Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.mft
File:                     cClGBbAXy3lsrYhC9e-6P0SHB_U.mft (raw, json)
Hash identifier:          YIkEuHuyYW6bUnSrtWe0vtde49+H6T+OpRwwtcgWtYA=
Subject key identifier:   1E:8F:09:67:F9:A7:71:0F:C5:19:E2:2A:79:AB:1F:8E:33:2D:E5:6E
Authority key identifier: 70:29:46:05:B0:17:CB:79:6C:AD:88:42:F5:EF:BA:3F:44:87:07:F5
Certificate issuer:       /CN=A91E1C16/serialNumber=70294605B017CB796CAD8842F5EFBA3F448707F5
Certificate serial:       0642
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cClGBbAXy3lsrYhC9e-6P0SHB_U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.mft
Manifest number:          0626
Signing time:             Sun 19 Oct 2025 00:27:11 +0000
Manifest this update:     Sun 19 Oct 2025 00:27:10 +0000
Manifest next update:     Sun 26 Oct 2025 00:27:10 +0000
Files and hashes:         1: cClGBbAXy3lsrYhC9e-6P0SHB_U.crl (hash: Mzdnxr30lJ1K+9uoU5eiicNmSaFO9iqBrzYYE8BClaM=)
                          2: 2B6E7D32FC5311ECBCE27247C4F9AE02.roa (hash: YWG8ZTu1MykDiOqV56oC4ORjTxnyQ1AQFIwIn6af5iU=)
                          3: FA18CEA2F07A11EBBEBB415AC4F9AE02.roa (hash: 0MKRGhD7VGcMSXw/ROEFU8wnZ9ENIjqkmhL8/Vmz8tg=)
                          4: 4FF82F28045E11EDB581B43EC4F9AE02.roa (hash: pzVGtJuglLRxF/Eq8FNCa3K2+vkm9IUKeDm8AbcXfX8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.crl
                          rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cClGBbAXy3lsrYhC9e-6P0SHB_U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 00:27:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1602 (0x642)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1C16, serialNumber=70294605B017CB796CAD8842F5EFBA3F448707F5
        Validity
            Not Before: Oct 19 00:27:10 2025 GMT
            Not After : Oct 26 00:27:10 2025 GMT
        Subject: CN=68f4305e-76d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:21:c1:4b:7b:7d:76:c0:d0:84:43:d4:61:cc:
                    21:57:59:dd:9c:a3:87:df:94:40:c7:9a:e6:ec:a9:
                    80:0f:cd:19:ad:ac:4b:a4:10:29:a3:cc:e1:4d:f6:
                    6e:da:6a:3a:97:ce:78:19:e4:f2:d2:49:b1:1a:f8:
                    12:98:07:1c:dc:ce:f4:9f:14:2b:3d:e7:2a:19:17:
                    4a:7c:49:22:e5:53:f3:8c:59:d7:a0:8b:ea:be:58:
                    2f:36:06:cb:e1:55:45:2c:a2:03:28:41:23:6e:35:
                    20:5d:6b:d5:42:77:5c:28:66:a6:ee:76:03:e3:37:
                    0a:bc:38:2a:1b:93:6f:9c:ec:b4:5b:50:a4:1d:d5:
                    b4:75:94:f9:e0:0c:d1:c5:9f:b5:7f:59:fe:5a:98:
                    80:38:66:fb:41:28:b1:80:39:73:7e:23:9f:ae:ef:
                    b3:dc:ab:dd:aa:fa:19:86:c6:e8:48:ad:36:84:47:
                    6d:3f:07:20:63:06:c7:94:43:f6:d6:3a:8b:c5:b1:
                    a0:5b:ef:29:7f:59:55:eb:41:1b:e3:70:5e:65:ed:
                    8c:07:bf:24:85:4f:ef:0c:6e:e3:0d:0b:13:4f:13:
                    28:b1:f4:e3:8b:2d:43:df:e4:43:b5:e4:94:cb:36:
                    bd:39:27:88:bd:a4:94:81:bd:a2:15:af:7e:d1:5e:
                    1b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:8F:09:67:F9:A7:71:0F:C5:19:E2:2A:79:AB:1F:8E:33:2D:E5:6E
            X509v3 Authority Key Identifier:
                keyid:70:29:46:05:B0:17:CB:79:6C:AD:88:42:F5:EF:BA:3F:44:87:07:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cClGBbAXy3lsrYhC9e-6P0SHB_U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:c3:79:64:76:8d:b0:2d:be:54:fe:0b:4a:04:10:2f:fc:8b:
         ed:54:da:10:f0:4a:c9:c1:20:7d:6d:49:1f:62:ac:38:c3:e9:
         24:8b:64:54:65:ad:b8:b9:a6:95:b6:3a:86:ce:1b:b9:3d:a7:
         35:f5:1f:68:34:36:d9:3a:6e:75:e5:74:af:19:83:9a:76:a0:
         13:14:d9:25:18:14:03:46:ec:7b:d0:89:a0:3f:91:58:35:d4:
         22:1d:39:2d:84:b0:b3:ab:6c:80:30:08:6d:4b:6c:f2:22:80:
         6d:14:e1:48:ce:82:14:9b:79:fc:20:83:ae:cf:aa:62:1c:51:
         a7:f2:6b:14:82:af:b0:8b:8f:0f:fa:6d:1c:98:b4:bb:eb:0d:
         e8:d0:f5:a1:eb:ce:b5:91:53:1a:ee:87:bc:00:f2:b9:14:aa:
         f6:84:f3:53:70:cf:35:eb:2e:01:6d:ea:f5:61:c5:66:cb:de:
         dd:c0:3a:59:5f:bc:43:4f:06:6a:78:03:06:cb:c0:ea:f8:ca:
         f9:e2:8d:f3:a5:34:ad:79:fe:54:f9:79:49:f8:f7:21:f3:b7:
         97:a7:72:c0:f9:d5:4d:e0:69:fc:97:56:5f:73:37:77:44:15:
         2c:fa:20:0e:c6:bc:83:49:70:4e:20:47:49:ce:4b:df:7f:97:
         0e:76:7f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:48:00 2025 by rpki-client