Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.mft
File:                     _y7elNMHvCOJpLc5WSplf3FhzKI.mft (raw, json)
Hash identifier:          by4oW4oYJ8Jx+W7oi9seGN7lF59wc8mgHbvvisBX+Es=
Subject key identifier:   85:5F:E2:DA:87:10:19:17:44:3C:08:CC:1D:5C:94:4A:8F:24:E8:95
Authority key identifier: FF:2E:DE:94:D3:07:BC:23:89:A4:B7:39:59:2A:65:7F:71:61:CC:A2
Certificate issuer:       /CN=A911A7C2/serialNumber=FF2EDE94D307BC2389A4B739592A657F7161CCA2
Certificate serial:       0172
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_y7elNMHvCOJpLc5WSplf3FhzKI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.mft
Manifest number:          016C
Signing time:             Mon 03 Nov 2025 03:55:04 +0000
Manifest this update:     Mon 03 Nov 2025 03:55:04 +0000
Manifest next update:     Mon 10 Nov 2025 03:55:04 +0000
Files and hashes:         1: _y7elNMHvCOJpLc5WSplf3FhzKI.crl (hash: F3akG98xae6FywsQA4FEL6MSsT4Gk19AAyOVnscVbbM=)
                          2: BFA5084C8E9011EEAD56911CC4F9AE02.roa (hash: fV5G2JHx/0fBFcbcRO1EqGSRjg68YJvhatHDOdfRaJ8=)
                          3: 020CCB128E9011EEB7C5651BC4F9AE02.roa (hash: Ftqlgd8k9h+7jvDiAqF4wkjpcUSN8GhKRQccLRNHlws=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.crl
                          rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_y7elNMHvCOJpLc5WSplf3FhzKI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 03:55:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 370 (0x172)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A7C2, serialNumber=FF2EDE94D307BC2389A4B739592A657F7161CCA2
        Validity
            Not Before: Nov  3 03:55:04 2025 GMT
            Not After : Nov 10 03:55:04 2025 GMT
        Subject: CN=69082798-449b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:07:7e:8a:94:fc:db:9a:19:26:1c:8e:49:7e:
                    0b:b2:28:21:9d:40:af:74:29:5e:c1:24:be:c2:69:
                    07:87:45:ad:54:b8:46:eb:70:13:3d:21:ff:92:f4:
                    de:36:24:71:ac:08:94:45:bb:a6:da:cb:cf:6d:cf:
                    dc:4f:05:73:88:1d:1d:37:db:33:a7:1d:fa:a8:31:
                    a8:e8:25:e4:d9:7b:59:47:20:89:a7:cb:1d:51:fd:
                    cc:96:98:db:2d:89:61:57:56:c3:19:21:77:20:cd:
                    a0:d1:2e:7e:9e:74:e8:8e:35:2c:06:14:7c:49:ae:
                    f1:9f:ef:85:5c:fd:af:e7:80:2d:29:7c:ba:44:86:
                    a8:17:12:25:dc:4a:8a:3c:ef:4d:af:a6:80:20:31:
                    83:58:6e:42:67:d0:f1:3d:af:e1:d0:97:ab:2f:e3:
                    40:a7:17:47:80:86:93:97:7e:a3:16:1e:06:73:9e:
                    6a:41:92:e4:5a:7e:5f:eb:76:d4:2a:fc:a7:2c:de:
                    5a:a6:dc:e0:a3:da:44:b7:78:92:89:d8:a0:bd:bc:
                    67:35:56:b4:e7:26:1f:bc:46:10:46:7e:7f:2d:81:
                    12:05:da:4a:fc:97:d0:a4:d0:3a:c3:93:ab:6f:d8:
                    60:b5:40:b9:df:25:04:7e:aa:a2:ec:48:c7:67:fc:
                    34:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:5F:E2:DA:87:10:19:17:44:3C:08:CC:1D:5C:94:4A:8F:24:E8:95
            X509v3 Authority Key Identifier:
                keyid:FF:2E:DE:94:D3:07:BC:23:89:A4:B7:39:59:2A:65:7F:71:61:CC:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_y7elNMHvCOJpLc5WSplf3FhzKI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:dd:ae:43:d7:4e:a2:f7:d4:5d:d0:6e:5b:6c:4d:ad:38:b5:
         f6:23:64:ab:b6:69:da:a0:1f:dc:5c:c6:97:cd:54:40:e0:e6:
         0e:4d:39:40:e3:12:bd:2b:ec:a1:3a:a8:c9:2a:1b:78:0d:13:
         a1:8d:ee:be:4c:a9:8e:d0:ab:2c:dc:d4:88:2f:73:4b:d1:e6:
         e3:d1:65:c5:01:b0:b0:ab:86:e8:26:be:21:bc:e8:5a:a3:b9:
         cf:f4:10:37:c8:ee:d4:a6:ff:c0:29:c6:ef:c7:c1:7c:5e:df:
         9d:b1:e9:ae:69:1f:d0:e3:d7:28:90:8a:c5:9f:e4:9e:06:44:
         cd:9b:c5:92:a6:d4:de:cd:20:5d:25:48:af:6a:7d:5a:38:f1:
         4a:57:ff:b7:40:12:b2:5f:66:75:03:d3:6a:68:ed:7c:51:59:
         5b:5c:89:81:c8:13:c8:79:a6:48:b9:72:94:49:52:e4:08:4b:
         f1:7d:0a:d2:e2:05:e0:05:e6:e1:dd:a7:0c:02:5e:f8:5c:ca:
         39:3f:d2:9c:f8:43:b0:82:cf:06:49:a5:cb:99:ec:b0:83:fd:
         cc:10:2e:42:19:71:8a:94:18:78:ed:a5:66:89:e0:51:65:36:
         b8:6c:29:32:a6:82:be:6d:b9:91:ac:33:de:bc:b5:a1:90:e1:
         a5:0d:0b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:04:55 2025 by rpki-client