Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/5sRskdEtWFoSsFVpYh3uGtP4kI4.mft
File:                     5sRskdEtWFoSsFVpYh3uGtP4kI4.mft (raw, json)
Hash identifier:          6iVDv/rRgc4H1LkgipmyQiXO7w0yIC8OI0PvSx/2iWY=
Subject key identifier:   66:EB:4B:24:DF:30:D1:42:3D:53:A8:95:A2:84:29:06:BE:41:F4:A0
Authority key identifier: E6:C4:6C:91:D1:2D:58:5A:12:B0:55:69:62:1D:EE:1A:D3:F8:90:8E
Certificate issuer:       /CN=A917A362/serialNumber=E6C46C91D12D585A12B05569621DEE1AD3F8908E
Certificate serial:       0183
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5sRskdEtWFoSsFVpYh3uGtP4kI4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/5sRskdEtWFoSsFVpYh3uGtP4kI4.mft
Manifest number:          017F
Signing time:             Wed 05 Nov 2025 03:51:57 +0000
Manifest this update:     Wed 05 Nov 2025 03:51:56 +0000
Manifest next update:     Wed 12 Nov 2025 03:51:56 +0000
Files and hashes:         1: 5sRskdEtWFoSsFVpYh3uGtP4kI4.crl (hash: pZFRMr+Wwgc31OuHWur41NVBJUHp4dq4ysKDd4vrxJo=)
                          2: 1B299892726F11EEB1217365C4F9AE02.roa (hash: TFl3UUaIvz5mdJOK5oWLRzuJytmWENM4h3ilLWP9+k4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/5sRskdEtWFoSsFVpYh3uGtP4kI4.crl
                          rsync://rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/5sRskdEtWFoSsFVpYh3uGtP4kI4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5sRskdEtWFoSsFVpYh3uGtP4kI4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 03:51:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 387 (0x183)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A362, serialNumber=E6C46C91D12D585A12B05569621DEE1AD3F8908E
        Validity
            Not Before: Nov  5 03:51:56 2025 GMT
            Not After : Nov 12 03:51:56 2025 GMT
        Subject: CN=690ac9dd-a0f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2f:41:62:ef:0c:c9:9a:5d:34:12:2d:95:72:
                    ef:e8:2a:fe:6e:b2:0b:87:3d:a3:45:a6:58:e8:9a:
                    23:83:69:03:fc:8f:fd:fc:6c:ea:f4:59:60:c2:e4:
                    00:16:1f:16:24:19:cc:98:0a:47:f9:01:a6:b7:71:
                    b5:55:cb:d3:8b:b3:72:d5:d8:1f:6f:ef:24:e4:84:
                    de:47:30:d9:9a:37:e0:ab:5f:cc:64:ff:78:5d:16:
                    af:e2:7c:a6:fd:66:7e:1c:96:32:2b:f6:57:16:b5:
                    91:a6:07:57:9e:bc:6c:af:a4:e6:0d:95:bd:39:47:
                    78:ff:0a:df:04:41:61:44:dd:c1:96:1f:d8:7d:48:
                    87:75:3a:de:47:97:52:89:34:04:3d:47:af:96:35:
                    2e:87:dd:fd:a2:95:8a:c8:9d:16:68:23:9f:52:89:
                    3f:6a:47:0c:3f:5a:28:c0:50:5c:23:19:bc:a8:d9:
                    18:44:6d:41:74:dc:48:8e:ba:c2:26:b1:8a:f6:79:
                    5a:e1:39:40:87:6a:79:41:99:1a:c5:35:9d:f3:a1:
                    7f:e4:d6:37:ce:8e:e6:5a:e6:33:e8:01:33:9d:73:
                    e7:98:ca:d6:2f:d9:01:2a:36:67:cb:1e:1d:c1:4f:
                    26:f2:88:06:92:73:53:d2:06:22:1d:66:da:06:5a:
                    71:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:EB:4B:24:DF:30:D1:42:3D:53:A8:95:A2:84:29:06:BE:41:F4:A0
            X509v3 Authority Key Identifier:
                keyid:E6:C4:6C:91:D1:2D:58:5A:12:B0:55:69:62:1D:EE:1A:D3:F8:90:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/5sRskdEtWFoSsFVpYh3uGtP4kI4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5sRskdEtWFoSsFVpYh3uGtP4kI4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/5sRskdEtWFoSsFVpYh3uGtP4kI4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:69:f3:13:eb:e9:f7:2d:d0:0f:81:bb:2f:ab:0f:c6:72:6b:
         92:05:24:32:26:fe:43:da:6b:c0:44:36:43:ec:95:53:d2:50:
         18:b1:05:ea:3a:08:91:10:dd:fd:4a:2a:b8:5c:49:b1:ab:87:
         ee:a5:64:a9:39:bc:a1:8a:b0:e1:61:6a:f0:9f:e1:57:41:d1:
         48:1f:d3:6d:51:0b:0a:e2:b9:0f:20:35:43:09:99:df:ac:76:
         23:3e:31:73:96:a0:26:73:3d:a4:3f:24:42:06:57:5b:5c:07:
         2f:6c:2a:fd:2f:d7:b6:30:b0:1b:d1:cd:03:01:e4:5d:3a:6c:
         20:37:d0:4e:6e:d3:a9:de:33:9a:7f:cc:48:90:c0:79:6d:b0:
         6d:f4:77:60:82:2d:7b:c5:f0:28:4c:14:6a:53:5d:d7:7b:be:
         ab:46:e3:17:68:0d:7e:96:5f:fa:89:e1:01:7d:1e:58:d5:42:
         06:b8:0b:63:d3:8c:f9:5a:e4:6f:24:04:66:60:55:ce:f7:96:
         1f:df:dd:af:7e:2f:61:b0:36:6b:ea:c0:38:b0:61:98:48:9e:
         83:22:20:e3:fe:0d:46:8a:8e:47:a5:17:83:22:d2:d6:49:8f:
         d5:69:fd:90:b3:20:ec:fc:39:17:fb:d8:6c:1b:5a:f2:ac:68:
         68:a3:4e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:08:19 2025 by rpki-client