Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft
File:                     pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft (raw, json)
Hash identifier:          Y+YZTdhXro25oUd6GRxzwS1HTwMJCr4v/wrkNvn62HM=
Subject key identifier:   46:AB:E3:96:1B:08:06:53:00:B6:DA:18:BF:B9:99:B7:78:B2:AF:D7
Authority key identifier: A4:31:83:EC:C6:50:B8:57:0D:68:F7:D4:12:A4:F0:01:4D:A8:B9:C4
Certificate issuer:       /CN=A91D7D87/serialNumber=A43183ECC650B8570D68F7D412A4F0014DA8B9C4
Certificate serial:       0124
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDGD7MZQuFcNaPfUEqTwAU2oucQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft
Manifest number:          0119
Signing time:             Sun 19 Oct 2025 07:50:36 +0000
Manifest this update:     Sun 19 Oct 2025 07:50:35 +0000
Manifest next update:     Sun 26 Oct 2025 07:50:35 +0000
Files and hashes:         1: pDGD7MZQuFcNaPfUEqTwAU2oucQ.crl (hash: hPzo3qa968gDhKu+CyMU7jNHVK8IvgLcK4K5TxeBx90=)
                          2: E0ACE6D24FB411EF84A05568C4F9AE02.roa (hash: rmjthXIgu+TkmOHK2Z05ZF5XVZiqaLPjn4Rrihljins=)
                          3: 745A41CC2FA311EFBCD3546DC4F9AE02.roa (hash: CPD742iiES9rbPbeCK1WZoSS8qfszA2mvXUnwvIYEO4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.crl
                          rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDGD7MZQuFcNaPfUEqTwAU2oucQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 07:50:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 292 (0x124)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D7D87, serialNumber=A43183ECC650B8570D68F7D412A4F0014DA8B9C4
        Validity
            Not Before: Oct 19 07:50:35 2025 GMT
            Not After : Oct 26 07:50:35 2025 GMT
        Subject: CN=68f4984b-ece0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:20:d3:2b:17:54:31:f9:93:13:29:0a:da:89:
                    36:ec:9b:02:55:7e:d6:43:0c:ef:ec:b5:42:76:cd:
                    ee:c9:9a:35:8b:a6:5f:ac:a3:78:25:e3:ba:79:c6:
                    85:bd:50:50:e8:5f:c3:e6:aa:ea:fd:e8:0c:47:c7:
                    7c:76:c3:db:d7:e8:cb:c8:81:64:dc:5a:6c:38:6f:
                    74:13:83:5d:2c:c1:09:81:c6:a8:0a:70:4c:3c:3c:
                    f0:70:9e:5a:81:9c:1b:6f:2c:d5:3d:c2:07:55:e3:
                    f7:79:8f:a4:a6:2f:66:6d:c1:08:ed:91:1a:1d:7b:
                    79:46:19:a0:15:2e:57:0c:a4:13:cd:19:81:0d:c8:
                    e8:88:36:28:89:c9:c9:f7:5e:62:e5:40:a1:80:5e:
                    58:1b:96:ab:e4:ed:96:61:2c:dd:7f:3e:ad:60:eb:
                    0c:31:a2:79:29:b6:f4:81:e6:11:7b:11:a6:88:4f:
                    49:8c:08:2a:eb:77:74:03:ae:61:cc:84:48:fc:97:
                    49:36:ee:61:cc:ab:96:9d:47:db:ce:18:80:15:41:
                    7d:2f:c8:57:95:dd:70:3b:2d:31:ed:f8:18:b3:7e:
                    9a:5e:76:7f:ec:e3:4e:4e:dd:56:3d:cd:c4:2d:b9:
                    29:e6:4d:2c:33:51:32:3b:65:86:6f:57:c1:c5:1b:
                    6b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:AB:E3:96:1B:08:06:53:00:B6:DA:18:BF:B9:99:B7:78:B2:AF:D7
            X509v3 Authority Key Identifier:
                keyid:A4:31:83:EC:C6:50:B8:57:0D:68:F7:D4:12:A4:F0:01:4D:A8:B9:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDGD7MZQuFcNaPfUEqTwAU2oucQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:c5:80:a2:52:0f:44:9e:9c:3a:cc:2b:15:af:3d:67:68:cb:
         3b:f5:01:ef:eb:d7:7e:b5:9c:85:3b:5b:e9:a8:e8:c8:d5:7b:
         66:d5:bb:6e:6e:b2:24:ff:fc:70:dd:78:04:a7:53:c2:75:74:
         67:6a:64:5c:75:43:84:47:50:d1:91:a0:a6:f4:31:c0:a3:35:
         49:c9:52:c8:cd:4b:b6:81:2c:d3:f6:66:4e:51:cc:68:96:58:
         e5:86:33:e1:33:4c:70:2a:41:ac:56:cd:ae:a0:a6:66:22:f1:
         ac:89:2f:8b:47:0e:5e:05:f1:4a:01:4e:16:f9:d6:41:0c:df:
         0f:c7:a4:50:08:0f:ec:13:7f:5e:0b:e8:06:8e:c9:00:92:09:
         58:ff:22:90:34:f2:9b:06:f8:31:f0:c6:d1:5f:06:68:ec:97:
         91:8f:b4:9a:12:b2:10:6c:7f:84:a9:ab:42:f9:c7:a4:49:8d:
         27:e7:19:49:64:f9:f4:f8:56:2b:92:39:c0:f9:b1:5e:d3:69:
         ce:e2:f7:c7:f4:81:a8:80:e9:10:b5:e7:77:41:97:42:ff:d9:
         e1:25:c7:82:79:e1:a6:c4:8b:94:68:ec:dc:dd:c2:64:0a:7b:
         30:f6:e6:b1:d1:6c:63:78:f8:23:26:91:21:78:ad:de:cb:20:
         4f:04:45:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:33:22 2025 by rpki-client