Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.mft
File:                     SCAW5WoCQf0tNb_Xe8ly5nPOny8.mft (raw, json)
Hash identifier:          aXJOADNQXZUISTPAdMhHl02m9hKPBj4Z1wY3SzESmkk=
Subject key identifier:   EE:BA:F6:93:2D:6E:A9:D9:1B:03:64:01:FF:5B:5A:9C:94:66:80:C7
Authority key identifier: 48:20:16:E5:6A:02:41:FD:2D:35:BF:D7:7B:C9:72:E6:73:CE:9F:2F
Certificate issuer:       /CN=A91E563F/serialNumber=482016E56A0241FD2D35BFD77BC972E673CE9F2F
Certificate serial:       0924
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SCAW5WoCQf0tNb_Xe8ly5nPOny8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.mft
Manifest number:          0909
Signing time:             Sat 18 Oct 2025 21:26:29 +0000
Manifest this update:     Sat 18 Oct 2025 21:26:28 +0000
Manifest next update:     Sat 25 Oct 2025 21:26:28 +0000
Files and hashes:         1: SCAW5WoCQf0tNb_Xe8ly5nPOny8.crl (hash: e4yTOf4YQxFpv5HBuxgcSnI7gWj8bbgNp7JMzXGCt60=)
                          2: E101BEF6BA1111EAA2AF621EC4F9AE02.roa (hash: S4rEl380BTJzcHGG2hyACdGlelyGvU4RyQMTlMFDOTU=)
                          3: EA41FB0EB6A911EAB0EB257EC4F9AE02.roa (hash: +NWxZ4+1DLoMUKpAzUV8GXujacBHu2pkEpYyl5zFIic=)
                          4: EABCE94C932111EE8C70453EC4F9AE02.roa (hash: 3jZ9nHpwySfxwNtadAmSfYTid2BMJXTKTIVS2D09msI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.crl
                          rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SCAW5WoCQf0tNb_Xe8ly5nPOny8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 21:26:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2340 (0x924)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E563F, serialNumber=482016E56A0241FD2D35BFD77BC972E673CE9F2F
        Validity
            Not Before: Oct 18 21:26:28 2025 GMT
            Not After : Oct 25 21:26:28 2025 GMT
        Subject: CN=68f40605-5077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:81:ff:e3:53:26:82:d8:2e:6c:c3:9b:39:87:
                    5e:78:93:1a:5f:d2:58:e2:0c:05:75:e3:fc:8c:77:
                    0d:6b:17:84:1e:db:b7:c8:b8:de:fc:91:70:cf:0a:
                    1d:56:14:35:a9:e9:29:76:70:78:c5:d5:ad:26:b2:
                    ab:c4:66:a9:c1:50:50:c2:d8:f0:92:b1:18:2b:d1:
                    53:1b:3f:44:05:94:4e:ac:d9:88:fb:79:29:14:49:
                    dc:34:e4:38:e9:e8:d9:ff:60:64:40:2d:58:df:ce:
                    0d:48:27:4c:c7:50:f4:33:95:25:13:ca:7b:93:63:
                    16:29:7b:ab:f4:07:23:0e:b0:58:ed:ef:42:fa:21:
                    92:4d:1e:0e:45:dd:6e:a7:6e:e5:af:cb:b4:87:b2:
                    02:82:bd:39:b2:71:92:3b:de:08:ee:b4:f7:21:15:
                    41:4e:fa:dd:6e:ba:ee:6e:c5:b1:05:92:69:7d:2a:
                    1b:bf:18:26:5b:af:06:c6:9d:78:1c:c2:14:56:d1:
                    a1:f5:89:af:05:d2:46:6f:6e:d5:ea:f9:2b:33:32:
                    29:bb:54:64:98:99:ec:84:70:59:40:d2:35:0d:c3:
                    95:43:8b:19:15:9f:e7:11:64:72:18:1b:48:6c:3e:
                    44:e2:3d:1f:67:fd:9d:23:64:de:5e:b0:9e:95:28:
                    89:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:BA:F6:93:2D:6E:A9:D9:1B:03:64:01:FF:5B:5A:9C:94:66:80:C7
            X509v3 Authority Key Identifier:
                keyid:48:20:16:E5:6A:02:41:FD:2D:35:BF:D7:7B:C9:72:E6:73:CE:9F:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SCAW5WoCQf0tNb_Xe8ly5nPOny8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:c5:4b:5e:03:98:9a:7c:53:dc:bf:e7:39:ae:e6:4f:d2:47:
         e1:c4:03:df:73:4b:ff:d9:36:86:50:96:3d:36:ec:c1:61:b6:
         ad:75:e0:b4:57:4a:63:5f:cc:89:50:3f:0b:cd:7a:dd:8a:bf:
         c1:6e:73:17:ff:e8:ed:12:96:f4:0d:50:92:56:ee:aa:e6:1a:
         e7:77:99:ed:ab:4f:85:bb:6c:bc:7f:b7:f3:71:bd:87:34:f7:
         81:f0:e7:57:b3:61:6b:55:fc:f3:08:8a:bf:e3:14:a8:bb:01:
         bf:0b:67:ce:81:be:3b:5a:7a:3c:46:ef:c4:ce:77:a4:bb:91:
         26:35:ba:63:77:e7:4e:ec:1d:19:f0:a1:32:07:24:79:0a:6f:
         6a:4d:e1:f3:44:1f:7e:cf:37:f5:2a:fd:7e:c3:1f:85:31:75:
         47:8b:8e:98:f5:61:fd:27:d3:b2:f4:37:14:e9:0d:e6:17:da:
         03:f9:af:cb:a6:45:62:d1:72:bc:1b:b5:22:83:e9:18:4e:11:
         54:08:ba:dd:ab:69:93:35:b4:a0:b2:7b:77:b5:5e:2e:fa:66:
         55:5f:11:0e:0a:c6:b1:3b:17:2d:ac:d0:3c:75:c3:c9:ec:48:
         1b:b0:4a:21:65:23:a6:22:ae:85:7b:88:9a:28:7b:56:b8:ee:
         75:dc:54:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:42:30 2025 by rpki-client