Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC765/E5C74BAA7F8111E6898E5F45C4F9AE02/TihN8oxlIKdxEwQV85PINH1ubek.mft
File:                     TihN8oxlIKdxEwQV85PINH1ubek.mft (raw, json)
Hash identifier:          tr2z1oFtKqdC+C1APVD30h2TWYQEQ1IS9tzKgU4ETnk=
Subject key identifier:   11:9E:B8:4E:6C:73:20:61:EC:F8:55:86:AD:A6:5D:B8:63:52:FE:67
Authority key identifier: 4E:28:4D:F2:8C:65:20:A7:71:13:04:15:F3:93:C8:34:7D:6E:6D:E9
Certificate issuer:       /CN=A91FC765/serialNumber=4E284DF28C6520A771130415F393C8347D6E6DE9
Certificate serial:       1E8B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TihN8oxlIKdxEwQV85PINH1ubek.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FC765/E5C74BAA7F8111E6898E5F45C4F9AE02/TihN8oxlIKdxEwQV85PINH1ubek.mft
Manifest number:          1E81
Signing time:             Sat 18 Oct 2025 16:20:44 +0000
Manifest this update:     Sat 18 Oct 2025 16:20:43 +0000
Manifest next update:     Sat 25 Oct 2025 16:20:43 +0000
Files and hashes:         1: TihN8oxlIKdxEwQV85PINH1ubek.crl (hash: CKjU8WE64W4USHTe9w9WX4ohPn8tbOZiZFMla/kdFXo=)
                          2: 9071A5E690CB11E6A804EF84C4F9AE02.roa (hash: Lxohf2VrEq5kdMHODmRZ0pz5VX7gk6t5HOgofkIu3rQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FC765/E5C74BAA7F8111E6898E5F45C4F9AE02/TihN8oxlIKdxEwQV85PINH1ubek.crl
                          rsync://rpki.apnic.net/member_repository/A91FC765/E5C74BAA7F8111E6898E5F45C4F9AE02/TihN8oxlIKdxEwQV85PINH1ubek.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TihN8oxlIKdxEwQV85PINH1ubek.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 16:20:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7819 (0x1e8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FC765, serialNumber=4E284DF28C6520A771130415F393C8347D6E6DE9
        Validity
            Not Before: Oct 18 16:20:43 2025 GMT
            Not After : Oct 25 16:20:43 2025 GMT
        Subject: CN=68f3be5b-8a97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:af:5d:dc:fd:17:b1:dd:c9:f8:d6:d2:ed:a6:
                    a6:58:a9:fd:e7:90:6c:24:2e:37:3a:3a:66:3e:97:
                    17:6b:f0:97:62:6f:50:c4:7e:19:e3:4d:cc:47:e7:
                    a4:bc:6a:97:a8:76:78:8c:7b:54:93:25:c6:db:53:
                    d7:f0:66:64:e9:b5:bb:8d:d4:26:90:39:ff:04:c9:
                    f3:c9:a8:f0:b9:80:ea:a3:61:27:ac:a6:8d:74:5e:
                    7d:4e:11:b2:6a:73:03:fc:47:9b:60:2c:a1:00:06:
                    26:05:8b:f6:f5:fb:8a:87:c2:43:0b:7f:62:59:4e:
                    f2:e8:72:46:d9:5f:11:3b:b4:9b:21:41:cb:db:42:
                    e1:fe:c5:81:27:b4:d5:3d:25:fa:52:8a:e2:e2:10:
                    1e:a7:85:a7:ec:6d:9d:a6:68:1e:31:f0:cf:7a:1f:
                    d0:96:5b:15:e3:d8:1e:00:0e:90:8f:0f:23:fe:5c:
                    5a:16:53:dd:e5:52:c1:27:c1:6a:13:23:ee:05:a8:
                    1b:3c:80:a8:a1:11:42:c8:bc:27:8b:3d:44:06:46:
                    2b:9f:dc:8c:dc:1f:fd:c3:cb:cc:0f:36:25:3d:1a:
                    ab:98:08:28:4a:e1:c2:d0:a1:3e:77:aa:6a:d5:a1:
                    29:1e:3b:e9:4a:a1:09:bd:76:d9:08:97:19:0d:2e:
                    eb:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:9E:B8:4E:6C:73:20:61:EC:F8:55:86:AD:A6:5D:B8:63:52:FE:67
            X509v3 Authority Key Identifier:
                keyid:4E:28:4D:F2:8C:65:20:A7:71:13:04:15:F3:93:C8:34:7D:6E:6D:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FC765/E5C74BAA7F8111E6898E5F45C4F9AE02/TihN8oxlIKdxEwQV85PINH1ubek.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TihN8oxlIKdxEwQV85PINH1ubek.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC765/E5C74BAA7F8111E6898E5F45C4F9AE02/TihN8oxlIKdxEwQV85PINH1ubek.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:26:7f:ee:fb:cc:a5:38:9a:c3:72:16:13:b2:45:a0:ef:fa:
         d9:ea:94:28:cf:a2:a4:b6:72:ae:b0:4b:7a:09:83:74:d0:d1:
         65:71:4d:63:1c:96:86:a2:6a:65:57:40:ae:a1:4d:49:df:a8:
         18:66:97:56:cc:ef:4e:61:a5:f8:26:c7:bf:24:6f:b9:49:48:
         8f:4e:3c:3e:e5:2e:dc:da:ce:35:b0:4f:8b:7a:ad:5a:77:91:
         b2:47:d2:9e:00:44:5a:f1:ee:d8:73:a3:df:b1:f0:d3:4f:d6:
         27:e4:26:f2:44:2a:e8:3a:bc:18:c9:ea:99:57:f1:b7:d9:1c:
         3e:c4:b7:f5:65:ce:df:b5:27:70:47:70:41:8d:99:87:34:0e:
         e8:44:8a:2d:58:32:93:27:05:23:42:ee:89:60:d1:00:70:49:
         15:25:8b:92:9d:51:94:b5:12:23:03:53:ac:d3:81:1e:f4:d2:
         2e:9c:4f:fb:52:55:0a:9c:ba:ce:9e:56:95:91:d5:12:9b:92:
         ce:ae:5a:cd:98:f7:c7:25:50:f0:78:41:76:29:87:cf:3a:19:
         c1:f2:6d:35:ff:ef:4f:b6:98:3f:f5:ef:3d:8b:03:3a:fa:a7:
         65:82:9d:c1:d6:a1:38:ca:85:8a:6d:df:ae:22:2c:ca:e8:50:
         c3:22:61:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:34:21 2025 by rpki-client