Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft
File:                     IWrR11qT4DeulPbJGJbS1YLY_1Q.mft (raw, json)
Hash identifier:          GI6CqhJFsQ9l1jna7EjbZqbA6WZW4+Wi+5LywpOCweM=
Subject key identifier:   BB:19:35:40:BC:57:DD:6B:AF:D4:F3:C6:9D:FC:7D:90:EC:62:92:DD
Authority key identifier: 21:6A:D1:D7:5A:93:E0:37:AE:94:F6:C9:18:96:D2:D5:82:D8:FF:54
Certificate issuer:       /CN=A91FDDD1/serialNumber=216AD1D75A93E037AE94F6C91896D2D582D8FF54
Certificate serial:       01AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft
Manifest number:          019E
Signing time:             Sun 19 Oct 2025 05:57:06 +0000
Manifest this update:     Sun 19 Oct 2025 05:57:05 +0000
Manifest next update:     Sun 26 Oct 2025 05:57:05 +0000
Files and hashes:         1: IWrR11qT4DeulPbJGJbS1YLY_1Q.crl (hash: zhpHT+e/BAfx1xZZV4EzpI0y6x17TMudF4vjWopEUAg=)
                          2: 838096CA3BD311EE84056461C4F9AE02.roa (hash: MRW+pxq2rIQWqz0eewlHDxgHTLGzIYysThVYJrp2BDc=)
                          3: 27DB37683BD211EE8094355FC4F9AE02.roa (hash: Fv5yzaRaYXm7EcaxJ9d0RT5up4myTdlO4UPvIXp3L88=)
                          4: 82C54A1E3BD311EE84056461C4F9AE02.roa (hash: mGJXgF/PKI9FEq/cPxsdqAyVl2gi74HVL2n1gwNWhDo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.crl
                          rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 05:57:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 428 (0x1ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FDDD1, serialNumber=216AD1D75A93E037AE94F6C91896D2D582D8FF54
        Validity
            Not Before: Oct 19 05:57:05 2025 GMT
            Not After : Oct 26 05:57:05 2025 GMT
        Subject: CN=68f47db2-f7b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e3:4c:7a:10:bc:b7:1d:6e:0c:59:d1:96:a3:
                    18:40:76:78:b3:03:7d:f9:20:9a:6a:3d:6a:23:8c:
                    5b:bf:64:c5:d2:fe:8d:a1:02:76:a6:3f:70:a5:5d:
                    ad:5c:59:3f:d1:c2:81:fb:0d:9c:03:81:a3:0a:5e:
                    8a:58:12:e1:d7:ef:1d:0e:10:f2:5e:b1:5e:ca:1d:
                    61:17:55:ae:11:07:2d:96:57:f5:5b:ef:ce:79:c6:
                    ed:57:78:3a:c0:db:fe:38:99:53:bd:44:ab:14:4b:
                    82:9d:2b:69:48:cb:af:88:3b:bb:60:da:1b:cf:d0:
                    24:78:78:23:26:70:87:bc:ea:13:2e:08:4f:1a:d8:
                    68:a0:ce:af:e4:7a:32:76:19:86:9e:bb:4c:8e:14:
                    da:00:77:cc:f5:5e:63:44:55:89:ea:27:d0:1b:d2:
                    45:da:11:8e:d8:e8:2a:de:04:1f:f9:28:c0:20:0b:
                    c0:02:4c:4f:ec:91:36:50:61:a0:71:8f:78:12:56:
                    9d:1b:e5:1d:b0:0d:03:db:d2:c9:1c:bc:8b:92:ad:
                    e5:10:1a:10:f0:03:40:81:3a:82:d5:ea:55:7f:57:
                    1b:1e:af:36:a7:b7:7e:f8:f9:e1:48:96:35:3b:90:
                    f3:a2:eb:d2:19:3a:3b:c1:52:3b:37:bc:1a:f1:8f:
                    1a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:19:35:40:BC:57:DD:6B:AF:D4:F3:C6:9D:FC:7D:90:EC:62:92:DD
            X509v3 Authority Key Identifier:
                keyid:21:6A:D1:D7:5A:93:E0:37:AE:94:F6:C9:18:96:D2:D5:82:D8:FF:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:ab:4b:18:06:cd:d9:5f:98:cb:c8:37:34:c0:b5:e2:b5:66:
         33:68:aa:7a:2e:b9:fb:5d:2e:cf:75:90:0e:e2:3a:a1:3f:26:
         90:9e:f9:b3:58:73:eb:30:49:b3:7f:61:5c:fc:0d:db:55:89:
         f0:7e:8b:e5:5b:48:46:70:9d:3c:8d:e8:be:d0:7a:c5:c2:04:
         f2:f4:a9:0c:13:62:e9:46:28:06:91:b4:db:ff:bf:c6:cb:68:
         ba:ab:71:5c:e4:50:09:96:7f:89:5d:b1:66:1e:ab:4e:1b:ac:
         b6:78:96:3c:e0:c3:ba:3a:d6:35:f4:d6:59:a3:2b:6d:93:d1:
         92:93:06:07:fd:40:e0:7d:d8:fd:17:07:48:84:40:05:d7:74:
         02:79:0a:fa:eb:25:af:75:3d:5a:24:4c:12:1b:29:06:ee:fe:
         9a:f2:be:79:5f:0d:18:c3:40:db:50:e3:70:7d:d7:bc:07:62:
         60:48:ca:16:73:8d:19:51:f3:9e:5a:5d:0d:af:23:fa:29:b2:
         c6:16:31:05:b4:bb:e0:49:d8:82:25:ef:f8:4c:7c:7b:d9:6b:
         ad:7e:19:2f:60:da:fe:2d:58:57:5a:e0:78:6a:ae:bf:5a:6e:
         ef:dc:11:7e:07:cd:51:3d:31:4e:0d:25:dc:50:e4:4c:51:c0:
         ad:51:15:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:40:51 2025 by rpki-client