Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft
File:                     bV1Q6IudZeiv2ijCzqYVAScDhgg.mft (raw, json)
Hash identifier:          vPY/UYwyMHIiCt7WHpBL+YUQMROVVoiSfIu3LOW8ink=
Subject key identifier:   16:8C:27:DB:E8:C0:E8:99:86:BE:D5:8F:B6:9C:90:B1:D8:4C:0A:DD
Authority key identifier: 6D:5D:50:E8:8B:9D:65:E8:AF:DA:28:C2:CE:A6:15:01:27:03:86:08
Certificate issuer:       /CN=A91E91BC/serialNumber=6D5D50E88B9D65E8AFDA28C2CEA6150127038608
Certificate serial:       0396
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft
Manifest number:          036A
Signing time:             Sun 19 Oct 2025 03:05:45 +0000
Manifest this update:     Sun 19 Oct 2025 03:05:44 +0000
Manifest next update:     Sun 26 Oct 2025 03:05:44 +0000
Files and hashes:         1: bV1Q6IudZeiv2ijCzqYVAScDhgg.crl (hash: BkOOKVcewe1K1YX3KXmgxdSiMSfMf/GQWsKiREBXl00=)
                          2: 142EA3A84FEF11EF9A822A21C4F9AE02.roa (hash: PsC0/VUJuwAMkmEBhdJkaydKW8CflQBB5EZOYU0cJtQ=)
                          3: D1A4CFBA4FBE11EF97812B80C4F9AE02.roa (hash: /TyJbdztz4Y61/Gz2zhowON+Tt9+b5wqgCKpbZ339lw=)
                          4: 328C9E7CDC1A11EC89244C2FC4F9AE02.roa (hash: SwY/Crs5L/QLrOTdNtWGBh9zEFcoCIW07axxQKOSACI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.crl
                          rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 03:05:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 918 (0x396)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E91BC, serialNumber=6D5D50E88B9D65E8AFDA28C2CEA6150127038608
        Validity
            Not Before: Oct 19 03:05:44 2025 GMT
            Not After : Oct 26 03:05:44 2025 GMT
        Subject: CN=68f45588-b40c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e5:ec:bb:41:dd:f1:59:64:ff:b0:97:85:2a:
                    83:2e:c4:38:ec:31:08:4c:38:2a:02:87:2a:b5:ea:
                    e5:89:12:1b:d1:07:88:4b:88:67:17:2a:36:a6:73:
                    30:31:f4:19:11:69:cb:28:65:cf:59:55:75:e2:47:
                    d2:44:42:70:c7:f8:ad:a4:84:d9:cb:7a:fd:ad:f0:
                    c9:b5:7d:42:bf:2d:51:bf:aa:d2:8b:05:ba:63:0f:
                    f5:29:27:c0:8a:21:36:30:c7:50:9b:a9:93:7a:a6:
                    7b:88:e5:79:8d:bc:49:47:55:a8:c6:69:5d:12:0a:
                    8f:2d:cc:61:d3:be:2c:f6:ec:32:4f:65:27:9a:a7:
                    c4:e6:a8:b2:34:91:69:cc:bc:3c:48:ad:9c:0a:3d:
                    a4:e7:f5:45:d4:dd:83:47:bf:9e:ce:da:b5:71:ea:
                    ed:ea:e8:f0:f4:23:7b:01:5f:94:db:97:c2:e0:18:
                    07:6f:ac:74:9a:8b:a8:c1:97:61:00:54:e0:7a:ad:
                    11:ae:3e:36:b9:0f:c5:8e:b4:37:08:b9:00:45:7b:
                    ae:a0:b3:ea:0e:6c:96:8d:f8:36:cc:39:3e:47:89:
                    f7:20:f7:73:06:ab:1b:7e:50:df:2f:eb:52:3a:56:
                    39:c3:6b:23:85:cc:77:62:8e:d0:00:b9:cc:dc:e2:
                    0f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:8C:27:DB:E8:C0:E8:99:86:BE:D5:8F:B6:9C:90:B1:D8:4C:0A:DD
            X509v3 Authority Key Identifier:
                keyid:6D:5D:50:E8:8B:9D:65:E8:AF:DA:28:C2:CE:A6:15:01:27:03:86:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:51:ae:e4:6e:ff:c5:4c:2b:f4:a2:b0:23:04:18:d9:34:d4:
         de:be:24:16:97:2a:18:b9:bc:48:4b:48:66:21:76:8b:71:7d:
         46:61:59:39:eb:17:c3:fa:95:fd:e3:40:0f:2b:07:1b:08:cf:
         ae:76:b7:7b:c0:ce:70:3e:d6:12:64:ac:37:6f:c9:54:1f:c9:
         20:9f:4f:71:22:80:b6:e2:b9:a5:b4:af:6a:ae:86:90:09:ec:
         54:aa:c0:ff:ab:95:3a:89:da:87:70:eb:2e:ae:aa:1a:e8:00:
         e4:77:20:f4:9a:f9:19:5c:49:6d:c2:15:71:dc:d1:13:59:f8:
         a5:e8:b2:91:10:cc:26:51:8d:df:4f:6b:2f:cf:db:57:58:5d:
         94:4e:c6:c9:39:0e:67:38:16:8d:07:ad:96:ea:97:7a:51:44:
         c5:1a:9f:c3:ba:ff:6e:d8:90:24:bc:e4:9c:53:93:7f:f0:80:
         37:c9:7c:13:c0:8b:90:bb:19:de:5b:8b:17:84:55:e0:f4:8c:
         2a:9d:b7:4c:7b:ea:a3:49:b6:db:3c:21:f6:86:ef:db:6b:58:
         41:54:b3:c0:4c:97:bf:d0:76:39:ec:71:7a:5c:35:46:0f:4d:
         52:3d:b1:3d:81:41:71:00:bb:48:4e:9e:95:21:b2:7b:fc:be:
         b7:9f:9a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:47:42 2025 by rpki-client