Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/vIYhQTCXFsDk3Dff_zPlqwxVStA.mft
File:                     vIYhQTCXFsDk3Dff_zPlqwxVStA.mft (raw, json)
Hash identifier:          3YnuXk58zK15lV/OoWyKxvEtsTJ3CWnO3hPDpVKV62I=
Subject key identifier:   77:C6:A0:C3:DA:FD:15:8E:83:F9:38:68:E4:6C:D7:84:0A:BE:10:3F
Authority key identifier: BC:86:21:41:30:97:16:C0:E4:DC:37:DF:FF:33:E5:AB:0C:55:4A:D0
Certificate issuer:       /CN=A911EA27/serialNumber=BC862141309716C0E4DC37DFFF33E5AB0C554AD0
Certificate serial:       024C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYhQTCXFsDk3Dff_zPlqwxVStA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/vIYhQTCXFsDk3Dff_zPlqwxVStA.mft
Manifest number:          0243
Signing time:             Wed 05 Nov 2025 01:53:05 +0000
Manifest this update:     Wed 05 Nov 2025 01:53:05 +0000
Manifest next update:     Wed 12 Nov 2025 01:53:05 +0000
Files and hashes:         1: vIYhQTCXFsDk3Dff_zPlqwxVStA.crl (hash: J05/vrEgj/6VoTo0sM2V+V9SnuvHjCk8HmyoNmkK/cw=)
                          2: 3DE0E9065F0811EDB42DC97FC4F9AE02.roa (hash: mMG9bEWCN7YmxGDEifOxzTHyHFARTgi2snMHU3b4IPo=)
                          3: 3F2E65045F0811EDB42DC97FC4F9AE02.roa (hash: M+VldN3Zj4ItVsLXsshINI4uEpHeIoXEm9jDZJqFneg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/vIYhQTCXFsDk3Dff_zPlqwxVStA.crl
                          rsync://rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/vIYhQTCXFsDk3Dff_zPlqwxVStA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYhQTCXFsDk3Dff_zPlqwxVStA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 01:38:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 588 (0x24c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911EA27, serialNumber=BC862141309716C0E4DC37DFFF33E5AB0C554AD0
        Validity
            Not Before: Nov  5 01:53:05 2025 GMT
            Not After : Nov 12 01:53:05 2025 GMT
        Subject: CN=690aae01-00d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:d0:0a:40:c8:27:12:b5:6a:b1:ad:ec:6c:04:
                    48:3d:36:60:3c:51:30:2a:d6:e0:03:d8:91:eb:83:
                    7c:90:b3:cc:6e:9a:29:5d:c7:c6:38:f7:2c:0f:6f:
                    8d:29:41:25:22:1e:53:62:7a:13:5a:98:73:14:f4:
                    80:65:39:6d:6a:e3:d5:2b:62:31:5d:b1:8e:85:ea:
                    59:d9:b4:5e:e1:32:71:68:32:41:0c:37:2a:af:31:
                    f6:be:f6:6f:b7:72:ef:4f:35:82:3a:ab:86:41:32:
                    0d:7d:03:3f:3b:b9:2b:43:88:58:e0:44:50:cb:83:
                    3d:5f:d4:c6:58:c6:e3:6a:17:bb:c0:ea:03:90:0c:
                    49:f1:8c:fd:97:8c:46:ed:6e:17:ba:a8:2a:35:bb:
                    f2:3d:ab:ef:1d:48:ed:5b:d1:26:77:1b:bd:94:cc:
                    ea:a7:5e:39:7d:6a:66:48:4c:b7:c4:bf:4c:75:5a:
                    34:e2:18:8c:43:fa:eb:1e:61:12:9f:17:da:c2:1c:
                    34:3b:77:69:df:84:71:f3:b1:38:2d:df:6f:ad:5d:
                    74:71:8b:c8:87:a2:99:23:cd:ee:10:7e:a8:df:c9:
                    6a:70:37:db:f1:2b:81:76:4b:fb:60:55:0b:ae:20:
                    53:99:2a:d9:0d:56:f3:2f:a5:8a:25:ec:68:ae:b1:
                    a3:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:C6:A0:C3:DA:FD:15:8E:83:F9:38:68:E4:6C:D7:84:0A:BE:10:3F
            X509v3 Authority Key Identifier:
                keyid:BC:86:21:41:30:97:16:C0:E4:DC:37:DF:FF:33:E5:AB:0C:55:4A:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/vIYhQTCXFsDk3Dff_zPlqwxVStA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYhQTCXFsDk3Dff_zPlqwxVStA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/vIYhQTCXFsDk3Dff_zPlqwxVStA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:6e:53:d0:d5:24:3a:b6:77:11:37:66:83:d5:f8:26:a6:a9:
         2e:ce:44:e0:2d:87:a6:af:aa:c5:4a:bb:7a:80:a3:7e:0e:07:
         a7:14:db:83:bd:27:b0:ec:a9:d4:35:d8:5c:15:7c:9e:47:f6:
         81:80:67:b9:e4:d9:85:83:03:3f:6d:2f:15:70:7d:c4:d6:f8:
         b8:28:98:37:42:1a:5b:10:61:9b:43:62:8d:7a:a6:8c:d7:c2:
         2a:58:db:f2:96:99:00:a7:4e:b4:42:a3:04:54:9e:18:2e:6a:
         ef:45:75:1b:68:64:3f:63:e5:68:9d:9a:d3:a1:b2:08:e0:16:
         f5:6e:9e:43:eb:9d:33:25:d1:86:8f:0d:e3:18:ab:1c:e5:d7:
         03:1c:e6:a3:4d:58:9d:da:67:d9:a2:5d:a3:9b:b7:fa:da:f2:
         fb:12:8c:ef:df:ad:98:83:e1:77:74:ef:a1:0f:d0:a4:e4:eb:
         22:54:c5:47:6a:2e:74:e3:93:e0:b8:fc:f8:31:98:eb:d3:c8:
         c7:5d:e3:44:94:88:f8:8e:5b:66:6c:40:df:07:97:88:ff:d3:
         d6:cc:dd:38:81:cb:9c:cf:ad:47:4f:2d:22:96:c0:61:59:32:
         80:3c:d6:a0:75:5d:fa:34:97:84:42:3f:01:28:d0:1f:08:ea:
         06:9d:e6:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:57:19 2025 by rpki-client