Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft
File:                     acgZi9o_0JBT9CVT1z7qFRIdJBw.mft (raw, json)
Hash identifier:          Vu+cg2033D3Cezkya0nGxPDHco0hjObC8Jhn4diza0Y=
Subject key identifier:   F3:F2:74:41:01:82:6B:D8:1F:E5:A1:80:65:72:FC:C1:CF:FB:64:2A
Authority key identifier: 69:C8:19:8B:DA:3F:D0:90:53:F4:25:53:D7:3E:EA:15:12:1D:24:1C
Certificate issuer:       /CN=A91E4F66/serialNumber=69C8198BDA3FD09053F42553D73EEA15121D241C
Certificate serial:       0BA5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft
Manifest number:          0B95
Signing time:             Sat 18 Oct 2025 19:52:00 +0000
Manifest this update:     Sat 18 Oct 2025 19:51:59 +0000
Manifest next update:     Sat 25 Oct 2025 19:51:59 +0000
Files and hashes:         1: acgZi9o_0JBT9CVT1z7qFRIdJBw.crl (hash: NZyFPJVavI3HLJ5Lw9VvcXaKdKCdJky8a6RrBrU+spE=)
                          2: A3BE70CCD5AE11EE909D5C40C4F9AE02.roa (hash: pyQz1D6782Rt8rbYkLjsLImtzM5OVg/DTRlj4Kga3+Q=)
                          3: C53629FEEACE11EEA8513D34C4F9AE02.roa (hash: fM914915Khakkai2qWkeTKAeeQDgBvP101R4o1zFbdM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.crl
                          rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 19:51:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2981 (0xba5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4F66, serialNumber=69C8198BDA3FD09053F42553D73EEA15121D241C
        Validity
            Not Before: Oct 18 19:51:59 2025 GMT
            Not After : Oct 25 19:51:59 2025 GMT
        Subject: CN=68f3efdf-8f08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7d:8e:4f:46:81:6f:20:36:61:fc:bf:2a:6c:
                    57:43:3f:19:ae:2f:05:08:2d:27:6b:2d:c7:04:11:
                    90:f2:18:cc:2d:14:da:57:69:75:04:c6:6b:df:02:
                    96:e5:b8:e7:66:30:f8:0c:e7:17:f7:09:05:1f:84:
                    3c:26:42:46:aa:9e:a3:07:73:95:d0:c0:24:24:b7:
                    9e:b6:90:14:79:46:fd:dc:10:b5:ae:44:29:29:bd:
                    e6:04:c8:8c:18:1a:ff:2a:2d:a7:ec:47:8e:0e:00:
                    f9:bc:ae:d1:56:e4:10:96:44:38:d5:f7:68:59:43:
                    4e:3b:ae:72:82:36:68:ea:a9:bd:15:b0:77:d4:0c:
                    26:f3:38:c5:c4:ae:fb:2e:de:c1:16:13:1d:f2:75:
                    f0:3c:b3:18:99:6e:fc:76:39:eb:b2:27:83:c6:84:
                    f3:96:56:7e:33:73:3e:8d:6e:f7:0e:b5:50:a5:51:
                    d3:c7:de:86:92:6a:b0:26:4b:17:99:b7:a2:5e:7c:
                    02:ce:d3:1e:22:a3:33:e9:f9:95:bb:43:02:59:15:
                    4f:e3:b4:25:25:64:8d:b6:4a:bb:0a:bf:4f:ce:bd:
                    23:d3:2d:ef:eb:09:6e:4e:ae:6b:95:06:d1:9b:08:
                    2d:1f:9b:f1:8d:a9:76:c3:14:04:04:fc:76:f0:16:
                    52:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:F2:74:41:01:82:6B:D8:1F:E5:A1:80:65:72:FC:C1:CF:FB:64:2A
            X509v3 Authority Key Identifier:
                keyid:69:C8:19:8B:DA:3F:D0:90:53:F4:25:53:D7:3E:EA:15:12:1D:24:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:4a:bd:78:96:b1:ca:bd:25:c4:41:50:ef:62:40:37:c0:72:
         8e:df:0d:ed:4f:cd:fc:4f:93:ba:29:63:14:df:62:a4:0c:7d:
         5c:9b:50:e1:43:d7:d8:b7:cc:26:d1:be:33:57:de:32:77:c9:
         03:2f:64:dc:4f:98:7e:e2:19:df:38:15:70:63:d5:9d:b6:1a:
         e3:39:77:14:a7:c6:97:7a:9c:96:f7:c8:01:9e:ce:b1:70:6b:
         69:69:9a:fc:2d:47:26:9a:8e:13:48:5f:bb:67:d7:39:9b:4a:
         23:d2:85:17:ba:d1:02:02:2a:4d:89:38:6b:6a:da:aa:13:76:
         a1:d4:56:cd:88:8b:c9:8b:de:f1:64:6d:35:bd:7f:5b:95:20:
         26:f0:71:e7:4e:7c:c3:9f:da:15:19:d1:18:99:f1:69:d6:59:
         a0:50:7e:45:9a:52:88:5d:9f:5e:bc:10:78:2a:36:ec:bc:58:
         11:b6:16:21:86:00:a7:3a:5a:49:d9:cf:6c:ce:ad:26:62:11:
         74:8c:4d:41:3f:ea:56:ff:1d:52:41:4f:a1:82:cb:c4:35:69:
         69:09:b9:45:d6:02:75:85:c4:d9:6e:77:3f:b8:00:16:c5:76:
         42:5f:ee:86:9e:fe:5f:ed:68:56:bf:95:20:8f:68:13:9e:17:
         b2:bd:39:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:04:54 2025 by rpki-client