Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft
File:                     MxlflsRtTShdW95LCwMOODFOj8s.mft (raw, json)
Hash identifier:          MvMQd0pmIbswSwM9hmP+lr75moff1rzdxrohCJdUsA4=
Subject key identifier:   A3:11:7B:66:53:79:20:DD:B7:4A:CE:13:EB:DC:3D:6E:21:65:5E:2D
Authority key identifier: 33:19:5F:96:C4:6D:4D:28:5D:5B:DE:4B:0B:03:0E:38:31:4E:8F:CB
Certificate issuer:       /CN=A9173CE6/serialNumber=33195F96C46D4D285D5BDE4B0B030E38314E8FCB
Certificate serial:       0702
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft
Manifest number:          06E0
Signing time:             Tue 04 Nov 2025 22:10:50 +0000
Manifest this update:     Tue 04 Nov 2025 22:10:49 +0000
Manifest next update:     Tue 11 Nov 2025 22:10:49 +0000
Files and hashes:         1: MxlflsRtTShdW95LCwMOODFOj8s.crl (hash: IQAfVtUDLDBbra+MiKQRrn9tbAvAwNLtEomDqSTHw+4=)
                          2: E99C5D78999011F09D326581C4F9AE02.roa (hash: KRc5l8wxQAY0kmCFWdslvfP8E+810yOkcCnLCwPkREQ=)
                          3: D9D6FFE098E311F08722B635C4F9AE02.roa (hash: qO4LFdT1EadkD19RKE3omNNtTDwPak7fiDqGAZIdlvc=)
                          4: 7AC60C48CEB611ED8850A727C4F9AE02.roa (hash: Ng5tUT5XtWth/UeVCj9UP+U8A5SqwEGWBOOoygGvFMc=)
                          5: 7A180DFACEB611ED8850A727C4F9AE02.roa (hash: ecb64YVTHrU3z12q4OTbq4blJYoHWP6/Sh6BnZVtvcQ=)
                          6: C4E57D9EE55A11ED98D38780C4F9AE02.roa (hash: FFJCcbR2xaawUKSL+usbkIr74Y7s8fy0PX5AM1LQSnQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.crl
                          rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 22:10:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1794 (0x702)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173CE6, serialNumber=33195F96C46D4D285D5BDE4B0B030E38314E8FCB
        Validity
            Not Before: Nov  4 22:10:49 2025 GMT
            Not After : Nov 11 22:10:49 2025 GMT
        Subject: CN=690a79ea-aba4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e2:09:65:e6:b1:27:93:53:01:fe:3e:93:74:
                    cd:36:50:94:2b:b9:2c:60:13:e3:8d:1f:e1:54:e2:
                    92:4b:35:41:ac:13:5f:5c:21:11:e1:dc:17:60:b9:
                    2a:f3:82:22:f0:e2:d5:e7:74:f9:2d:e2:b9:0f:5a:
                    bb:43:44:df:8e:d7:60:0c:5b:5f:77:6a:97:f8:26:
                    f9:16:eb:6d:f3:ed:80:4e:64:4f:26:59:e9:6b:e2:
                    2f:27:e3:cd:42:78:8b:a1:0b:27:1f:60:73:1a:07:
                    e8:a5:0b:f6:c1:ac:af:58:e4:b6:ad:28:18:be:b4:
                    3c:8d:c8:80:bf:ef:e3:68:bf:b3:1b:4f:b6:23:b2:
                    36:5c:93:13:72:a6:f3:85:67:73:a0:91:9e:1a:98:
                    da:b6:f8:09:b5:4f:3e:d2:b9:c5:ff:9b:c4:fd:a1:
                    ad:f7:13:7e:eb:94:01:aa:56:ed:e0:d7:07:48:18:
                    7d:c7:1e:76:34:e0:e6:7b:02:8a:e4:39:75:be:02:
                    bc:eb:49:65:61:3d:9f:7c:13:18:b1:42:b2:69:75:
                    d5:9e:f5:96:d9:ed:ea:34:4c:d5:82:a7:0a:66:d5:
                    ce:a2:26:18:44:8c:91:8f:6b:8c:ce:e6:f5:15:e2:
                    04:7e:a4:d1:5c:78:ad:9e:df:3c:3c:2c:0c:1e:13:
                    33:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:11:7B:66:53:79:20:DD:B7:4A:CE:13:EB:DC:3D:6E:21:65:5E:2D
            X509v3 Authority Key Identifier:
                keyid:33:19:5F:96:C4:6D:4D:28:5D:5B:DE:4B:0B:03:0E:38:31:4E:8F:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:fc:13:89:40:cd:c9:06:12:a7:5f:e5:5b:e6:73:a0:6c:e6:
         a8:76:f6:32:70:1f:31:95:a6:19:23:a3:39:af:14:82:94:e7:
         d8:ac:de:d2:3d:16:bc:7c:a6:2a:95:fe:f1:29:ad:21:44:1e:
         1b:3a:ff:8c:2f:69:61:40:9e:63:75:26:35:1c:11:e0:34:8c:
         b9:9a:21:b5:d2:34:82:f9:f9:a8:ce:ee:77:9f:4a:eb:1b:41:
         d2:4c:4b:15:18:10:71:ad:a6:f6:51:62:0e:32:6a:3e:e0:6d:
         ad:cd:5c:09:fd:1a:3c:67:a4:5e:21:bb:26:db:3a:37:0c:4a:
         5f:2b:e3:3d:61:b2:65:fc:b7:cf:c1:2b:e7:45:bb:3c:9f:e4:
         2f:7e:d1:b0:5d:df:9e:b6:5a:3c:cd:cc:68:bb:9e:af:9e:13:
         dd:ad:ce:62:a2:dd:4f:81:88:2f:bb:77:37:6b:71:b0:03:c6:
         36:c8:45:b2:a4:56:9f:d2:a6:e5:cb:37:6d:e5:5d:e7:2d:5a:
         83:a2:a5:00:cf:78:13:35:bd:fb:b5:bd:7a:dc:0c:29:b5:ea:
         cc:ea:cc:50:70:e7:53:0c:5d:8b:67:e9:90:a2:2e:b9:23:9d:
         4b:f0:17:9f:89:2a:75:51:87:79:4b:77:fa:7d:34:79:af:58:
         cb:92:27:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:16:17 2025 by rpki-client