Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft
File:                     p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft (raw, json)
Hash identifier:          8Io1h3/9wYk4yzGHnz6JD12QpXhCPCB8+aXG4SJKvDI=
Subject key identifier:   E6:DD:63:69:60:47:E9:2A:85:A6:DC:94:28:63:A6:5A:E1:BC:E5:8D
Authority key identifier: A7:6B:71:0C:D2:36:0A:2E:26:82:FD:2B:80:71:8A:19:88:39:66:04
Certificate issuer:       /CN=A91EFD20/serialNumber=A76B710CD2360A2E2682FD2B80718A1988396604
Certificate serial:       F0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft
Manifest number:          EE
Signing time:             Sun 19 Oct 2025 08:17:29 +0000
Manifest this update:     Sun 19 Oct 2025 08:17:29 +0000
Manifest next update:     Sun 26 Oct 2025 08:17:29 +0000
Files and hashes:         1: p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.crl (hash: jaVuIwxv1c+u/CgAoIZ2YXhJBhy54VFLg7VA0xJ/9nU=)
                          2: 80A57534433311EF94E79D23C4F9AE02.roa (hash: Ph9PQO0HR4nUNS7ci1voMb24Pze4tYQXnav/XFcYles=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.crl
                          rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 08:17:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 240 (0xf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EFD20, serialNumber=A76B710CD2360A2E2682FD2B80718A1988396604
        Validity
            Not Before: Oct 19 08:17:29 2025 GMT
            Not After : Oct 26 08:17:29 2025 GMT
        Subject: CN=68f49e99-fa04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:93:bb:73:f9:f3:90:c5:64:a2:78:cb:9d:b7:
                    4b:d8:16:1e:ec:64:17:22:4e:64:b9:8e:ee:72:00:
                    22:57:89:2d:3b:ed:6e:5e:68:00:29:f6:e0:48:b8:
                    49:37:2d:80:3b:6a:d2:7d:14:70:a8:76:19:4c:c9:
                    a0:79:a3:a4:52:4f:1f:22:1e:53:f1:ea:de:8a:2b:
                    33:88:20:3c:52:fb:57:2a:01:c8:4f:6b:74:5e:7f:
                    6d:7b:61:d0:c2:0e:72:22:6b:2b:07:c1:fd:a2:3a:
                    bd:a7:e3:04:3f:a8:81:80:f1:18:51:a6:dd:47:cd:
                    e3:b6:8c:55:41:5c:7b:17:58:26:de:6a:8d:50:ef:
                    f8:9f:02:3a:ec:d3:77:11:30:2f:21:d7:b0:a3:a7:
                    5a:51:33:00:d5:eb:72:cc:fc:f6:90:2c:25:6e:be:
                    f9:aa:bc:6c:3e:aa:cd:bc:3b:71:5b:0c:48:ef:2f:
                    58:2f:cf:e6:f3:90:16:b4:91:00:d9:83:2a:1a:ba:
                    67:67:9f:be:3c:36:3f:26:cf:0f:0c:da:30:43:f3:
                    47:ae:59:f7:5c:55:39:04:07:56:da:7c:18:db:5c:
                    4b:62:93:93:cb:34:a6:0f:62:59:f6:a7:f2:50:01:
                    4d:c7:1a:10:44:73:19:8e:68:6b:11:83:ee:16:17:
                    b4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:DD:63:69:60:47:E9:2A:85:A6:DC:94:28:63:A6:5A:E1:BC:E5:8D
            X509v3 Authority Key Identifier:
                keyid:A7:6B:71:0C:D2:36:0A:2E:26:82:FD:2B:80:71:8A:19:88:39:66:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:b2:45:b7:8f:d1:10:ac:a5:15:dc:af:7a:f2:c8:e9:75:29:
         d8:85:bf:c4:81:28:d9:e8:f5:e1:bd:3c:10:fc:a0:13:b3:16:
         ef:da:7e:2f:1a:d0:6c:ac:71:0a:18:f8:fc:cc:92:5e:43:00:
         41:7b:06:65:8b:f3:46:c9:03:28:9b:90:20:eb:16:95:c5:aa:
         01:84:90:73:45:16:19:00:d2:f8:cf:64:64:eb:57:26:f3:86:
         2b:b1:02:e7:61:ac:f2:f1:d7:21:af:f5:70:71:79:ef:af:4b:
         95:31:fb:dc:5f:0f:24:37:3b:a1:19:45:53:e4:4a:c9:fb:4f:
         36:3e:29:20:df:8f:3e:cb:60:9d:16:77:0a:5d:49:30:62:b3:
         fc:03:d1:31:ef:73:67:4d:2d:8b:7a:ce:f6:d4:b1:d8:f3:65:
         54:03:6f:04:13:00:96:af:85:e3:ef:11:8f:d9:cc:34:0c:7f:
         0b:ec:4c:2b:95:f9:8e:48:ca:12:af:35:fe:7a:7f:13:3a:94:
         c9:db:a8:12:0d:a3:28:29:f1:ec:4a:d0:b6:02:e0:7b:4a:44:
         03:47:bf:ef:ec:5b:3c:94:db:13:a9:39:57:b7:28:74:63:d6:
         39:67:fe:0f:28:10:ed:71:88:12:dc:7c:7d:c6:08:40:25:a5:
         d2:8c:75:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:47:22 2025 by rpki-client