Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.mft
File:                     aepi4_A-R8A3Gb7bFrTKJzuLMQM.mft (raw, json)
Hash identifier:          wBeBHgAP36q5sS6hhNDabejgx68gO95lefPRa0s9CPc=
Subject key identifier:   E5:D1:7C:AD:8C:AB:41:23:B4:7C:6B:67:8D:80:AA:8D:0D:69:F0:50
Authority key identifier: 69:EA:62:E3:F0:3E:47:C0:37:19:BE:DB:16:B4:CA:27:3B:8B:31:03
Certificate issuer:       /CN=A9122B85/serialNumber=69EA62E3F03E47C03719BEDB16B4CA273B8B3103
Certificate serial:       0171
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aepi4_A-R8A3Gb7bFrTKJzuLMQM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.mft
Manifest number:          016E
Signing time:             Mon 03 Nov 2025 03:53:40 +0000
Manifest this update:     Mon 03 Nov 2025 03:53:39 +0000
Manifest next update:     Mon 10 Nov 2025 03:53:39 +0000
Files and hashes:         1: aepi4_A-R8A3Gb7bFrTKJzuLMQM.crl (hash: 6NIAB2cx6i6wwccynILOuZqvNxc+I3sAfl/tpmlc5a0=)
                          2: 0287BD068A3D11EEADFABF09C4F9AE02.roa (hash: zthvVJ0xeL5J9gMyWu/Onbxvo/kp68K5vsS8CZ3Wqh8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.crl
                          rsync://rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aepi4_A-R8A3Gb7bFrTKJzuLMQM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 03:53:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 369 (0x171)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122B85, serialNumber=69EA62E3F03E47C03719BEDB16B4CA273B8B3103
        Validity
            Not Before: Nov  3 03:53:39 2025 GMT
            Not After : Nov 10 03:53:39 2025 GMT
        Subject: CN=69082744-0f68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:22:1c:55:4b:5c:0d:9e:93:e5:65:63:be:28:
                    49:2a:72:48:b9:ec:1c:91:ef:32:f0:04:88:67:86:
                    0a:3d:6e:f3:95:de:78:7a:f9:98:8a:ee:3f:14:06:
                    ba:42:f6:01:ff:e6:c0:b7:73:6b:68:ee:b2:32:ab:
                    4e:00:b4:49:9e:48:91:0a:1f:04:54:6d:67:c2:cf:
                    2c:f5:6d:4d:a7:a5:91:5c:8a:55:27:b8:37:83:8e:
                    50:e4:2e:9a:4e:0b:3b:67:67:0c:4a:69:ef:3a:2a:
                    ba:5a:8d:60:8a:6a:37:18:52:69:d9:1d:0c:27:b4:
                    7e:87:57:0e:d2:40:c0:f1:b4:d3:44:a2:0e:95:18:
                    d1:8a:60:20:d2:86:31:10:ae:9e:7f:92:18:4f:c4:
                    86:a2:e1:e0:9b:cd:25:03:b2:2b:62:1a:9b:f5:3f:
                    39:41:9f:e6:b7:3b:ca:5d:7c:b0:12:97:aa:dd:10:
                    17:f5:8e:44:56:ce:67:cd:3c:81:70:ab:19:ff:47:
                    7c:f5:39:05:62:d3:16:64:b3:ce:40:c8:87:e8:56:
                    c3:d3:1b:ce:0a:c9:08:7d:3c:74:0e:79:ab:ea:01:
                    16:b3:89:c2:bd:06:96:fc:9f:f5:02:18:c4:78:b2:
                    69:b6:0e:f1:ce:90:96:39:71:3e:a2:02:4c:e6:10:
                    4d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:D1:7C:AD:8C:AB:41:23:B4:7C:6B:67:8D:80:AA:8D:0D:69:F0:50
            X509v3 Authority Key Identifier:
                keyid:69:EA:62:E3:F0:3E:47:C0:37:19:BE:DB:16:B4:CA:27:3B:8B:31:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aepi4_A-R8A3Gb7bFrTKJzuLMQM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:4d:fe:d5:ae:1f:b2:96:ec:ff:8c:de:40:e1:a2:70:60:4c:
         e7:51:39:08:b9:5e:cc:e1:22:e4:63:a7:bc:0d:a1:fe:25:ff:
         c4:23:28:53:ce:ec:63:dc:3a:27:6f:f9:d3:1a:30:29:1f:65:
         96:60:7f:c1:f0:64:90:55:56:f8:87:ac:08:d1:a2:61:c4:36:
         07:9d:4f:a2:11:21:3a:a9:72:3b:e8:7a:c3:55:88:b0:97:aa:
         72:27:ac:bd:09:55:5b:d3:e0:8c:3a:4b:0f:fd:00:7f:b0:90:
         fd:5e:ea:33:d4:c7:71:c3:a3:d4:b5:78:87:0f:fc:db:4e:94:
         12:18:26:68:87:85:65:d8:90:18:9f:75:34:c8:e8:01:b1:ec:
         8c:47:ad:2c:a6:5f:30:ed:ff:f2:5f:e4:03:65:49:d6:ec:d6:
         69:eb:61:a9:19:37:94:ce:de:3c:df:9e:53:8f:16:30:33:a5:
         c6:0a:dc:2a:00:53:85:2b:58:25:62:b0:89:30:1e:44:74:b6:
         97:95:c6:df:ae:4c:17:99:9d:0f:4c:4b:86:e7:a5:f4:14:5d:
         4f:4b:7a:cd:4d:57:61:f9:5e:eb:06:22:67:82:ed:c6:8a:46:
         0e:51:0f:66:55:e1:92:a8:99:9c:5b:17:4d:b1:44:18:46:e3:
         98:0d:d2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:18:32 2025 by rpki-client