Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft
File:                     fzUqdpVtdwL8d69g_MEp5h_b6jI.mft (raw, json)
Hash identifier:          hRmGinCzpjXVZnyf6+WkU3yW39I+bs+6q76LEfFo+cA=
Subject key identifier:   D1:91:30:34:6F:BE:DC:9D:2D:D6:9C:53:82:1E:5C:56:0B:33:AB:BA
Authority key identifier: 7F:35:2A:76:95:6D:77:02:FC:77:AF:60:FC:C1:29:E6:1F:DB:EA:32
Certificate issuer:       /CN=A91E15AD/serialNumber=7F352A76956D7702FC77AF60FCC129E61FDBEA32
Certificate serial:       017A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fzUqdpVtdwL8d69g_MEp5h_b6jI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft
Manifest number:          0172
Signing time:             Sun 19 Oct 2025 06:32:43 +0000
Manifest this update:     Sun 19 Oct 2025 06:32:42 +0000
Manifest next update:     Sun 26 Oct 2025 06:32:42 +0000
Files and hashes:         1: fzUqdpVtdwL8d69g_MEp5h_b6jI.crl (hash: 6zGkvTMXHmqnqcAplVhZpAnNFE/uoDxu+KbEmeuXyss=)
                          2: 3C2B0A98259911EFB9393E2EC4F9AE02.roa (hash: GUAKLioCiwQM0sEveusi3ixaoMT6G47CkUGC3S4J4Kc=)
                          3: 2A26D2607E1311EEAF8FD93EC4F9AE02.roa (hash: kLwQ9PBIqCKII7G0saaqu2rGr7qnQzEy5QYjy0dvRGs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.crl
                          rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fzUqdpVtdwL8d69g_MEp5h_b6jI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 06:32:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 378 (0x17a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E15AD, serialNumber=7F352A76956D7702FC77AF60FCC129E61FDBEA32
        Validity
            Not Before: Oct 19 06:32:42 2025 GMT
            Not After : Oct 26 06:32:42 2025 GMT
        Subject: CN=68f4860a-8565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:db:98:d8:d7:5f:00:14:fc:0e:88:db:70:78:
                    86:15:46:74:43:88:b3:17:c6:55:9d:09:2f:60:7d:
                    d7:0e:15:55:17:ea:10:7c:d9:99:87:33:bd:68:70:
                    01:11:d5:9f:0b:cf:1d:56:91:a9:df:77:08:9d:96:
                    4f:9a:e7:df:1c:0c:bd:99:18:82:ff:68:d7:1a:9c:
                    34:de:7f:53:e6:a1:3d:92:fd:ae:57:7c:be:4f:bf:
                    54:e5:37:01:72:fc:ff:e9:a2:30:34:ec:30:3d:5a:
                    70:f3:c3:92:87:79:44:e6:4d:9e:d4:00:4c:4b:2e:
                    f0:b9:a3:44:1c:52:5c:6b:7e:d5:60:42:84:be:1b:
                    46:7a:17:de:0c:39:ba:d7:30:8e:71:e0:65:d1:30:
                    39:4b:37:cc:58:c7:31:66:84:bf:77:9e:07:19:66:
                    48:0a:95:b6:c3:83:3e:bf:f8:10:fb:94:83:10:b3:
                    2d:b2:a8:00:81:3c:72:b5:6f:90:ea:61:9e:0f:b2:
                    d9:f8:b8:40:99:0e:b4:a0:59:41:4b:0c:3e:5a:2b:
                    30:fc:e0:c4:7e:50:5c:d1:7a:ea:1a:b0:61:62:33:
                    bc:f6:9a:49:a7:52:21:be:b8:c0:76:c9:08:04:4c:
                    9f:70:5d:11:9a:9f:be:24:18:0d:98:f1:01:4c:44:
                    29:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:91:30:34:6F:BE:DC:9D:2D:D6:9C:53:82:1E:5C:56:0B:33:AB:BA
            X509v3 Authority Key Identifier:
                keyid:7F:35:2A:76:95:6D:77:02:FC:77:AF:60:FC:C1:29:E6:1F:DB:EA:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fzUqdpVtdwL8d69g_MEp5h_b6jI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:23:28:53:c5:3e:23:9e:e3:ba:2b:7a:ba:78:3f:92:a0:02:
         7b:2b:56:4d:2d:54:ba:f0:d8:84:66:1b:3a:65:bf:55:a1:df:
         e6:dd:e5:a4:1b:0c:f7:7a:06:f2:81:f7:36:5e:1d:59:26:07:
         21:2b:6c:7d:69:95:c4:8a:88:ee:dc:96:81:9c:a0:43:f8:09:
         71:1c:73:70:b2:48:53:71:d4:4e:da:73:60:4e:b5:86:67:af:
         05:48:0b:3b:bf:77:94:0a:6d:59:5b:59:cb:59:d0:06:10:e4:
         9f:31:ea:1b:0c:84:eb:e4:e5:49:df:11:b5:b2:4d:25:6d:93:
         30:d6:3e:2f:94:44:c7:69:a6:a0:bc:31:a3:ad:28:65:c5:7c:
         bc:43:9e:17:b8:00:8b:73:4c:78:b0:f6:b3:ed:cb:fb:aa:f1:
         e2:16:f2:82:17:e4:71:1f:27:78:ad:e0:6e:2e:2b:0b:b0:b4:
         8d:be:42:1b:69:35:7a:06:1c:0c:1b:e0:d8:bb:09:5a:ad:ab:
         78:35:3e:d0:80:9d:7f:2c:bc:05:0d:fc:e6:79:ba:a7:e6:b0:
         cf:cf:75:d0:d2:99:bd:a0:3e:90:d1:ac:6a:bd:fe:51:34:81:
         1a:9a:44:65:60:b9:54:1e:6a:38:6b:e0:60:81:2c:b3:cf:28:
         08:3d:82:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:25:24 2025 by rpki-client