Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.mft
File:                     uwO40kR--BOjepWHdmoB9zWd10A.mft (raw, json)
Hash identifier:          Nb41gfUI5yi4dED9hDxRgiEuB3GZSNHzyv0FpVm44BI=
Subject key identifier:   DE:82:17:3C:3F:84:BD:E4:B1:25:9D:19:33:32:47:D8:D0:60:57:D6
Authority key identifier: BB:03:B8:D2:44:7E:F8:13:A3:7A:95:87:76:6A:01:F7:35:9D:D7:40
Certificate issuer:       /CN=A91D2779/serialNumber=BB03B8D2447EF813A37A9587766A01F7359DD740
Certificate serial:       07E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwO40kR--BOjepWHdmoB9zWd10A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.mft
Manifest number:          07C7
Signing time:             Sat 18 Oct 2025 22:36:45 +0000
Manifest this update:     Sat 18 Oct 2025 22:36:44 +0000
Manifest next update:     Sat 25 Oct 2025 22:36:44 +0000
Files and hashes:         1: uwO40kR--BOjepWHdmoB9zWd10A.crl (hash: eYnmwRddNSsaa8cj1rlPWV5FBd9SabIQECz3UYYHm1A=)
                          2: 33284BD019C311EBB9C1D063C4F9AE02.roa (hash: TqtodbfH2773RSeSZS8HBt7Fg3MhzGZkdJHAeKBdxNI=)
                          3: 99DF3B20183A11EBB9F78E80C4F9AE02.roa (hash: E+nOxjyrsiWeh2pSdTI7eBtCxdY2UG5bXebW7kl/SNQ=)
                          4: 991F1FE8183A11EBB9F78E80C4F9AE02.roa (hash: WdQW9sjBymvB0klEN4W168ArFaUHAakmSi85CGroy+U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.crl
                          rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwO40kR--BOjepWHdmoB9zWd10A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 22:36:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2022 (0x7e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D2779, serialNumber=BB03B8D2447EF813A37A9587766A01F7359DD740
        Validity
            Not Before: Oct 18 22:36:44 2025 GMT
            Not After : Oct 25 22:36:44 2025 GMT
        Subject: CN=68f4167c-84af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:00:da:d0:7e:26:c5:2f:e9:fb:50:c6:b1:a9:
                    c9:f8:e1:80:7a:e2:6f:14:9c:af:c9:58:51:b7:c7:
                    09:00:72:8c:18:65:04:a0:00:47:50:ae:00:b2:ee:
                    d1:03:59:16:ab:5d:75:f8:fd:ca:e9:83:9f:d8:fa:
                    62:a4:2d:14:ac:a1:59:ce:04:e8:7d:9e:9c:41:1f:
                    53:66:02:7e:5d:ba:f0:4b:56:ee:42:06:37:85:01:
                    06:d3:e2:03:bf:3d:42:85:a9:63:35:69:13:2e:be:
                    cc:98:34:2d:35:97:8a:03:4f:36:e6:dc:02:90:a9:
                    61:89:b7:c8:f4:54:a6:b4:84:e0:da:32:3a:04:79:
                    0b:48:8a:7d:6b:1a:e6:03:54:c8:3d:98:aa:bf:9b:
                    2e:36:d3:a8:a9:20:e5:97:34:0f:06:a6:bd:b3:98:
                    55:ab:8d:0e:ea:ce:8d:64:8a:f1:0b:ed:83:7b:e6:
                    f6:df:bb:b8:75:d4:8c:c5:9a:f7:1e:43:bf:1f:46:
                    ff:55:de:ba:5d:f3:3f:25:67:9c:d9:ef:3b:9a:a8:
                    13:2f:3a:7f:10:7d:bf:a6:85:4f:67:e9:31:d1:a0:
                    49:e2:73:b5:5b:df:c4:de:e8:48:75:89:01:4b:f4:
                    07:1d:d8:43:3a:96:38:24:20:1d:77:38:c1:5a:ec:
                    e2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:82:17:3C:3F:84:BD:E4:B1:25:9D:19:33:32:47:D8:D0:60:57:D6
            X509v3 Authority Key Identifier:
                keyid:BB:03:B8:D2:44:7E:F8:13:A3:7A:95:87:76:6A:01:F7:35:9D:D7:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwO40kR--BOjepWHdmoB9zWd10A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:d5:ae:79:96:e7:22:12:52:29:f2:10:7b:86:a0:02:f7:08:
         f3:e7:05:1e:9f:9d:ec:d6:61:8a:b9:77:55:92:a5:e8:ac:e3:
         76:c7:7e:42:8c:8b:59:3f:7f:bc:28:aa:fd:08:42:e2:ba:6f:
         0d:bd:d4:51:06:57:c3:d2:12:95:9c:c1:c8:17:57:0c:9a:ba:
         fc:2d:82:d0:12:58:dc:08:88:09:e5:51:d7:ec:6f:18:75:0e:
         5a:c6:4a:1c:86:73:3a:3c:49:c3:92:54:f9:89:20:05:53:94:
         8a:2d:c3:d1:9f:c1:3b:3f:09:48:0d:22:ca:0b:4b:ce:68:24:
         47:47:52:f0:ba:93:d2:b3:25:7d:4b:ea:4e:c2:27:07:f1:bd:
         9a:ac:a6:a1:d4:2c:6b:79:70:09:d6:c7:bd:06:c5:13:bc:61:
         8b:67:8b:48:4a:bc:4e:07:84:0f:67:9d:b8:1d:4e:f6:9a:c4:
         14:75:1a:6f:81:a5:27:5d:dc:61:26:0c:f4:9d:9d:b1:1f:47:
         0f:8a:a1:ea:05:a0:87:75:17:18:26:ef:b3:5b:f7:6e:ca:1f:
         09:6e:6b:1c:a1:1b:46:17:5d:66:4b:5c:95:98:77:d5:eb:16:
         eb:61:80:16:e3:28:aa:27:1b:69:7e:6a:08:50:dd:23:98:db:
         04:f2:ed:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:55:59 2025 by rpki-client