Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91106C7/6F03D630320E11EFB6E0DA76C4F9AE02/Ip7mz7eVhLojEKzORSg496SKUB4.mft
File:                     Ip7mz7eVhLojEKzORSg496SKUB4.mft (raw, json)
Hash identifier:          arD6+Rng5/CjIaxdp3DmULwgPLNbWg/YqpnDreBlOEE=
Subject key identifier:   59:0B:D5:A1:FF:A4:BC:BC:07:6A:40:8A:E0:7D:E7:AA:A2:8F:3A:3D
Authority key identifier: 22:9E:E6:CF:B7:95:84:BA:23:10:AC:CE:45:28:38:F7:A4:8A:50:1E
Certificate issuer:       /CN=A91106C7/serialNumber=229EE6CFB79584BA2310ACCE452838F7A48A501E
Certificate serial:       0112
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ip7mz7eVhLojEKzORSg496SKUB4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91106C7/6F03D630320E11EFB6E0DA76C4F9AE02/Ip7mz7eVhLojEKzORSg496SKUB4.mft
Manifest number:          0108
Signing time:             Mon 03 Nov 2025 05:04:40 +0000
Manifest this update:     Mon 03 Nov 2025 05:04:39 +0000
Manifest next update:     Mon 10 Nov 2025 05:04:39 +0000
Files and hashes:         1: Ip7mz7eVhLojEKzORSg496SKUB4.crl (hash: aVZicN5TBOPT6Py69Ej0jFJHGaV8K7xvqq8LAmmIJuo=)
                          2: 4F179FFA45C711F09D90C528C4F9AE02.roa (hash: AoqGhpw1dfLgh3xeboUCFj7o3T5zts+KEOp4p0FPim4=)
                          3: E02064A0C9E911EFABA90568C4F9AE02.roa (hash: 1KWYaNEqXlQZbYyzbVPFnEogKXP5LSRzPFTHIQIRAMw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91106C7/6F03D630320E11EFB6E0DA76C4F9AE02/Ip7mz7eVhLojEKzORSg496SKUB4.crl
                          rsync://rpki.apnic.net/member_repository/A91106C7/6F03D630320E11EFB6E0DA76C4F9AE02/Ip7mz7eVhLojEKzORSg496SKUB4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ip7mz7eVhLojEKzORSg496SKUB4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 05:04:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 274 (0x112)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91106C7, serialNumber=229EE6CFB79584BA2310ACCE452838F7A48A501E
        Validity
            Not Before: Nov  3 05:04:39 2025 GMT
            Not After : Nov 10 05:04:39 2025 GMT
        Subject: CN=690837e7-aa30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:72:1b:44:7c:9a:fb:6b:20:39:5a:6c:57:1b:
                    2d:f7:11:9a:a1:34:7f:06:b8:fc:39:76:a8:40:2b:
                    e8:3d:ed:67:38:11:19:c5:24:da:e9:53:d3:48:9e:
                    21:81:5f:69:2b:d3:bd:2d:5c:d0:8a:e6:a1:a7:9d:
                    b9:31:c6:a8:74:d1:f2:ab:01:3d:18:10:02:52:0e:
                    ff:ad:1e:d3:94:6e:76:0e:2c:64:cb:28:f1:0f:92:
                    5b:37:03:c7:64:da:ce:eb:77:71:21:52:9c:a5:6b:
                    0a:7c:4a:f6:e5:8b:86:9f:82:0a:16:3b:f1:ff:4e:
                    32:8a:e2:79:4a:10:70:9a:19:aa:d4:33:0a:2d:1d:
                    10:89:39:09:e2:2c:22:c0:a2:75:dd:bd:97:fc:80:
                    de:1c:9a:88:b5:8e:70:b3:30:44:86:25:68:8a:2b:
                    1f:fc:69:da:9b:e5:9c:b6:50:2c:ee:06:50:a5:96:
                    3b:23:0a:d0:e0:60:bd:e6:18:74:0a:6a:22:37:15:
                    25:ad:65:1d:ea:7a:12:b5:0d:dc:15:d5:dd:9b:88:
                    71:e9:d5:f6:f2:83:47:9c:e7:f1:74:ae:5c:9a:30:
                    78:c4:38:65:ab:89:4e:20:6f:e1:d2:d4:b7:15:2e:
                    c1:2c:41:0c:4b:41:fe:67:1e:0d:cd:81:bc:77:f1:
                    57:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:0B:D5:A1:FF:A4:BC:BC:07:6A:40:8A:E0:7D:E7:AA:A2:8F:3A:3D
            X509v3 Authority Key Identifier:
                keyid:22:9E:E6:CF:B7:95:84:BA:23:10:AC:CE:45:28:38:F7:A4:8A:50:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91106C7/6F03D630320E11EFB6E0DA76C4F9AE02/Ip7mz7eVhLojEKzORSg496SKUB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ip7mz7eVhLojEKzORSg496SKUB4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91106C7/6F03D630320E11EFB6E0DA76C4F9AE02/Ip7mz7eVhLojEKzORSg496SKUB4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:84:c3:c3:aa:40:2b:6f:d4:45:11:22:df:19:09:40:c3:eb:
         0f:d4:71:fd:a0:a0:4e:92:f5:53:16:df:9c:8a:fb:24:23:a1:
         69:52:5d:7a:c9:76:d7:3d:5c:ef:15:41:75:bf:d7:be:70:b1:
         76:ee:4e:42:76:e1:af:59:21:75:59:6a:12:79:2e:c4:07:80:
         5a:5c:4e:b6:93:d6:57:48:df:44:53:bb:57:75:92:3a:65:f3:
         7c:af:b9:09:45:6e:9f:1b:0a:b9:bb:45:76:8e:1c:b3:6a:3c:
         eb:32:94:27:17:d4:10:1f:89:9c:07:90:59:ca:54:ea:d8:62:
         9a:f8:65:a6:69:ce:37:e7:e7:eb:91:c8:e8:85:e5:aa:01:db:
         38:37:94:98:cf:0c:e4:df:18:0b:8d:ef:f9:cc:fe:ad:f2:2f:
         d6:fe:db:19:e3:8c:cd:a9:d1:53:a3:0f:58:e3:16:6d:4e:b3:
         00:d4:d5:2d:76:9f:dc:fb:40:74:5f:0e:66:ad:fe:9b:80:80:
         45:96:25:b6:80:88:40:34:9c:0e:40:54:bd:55:f3:68:7c:62:
         b5:50:50:0b:e2:d0:40:80:1b:7b:0d:e0:5b:29:9d:fe:b8:55:
         df:ed:af:c5:d3:5e:78:e1:3f:a1:35:8d:33:e1:79:d7:ef:f3:
         72:a3:61:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:18:16 2025 by rpki-client