Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft
File:                     ppcA540MgSrS4sEUyCxlWgrNRH8.mft (raw, json)
Hash identifier:          gMNmZpYk9Y17qio1b7r045eB/eE5ouyhNuM/3nk9pvs=
Subject key identifier:   8E:AC:AD:8C:57:55:16:ED:FB:B8:AC:B7:CB:CB:BF:25:28:A8:F5:2D
Authority key identifier: A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F
Certificate issuer:       /CN=A91EB2B8/serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F
Certificate serial:       0330
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft
Manifest number:          02E4
Signing time:             Sun 19 Oct 2025 03:54:33 +0000
Manifest this update:     Sun 19 Oct 2025 03:54:33 +0000
Manifest next update:     Sun 26 Oct 2025 03:54:33 +0000
Files and hashes:         1: ppcA540MgSrS4sEUyCxlWgrNRH8.crl (hash: fVItGizGLbRzJ/1qLsp6c5vAE7dvod4L3Miw7KFiHLk=)
                          2: 20978DD270E411F08F40242AC4F9AE02.roa (hash: 84pcGrR9yrb0lc+y5Ras78T88Umec4YhuuH1jDixkUs=)
                          3: A48D6CEEED6311EDB69EB62AC4F9AE02.roa (hash: QBFNp4MmnEBSv9rQ1ZErIYUdcQY3it7GFZoZDBAM4/Q=)
                          4: A55DE586ED6311EDB69EB62AC4F9AE02.roa (hash: ZKyZxyNBz5zb2OW/liXlXub2chKOr5/WEo8h6rjJk8k=)
                          5: 29F2A6202EF711F08A285219C4F9AE02.roa (hash: BDQ/cIT9onHOd5JfvUTITTE8/WzzYdypmVwFJRuUaNk=)
                          6: 2395AD02E44911EFB4261C43C4F9AE02.roa (hash: yVwnO56nbUbnCX/cr4Z5ZK8KQTm634H9qAQ3mEA0k1k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl
                          rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 03:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 816 (0x330)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EB2B8, serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F
        Validity
            Not Before: Oct 19 03:54:33 2025 GMT
            Not After : Oct 26 03:54:33 2025 GMT
        Subject: CN=68f460f9-73fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d6:5e:cb:2a:16:10:37:88:d4:ab:31:7d:32:
                    13:56:26:62:2a:0e:e4:8e:8d:d8:6d:1f:c3:77:cc:
                    6a:e7:db:b3:17:96:79:d2:e2:51:3c:ea:bf:f0:ef:
                    b5:76:0b:7c:37:13:cd:79:f7:4f:6e:39:05:87:13:
                    a9:78:bb:57:a8:f2:13:1f:76:d4:db:1a:16:50:69:
                    39:da:60:74:65:90:8b:3a:47:b9:04:0c:38:25:f3:
                    a1:93:af:60:5d:d9:19:9f:c5:cb:94:ba:14:28:be:
                    6c:09:9b:dd:ff:59:3a:8a:e1:e4:2e:aa:ef:b6:84:
                    4f:54:d5:60:0e:f7:45:f0:2f:16:70:db:f5:33:1e:
                    ba:f9:57:25:86:1d:18:f2:d0:74:36:59:b9:8e:8f:
                    42:5d:67:ac:40:74:0e:da:c6:a7:67:a4:c9:03:e9:
                    9f:82:cc:b6:bf:f8:24:ef:78:4b:ee:80:34:f3:8f:
                    f5:4b:16:cc:d6:27:88:a5:9e:f1:ed:83:b1:35:17:
                    f4:10:48:f7:57:ce:e9:79:14:3b:35:2b:10:57:05:
                    cb:29:d8:b7:38:61:94:b1:7b:26:7c:0e:61:4e:c2:
                    aa:27:f9:02:f7:0a:ea:27:47:a0:30:6e:69:e9:9f:
                    04:f9:89:11:b6:14:ef:72:04:00:27:b2:21:90:d6:
                    b1:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:AC:AD:8C:57:55:16:ED:FB:B8:AC:B7:CB:CB:BF:25:28:A8:F5:2D
            X509v3 Authority Key Identifier:
                keyid:A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:dc:a6:da:2b:fc:e9:82:37:3a:38:09:f4:85:fe:75:1c:68:
         86:a1:fb:6b:73:70:a6:93:8d:6c:ea:8b:e1:56:74:8d:48:a3:
         1c:d4:12:4c:34:36:16:21:ee:56:f9:7e:54:46:1f:c5:8d:c0:
         c2:1c:46:2d:bf:1a:d5:34:34:a7:6c:2e:1a:11:e0:3a:ae:1d:
         0a:08:70:78:07:3d:24:b3:3b:e1:56:90:cf:85:52:36:22:d8:
         3c:78:e2:6b:2f:4a:6a:0f:b0:54:bc:0e:65:ff:fd:84:e8:32:
         f5:9a:aa:32:d3:c3:73:68:81:54:c9:a4:f8:b5:f7:de:9c:e9:
         9a:17:48:38:53:55:26:8e:39:28:79:18:25:1b:46:ae:9d:ab:
         f1:d7:6c:24:4a:43:a4:ba:68:c9:25:5c:6b:26:af:dd:da:02:
         24:e6:df:67:00:2a:4c:a1:be:0c:85:10:fc:bd:40:c9:35:54:
         a9:71:ec:30:2f:05:07:dc:09:b8:40:47:48:6d:82:31:45:fd:
         84:ea:cc:0e:fa:a6:9d:ef:63:fe:ed:82:17:a5:19:a5:0b:f9:
         46:04:4d:0f:94:a9:29:17:7d:a2:70:ca:53:6e:db:aa:8c:00:
         8d:c6:60:eb:21:64:7f:47:fb:7e:fd:a0:0b:33:7d:45:ce:44:
         cb:16:90:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:23:27 2025 by rpki-client