Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft
File:                     1vBnJNCWhwftHfr9uyJYArPaoZQ.mft (raw, json)
Hash identifier:          f/9LG0zjId345RovQItV1tLPY09Xpdgikj3xksdcOA4=
Subject key identifier:   A0:13:EB:7A:B3:F9:B0:9D:98:0B:41:E8:92:70:BA:CA:82:B2:BA:A0
Authority key identifier: D6:F0:67:24:D0:96:87:07:ED:1D:FA:FD:BB:22:58:02:B3:DA:A1:94
Certificate issuer:       /CN=A91D1F95/serialNumber=D6F06724D0968707ED1DFAFDBB225802B3DAA194
Certificate serial:       02AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vBnJNCWhwftHfr9uyJYArPaoZQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft
Manifest number:          02A5
Signing time:             Sun 19 Oct 2025 03:45:10 +0000
Manifest this update:     Sun 19 Oct 2025 03:45:10 +0000
Manifest next update:     Sun 26 Oct 2025 03:45:10 +0000
Files and hashes:         1: 1vBnJNCWhwftHfr9uyJYArPaoZQ.crl (hash: i4/ue6ne7Hrzaz3qX5IGZ6eWB10qBmuDNA1zQAJSpdU=)
                          2: 834FFE88679911EEB8243436C4F9AE02.roa (hash: Yrv7ZBN66aHo1fxboSYdyeMXxVo+vZh3rt3Di282sAw=)
                          3: C965E8C4679911EEB466ED36C4F9AE02.roa (hash: 4shhW+hfwKEr12lvGKCQFs6BqumTNDAweN+QTLEQJao=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.crl
                          rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vBnJNCWhwftHfr9uyJYArPaoZQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 03:45:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 685 (0x2ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1F95, serialNumber=D6F06724D0968707ED1DFAFDBB225802B3DAA194
        Validity
            Not Before: Oct 19 03:45:10 2025 GMT
            Not After : Oct 26 03:45:10 2025 GMT
        Subject: CN=68f45ec6-7cd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0b:cf:df:6f:66:86:3d:1f:f2:95:a4:79:06:
                    4f:00:12:dd:28:23:26:1c:4b:7c:6d:9a:b6:14:98:
                    b7:d3:1e:00:c1:e1:c4:e1:89:f2:f0:6b:01:c5:8c:
                    81:3f:55:67:93:9b:2f:a6:bc:44:4d:c4:5c:d3:02:
                    59:7c:27:b8:e7:c3:ab:8a:9e:68:f5:aa:0c:85:e9:
                    cc:0b:0c:55:f8:7b:e5:db:6a:ff:80:25:df:76:a0:
                    ef:1e:75:f5:a8:ed:a8:60:89:6c:7a:aa:9d:d0:f7:
                    67:32:c7:92:79:72:2c:78:46:ef:50:22:6e:7d:dd:
                    e1:16:b9:1b:c5:de:23:74:18:8a:f6:4c:bc:f8:08:
                    4e:7a:49:a2:00:d4:02:78:9b:ff:0e:38:30:ab:43:
                    0b:3d:ca:a0:3f:7c:96:f0:73:b1:49:8e:99:fa:ca:
                    be:05:ad:74:c8:4d:b2:fb:5e:f8:b6:40:03:5b:88:
                    5f:35:31:31:03:ef:41:34:89:61:4b:9e:be:17:69:
                    8d:a4:69:08:38:2b:5f:dc:09:07:a8:30:86:11:59:
                    8a:db:01:7a:01:7e:7a:cb:81:c8:f3:01:7d:72:1f:
                    7a:3c:99:7d:59:83:20:04:90:66:82:59:a9:13:05:
                    fe:3d:d3:c4:ca:64:6b:d9:41:77:c2:85:5b:86:6f:
                    28:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:13:EB:7A:B3:F9:B0:9D:98:0B:41:E8:92:70:BA:CA:82:B2:BA:A0
            X509v3 Authority Key Identifier:
                keyid:D6:F0:67:24:D0:96:87:07:ED:1D:FA:FD:BB:22:58:02:B3:DA:A1:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vBnJNCWhwftHfr9uyJYArPaoZQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:b5:2e:ee:4e:e6:db:bc:83:fc:07:25:f5:32:54:0c:e8:d9:
         82:af:66:17:7e:62:f5:1a:ec:3f:23:88:07:e0:4d:d5:5b:ed:
         b8:0b:78:69:ff:45:dc:74:34:b0:9e:c2:85:81:a4:f1:2d:75:
         f6:4b:23:77:57:52:88:c7:4d:c2:ed:37:25:33:2b:f5:36:7a:
         15:fd:7b:fd:81:9a:1e:34:ef:31:31:7a:26:ad:26:6b:be:81:
         c3:04:22:53:db:1d:d8:60:5d:b5:0c:0b:7e:89:50:35:80:14:
         b5:7f:d3:33:5c:8d:3b:79:3e:e9:af:4a:58:f4:35:3e:32:a8:
         63:ac:3b:f8:ef:66:09:9f:d2:78:5d:a9:13:6f:b4:bd:82:82:
         4b:8b:1c:ca:3d:5d:b7:8f:8e:c2:fb:63:0a:99:20:e4:46:c5:
         fc:9c:d9:9a:31:80:1c:17:c1:30:dc:37:1c:81:e5:5b:fd:4d:
         4e:8d:c0:4e:10:df:56:5b:86:fb:31:1e:42:dc:2a:f4:3a:1d:
         19:e6:0a:1e:9d:11:a5:a2:79:de:1b:1a:4d:cb:11:d6:6c:f5:
         ec:52:14:8b:43:f6:21:de:19:9f:87:ef:6a:39:3c:82:b9:7f:
         eb:f3:01:1a:45:3c:4d:79:dd:c4:b9:7b:e8:81:29:81:af:4b:
         0b:b0:ef:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:29:22 2025 by rpki-client