Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.mft
File:                     MayWR8f4cKZrot54hUTNjDJr3_k.mft (raw, json)
Hash identifier:          QYpFaXrFqvhEoZ01RBX0R2p+xYzH/A5QoWRVmQp/jbQ=
Subject key identifier:   25:D4:7B:DF:A5:0E:57:85:26:2B:E7:4A:E3:16:D6:D7:00:97:1A:0B
Authority key identifier: 31:AC:96:47:C7:F8:70:A6:6B:A2:DE:78:85:44:CD:8C:32:6B:DF:F9
Certificate issuer:       /CN=A91218BB/serialNumber=31AC9647C7F870A66BA2DE788544CD8C326BDFF9
Certificate serial:       9F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MayWR8f4cKZrot54hUTNjDJr3_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.mft
Manifest number:          9E
Signing time:             Mon 03 Nov 2025 06:19:59 +0000
Manifest this update:     Mon 03 Nov 2025 06:19:58 +0000
Manifest next update:     Mon 10 Nov 2025 06:19:58 +0000
Files and hashes:         1: MayWR8f4cKZrot54hUTNjDJr3_k.crl (hash: +aalFiUrqOk1sD5FY0A61oE/HKMa7dd+B8l7V3QkOu0=)
                          2: 4DD6D628C8D211EF9F1BE312C4F9AE02.roa (hash: sUWfAuRTWaVVgcAthywuFU4ZlijXzthACuza893doh4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.crl
                          rsync://rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MayWR8f4cKZrot54hUTNjDJr3_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 06:19:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 159 (0x9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91218BB, serialNumber=31AC9647C7F870A66BA2DE788544CD8C326BDFF9
        Validity
            Not Before: Nov  3 06:19:58 2025 GMT
            Not After : Nov 10 06:19:58 2025 GMT
        Subject: CN=6908498e-98f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:08:9c:f7:4c:55:21:92:e6:5c:51:97:9a:4d:
                    af:5d:09:63:d2:3a:cb:79:43:11:12:91:63:b0:ab:
                    77:e6:f4:b8:01:a2:94:25:cc:f1:57:c0:c8:09:2a:
                    0c:39:c2:aa:18:54:9c:37:a3:dd:47:d8:c9:25:f8:
                    f7:d6:86:a2:43:4f:ef:61:54:d5:48:e7:cc:c7:0d:
                    d3:b4:43:24:aa:e2:d7:45:c0:f2:7f:ef:7b:ae:e8:
                    8b:33:ce:ee:98:bd:69:07:07:38:3d:a4:53:f8:a5:
                    af:09:38:35:d0:26:6b:38:de:c0:6d:07:3f:8f:e0:
                    7f:c1:2a:7a:cb:26:d0:01:38:c2:40:4f:89:99:71:
                    54:5e:f0:dd:5d:be:68:51:fc:e4:f8:a7:fd:75:c7:
                    f6:cf:da:97:ad:a0:09:f1:4d:b8:f8:c4:3e:1d:6c:
                    51:72:4d:b2:ab:52:28:d2:90:40:90:59:b1:06:94:
                    f5:fc:88:8e:9c:a5:e0:c8:be:b8:a7:f0:df:c8:dc:
                    e5:f0:bc:1a:92:93:71:44:79:ab:0f:89:39:8d:5a:
                    e2:f4:ba:63:88:0d:a8:2b:a5:9b:42:8d:b0:17:35:
                    43:ac:09:31:1a:41:0b:6e:59:f3:9a:55:d2:9f:5e:
                    b6:48:d7:51:af:92:7e:b1:f3:04:83:24:51:72:7f:
                    e2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:D4:7B:DF:A5:0E:57:85:26:2B:E7:4A:E3:16:D6:D7:00:97:1A:0B
            X509v3 Authority Key Identifier:
                keyid:31:AC:96:47:C7:F8:70:A6:6B:A2:DE:78:85:44:CD:8C:32:6B:DF:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MayWR8f4cKZrot54hUTNjDJr3_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:e8:61:32:c9:72:88:2d:88:72:73:15:00:26:a1:34:d4:ba:
         9e:7d:ae:19:43:6a:8a:76:1d:46:5d:f8:5c:48:bd:d6:96:f7:
         bc:0a:12:3e:0f:e6:a2:b4:42:b7:e5:e4:f8:14:e6:8f:a9:d5:
         f6:e8:ab:d2:3d:2d:91:d0:b0:0a:b3:01:80:9b:a7:d9:8a:e9:
         da:16:80:9d:80:46:c3:e8:ad:f8:a4:98:8b:d7:09:09:0f:54:
         da:b8:8b:50:24:d3:07:e4:a6:c9:d1:56:0c:67:bf:a4:64:e9:
         3d:55:4c:2a:37:09:04:c7:67:1a:03:2f:29:8c:ec:f9:69:fe:
         37:5a:45:29:d7:f9:dd:4c:9e:f5:4c:a2:89:d9:9d:46:a9:2f:
         04:a1:b7:03:ca:29:62:49:9e:84:09:a5:fc:06:46:f3:83:84:
         71:48:63:7b:cb:cd:12:99:30:69:59:5a:e6:c9:8e:2c:96:6e:
         e7:d9:dd:73:86:6a:74:bd:4d:bf:48:73:05:7a:87:85:a4:70:
         36:48:c0:73:c7:b7:25:21:6a:e3:07:34:d6:46:42:e7:78:83:
         28:56:72:03:3c:59:b5:dd:ed:f1:1a:39:8e:b8:9e:0f:49:e9:
         8c:74:f5:63:87:84:79:8a:91:53:4a:31:5c:78:cd:38:1f:44:
         c4:8d:e6:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:49:29 2025 by rpki-client