Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft
File:                     k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft (raw, json)
Hash identifier:          q6hRcZ16TDjchIeS50oyZ3GrNObD3Zl76sNTVW29Ytg=
Subject key identifier:   DC:3A:63:F3:3C:78:B6:04:9B:4B:6B:95:F2:19:32:62:4B:E3:6E:91
Authority key identifier: 93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57
Certificate issuer:       /CN=A91F4268/serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857
Certificate serial:       0597
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft
Manifest number:          054D
Signing time:             Sun 19 Oct 2025 01:20:27 +0000
Manifest this update:     Sun 19 Oct 2025 01:20:27 +0000
Manifest next update:     Sun 26 Oct 2025 01:20:27 +0000
Files and hashes:         1: k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl (hash: BiDqaX+nsGqdDMvpYxkbjV0th7ekM8YtX91xlyLGcfE=)
                          2: 7934717A3BA611EC8737B534C4F9AE02.roa (hash: w2mL/fsYRB6MmS8ED2TzYNgHT6YJdEKc1P9Mt7Z0I6E=)
                          3: BEDF72A076B911EF95DBF27CC4F9AE02.roa (hash: pFXUfU8J6+rawQvdZ0DzHycI68DJinKh4UA+nChrzC8=)
                          4: 39D8CF1893EB11EEB45D3A32C4F9AE02.roa (hash: ofRtHX/MKl5XIFnHo+xiQV/BMYeRiUmwlrnI4KBBFTU=)
                          5: 7879B24A3BA611EC8737B534C4F9AE02.roa (hash: HkMdZ/7Zyl8/WVPS96RNyLCvOlQjm91vFX9iVmHYTgY=)
                          6: B5960F8CB03111EEA45DE91DC4F9AE02.roa (hash: tO89KC6SX/YI4kYIo5r9IqXP4sUugJ5kj9ybH7Ev/Ck=)
                          7: 905F258E24F211EEA0863328C4F9AE02.roa (hash: JFZr5fqj2WXrU9XCj8pCx90LDWf5PYcEkCopcpVaJPw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl
                          rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 01:20:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1431 (0x597)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4268, serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857
        Validity
            Not Before: Oct 19 01:20:27 2025 GMT
            Not After : Oct 26 01:20:27 2025 GMT
        Subject: CN=68f43cdb-610e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e5:f7:6b:1f:3c:22:57:3b:6b:f9:dd:34:0e:
                    1a:7e:e5:3b:9b:5d:a6:65:4a:41:cc:5a:71:2a:78:
                    9f:88:07:d9:64:1d:4c:73:6b:66:0b:12:1a:d1:36:
                    bf:b5:46:ab:a4:dc:d6:5c:bf:17:02:b2:a6:e9:9c:
                    cd:13:ba:fe:d2:37:b0:96:b2:f9:f0:e1:85:d4:47:
                    ff:16:80:d7:5b:b9:55:1a:fd:eb:4d:97:8f:cd:d8:
                    f2:80:c8:81:6e:46:d3:67:92:9d:01:81:ae:5b:7b:
                    be:da:be:6f:72:11:31:5d:d0:9a:fe:3a:6a:a7:b5:
                    0e:a5:16:e5:7c:10:db:02:07:7c:b1:98:33:55:78:
                    e7:44:06:44:dd:6f:91:af:90:59:4d:47:67:68:b4:
                    ee:98:3b:96:8f:7b:e7:da:82:d7:ba:3b:00:31:13:
                    b1:cf:3d:c4:13:c7:25:69:a3:8e:74:d6:e5:90:1e:
                    ab:4d:b7:98:9a:ca:4d:da:44:11:6d:73:78:3f:ac:
                    4c:d9:b1:96:b2:c6:d2:1b:75:61:60:fb:ca:10:ec:
                    9c:34:fb:4a:71:a4:27:2a:10:79:67:54:09:ca:91:
                    05:21:c7:0f:ac:24:fa:da:e8:08:e8:38:1d:a1:2a:
                    cf:9e:32:03:87:5a:99:05:6c:a6:5f:df:b7:e0:5e:
                    8b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:3A:63:F3:3C:78:B6:04:9B:4B:6B:95:F2:19:32:62:4B:E3:6E:91
            X509v3 Authority Key Identifier:
                keyid:93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e5:58:57:0d:f6:a1:3e:33:e4:84:69:67:33:d2:cf:b7:cb:ae:
         31:fd:a5:72:6b:eb:a1:41:dc:ef:4b:7f:0d:4f:45:ef:4f:0d:
         05:1c:a5:b6:9a:4a:fd:f2:7f:4c:bf:54:33:ac:a7:c5:ce:e0:
         64:eb:8b:f3:1a:69:2d:dc:f5:7f:18:57:28:34:fa:82:15:9e:
         ff:38:07:58:b5:c2:97:6a:58:c8:b6:a0:67:80:b1:6a:eb:52:
         74:be:a8:35:8f:f3:94:a8:03:bc:18:1a:29:be:a6:74:c1:00:
         6a:9b:c1:49:41:f7:c3:29:30:6a:fa:37:ce:7b:03:e3:ff:51:
         42:7d:a9:16:56:e2:c9:50:18:33:0e:eb:5a:ae:34:69:45:e8:
         ec:da:72:4c:71:c0:69:0d:33:aa:7e:64:f4:f0:47:66:9d:73:
         fd:8b:53:8e:ae:48:5c:5f:0e:23:05:69:ba:8d:d5:aa:2f:91:
         c4:36:66:46:8d:9c:93:80:f7:7f:31:6a:d6:ee:c5:c3:a4:a1:
         37:2b:d4:30:dd:eb:17:5f:45:68:0e:c2:82:14:6b:8d:b4:65:
         b1:f5:c6:17:68:65:50:3d:44:2f:6f:e1:bc:03:2c:47:e1:31:
         c3:45:e7:f4:5d:0c:97:cd:fa:95:f2:84:72:06:31:0d:69:36:
         17:82:e4:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:39:55 2025 by rpki-client