19:95:3c:ac:97:45:3f:a9:5c:51:fd:56:01:4e:1f:
                    e0:02:6f:95:e2:6d:64:b9:8b:44:84:43:46:29:c6:
                    ab:08:19:c6:21:5b:04:df:a7:57:e2:4d:14:14:58:
                    c7:ba:5d:10:bb:3b:ee:e3:99:31:84:50:e1:79:bc:
                    c7:3b:c4:c0:73:29:bc:4e:26:d8:b8:8a:ea:35:e0:
                    f2:12:f7:30:22:7d:f5:f3:6d:79:ac:88:1a:92:25:
                    e5:3c:44:e9:30:43:77:01:43:f9:37:a5:c4:6c:ba:
                    76:44:95:0f:b8:67:a5:d3:75:6d:40:88:23:da:c9:
                    e3:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:05:40:4F:EC:D5:06:19:A6:A9:93:97:0C:99:C7:7D:60:A3:35:DB
            X509v3 Authority Key Identifier:
                keyid:BC:05:93:C4:7D:AC:F6:C7:A7:7A:41:E0:7D:EB:9A:06:16:31:A4:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0B40/2840C8A638E011EF94B84D7FC4F9AE02/vAWTxH2s9senekHgfeuaBhYxpIQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAWTxH2s9senekHgfeuaBhYxpIQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B40/2840C8A638E011EF94B84D7FC4F9AE02/vAWTxH2s9senekHgfeuaBhYxpIQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:68:ab:42:cc:c6:e9:bf:2b:c6:67:6e:7a:74:1b:05:a4:5b:
         af:5c:04:f1:ca:a7:d8:39:03:78:48:40:26:e2:64:30:60:81:
         12:d4:c3:75:82:0c:3f:93:72:9e:9a:b1:78:17:2a:ff:de:01:
         2d:f3:28:36:6a:81:79:00:0e:99:53:8a:34:44:22:c3:32:63:
         0f:21:f2:ec:bc:e8:14:40:f0:01:a3:d3:88:0e:f1:a3:d2:a3:
         28:7b:c3:84:5a:10:b4:5c:94:6c:c5:5a:d0:bb:7b:bd:39:6f:
         dd:2d:c1:10:8c:8c:bd:ea:5f:a6:19:af:fe:82:ad:97:f9:46:
         0b:ca:9c:55:70:a6:21:49:06:ba:eb:0f:5c:c5:4c:56:a1:e2:
         9d:1e:78:52:11:22:b0:ef:d7:08:c1:a0:85:8b:16:60:84:e9:
         51:73:ae:16:ab:16:ae:7c:ec:b4:5c:08:30:7e:48:a8:5c:9f:
         22:8a:d9:57:bf:ae:aa:73:8e:e7:49:ee:a0:48:68:7f:b2:a8:
         b7:cd:d7:d9:0a:cc:28:35:e7:b1:0f:b5:cc:78:cc:22:74:d1:
         95:2c:a1:88:b5:53:b1:86:df:16:eb:48:e0:09:3b:0d:69:d1:
         66:7a:02:03:6a:3f:c5:b0:6c:a4:dc:69:fe:ec:9e:06:d2:50:
         b0:21:71:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:10:34 2025 by rpki-client