Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft
File:                     xMZ-u2st3Gkku7llXn4PghhTDGU.mft (raw, json)
Hash identifier:          JFHV0LRQVjMV0/A95fEeHssENd/uEs7rHCGkpqNFSaQ=
Subject key identifier:   E4:0B:51:6B:0D:60:BF:76:C1:4D:3F:75:26:76:A6:1D:68:6E:59:33
Authority key identifier: C4:C6:7E:BB:6B:2D:DC:69:24:BB:B9:65:5E:7E:0F:82:18:53:0C:65
Certificate issuer:       /CN=A9122D51/serialNumber=C4C67EBB6B2DDC6924BBB9655E7E0F8218530C65
Certificate serial:       0130
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xMZ-u2st3Gkku7llXn4PghhTDGU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft
Manifest number:          012C
Signing time:             Wed 05 Nov 2025 04:47:48 +0000
Manifest this update:     Wed 05 Nov 2025 04:47:48 +0000
Manifest next update:     Wed 12 Nov 2025 04:47:48 +0000
Files and hashes:         1: xMZ-u2st3Gkku7llXn4PghhTDGU.crl (hash: LpKCuXXTjKrQem6/Y2UNNL+kiT4HgFOVlUc5ZI7GflY=)
                          2: 6D610A58F23711EEA11AA759C4F9AE02.roa (hash: H2P0kf4hy4afyomyyat64ajTM5Qyh5RNKdo/uhIFD+c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.crl
                          rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xMZ-u2st3Gkku7llXn4PghhTDGU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 04:47:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 304 (0x130)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122D51, serialNumber=C4C67EBB6B2DDC6924BBB9655E7E0F8218530C65
        Validity
            Not Before: Nov  5 04:47:48 2025 GMT
            Not After : Nov 12 04:47:48 2025 GMT
        Subject: CN=690ad6f4-a7c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c6:1f:01:87:39:8f:7b:8e:a6:b5:89:f2:57:
                    aa:14:ad:eb:03:00:eb:00:c2:fe:3d:05:d3:4e:0a:
                    b1:04:16:31:fc:65:c1:6f:f2:d5:de:7a:ba:b6:09:
                    6c:10:e3:a9:58:db:96:c4:39:c3:07:d8:7f:55:ab:
                    b5:09:d7:d2:a1:16:1e:11:23:2e:58:35:42:87:3f:
                    5e:27:ca:1c:b7:a6:1f:ae:b3:71:65:0f:de:39:93:
                    c1:6a:e4:75:72:2a:6b:99:9e:28:b4:e6:20:81:0c:
                    e7:b2:3b:0a:59:e5:67:ec:6a:80:4e:b3:56:6f:f9:
                    3c:2c:a2:3c:6c:42:a8:e2:e8:35:c7:4b:25:ae:a5:
                    4f:2f:03:22:13:6b:85:6e:58:88:83:88:a3:a9:da:
                    ac:0e:2f:a2:26:f9:b2:e0:67:0f:e1:25:c6:e0:8a:
                    29:2e:6e:79:8c:d1:6a:6c:ad:96:94:11:99:57:a5:
                    db:1c:93:b6:eb:18:8c:4c:8b:a3:f4:6d:b2:bd:bc:
                    7e:7d:28:74:34:ab:b1:6f:bf:e1:2e:aa:76:3e:39:
                    ac:17:de:47:94:7f:6b:ca:7d:6b:0b:2f:4d:a5:51:
                    ed:d0:61:2a:57:e8:2a:24:f6:ff:24:d3:62:cf:60:
                    f0:46:06:a6:45:22:91:08:e2:78:0b:70:de:6d:a1:
                    db:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:0B:51:6B:0D:60:BF:76:C1:4D:3F:75:26:76:A6:1D:68:6E:59:33
            X509v3 Authority Key Identifier:
                keyid:C4:C6:7E:BB:6B:2D:DC:69:24:BB:B9:65:5E:7E:0F:82:18:53:0C:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xMZ-u2st3Gkku7llXn4PghhTDGU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:76:ca:6d:4f:73:2c:ae:94:97:15:32:1b:43:7b:96:4a:33:
         f4:21:d5:cd:ea:3c:80:3c:1d:b2:07:af:b0:1c:c1:51:07:ab:
         ee:85:4e:08:62:47:08:9d:55:c5:6c:e4:a4:6b:83:c7:55:b1:
         53:ee:94:c8:92:7f:c4:25:b7:6f:aa:84:f7:35:57:1c:c1:5f:
         ff:77:c5:82:73:11:7c:00:06:04:80:82:ba:ce:d3:44:ba:69:
         18:72:0a:ac:56:70:f0:af:8e:d4:99:9b:76:57:8d:cd:24:fb:
         e7:46:17:51:7f:53:df:59:9e:52:01:cd:16:ea:d0:87:86:3d:
         29:e7:77:52:fb:09:ff:aa:70:ba:eb:61:0f:b4:7a:1d:f1:aa:
         d9:40:5a:9d:92:d0:1e:2e:ee:79:84:54:e8:7a:20:d8:b2:9e:
         13:2c:90:f3:8e:4c:52:b8:57:9c:67:b1:6a:f4:01:df:8e:4f:
         f1:8f:93:1f:0a:08:4e:77:b6:16:41:6c:51:8e:c2:4c:64:40:
         b2:35:d2:2d:ff:86:72:84:3b:37:a3:b8:79:8a:6c:10:06:88:
         b7:1f:d4:84:d2:27:c4:af:90:a3:cf:3f:16:65:57:e4:09:04:
         e5:59:8f:e5:74:8c:30:af:cb:b8:31:e3:34:03:9d:42:57:e2:
         ac:3f:ab:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:06:24 2025 by rpki-client