Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.mft
File:                     61aZQ1LrAeQOYMeKQ7lXrikO90U.mft (raw, json)
Hash identifier:          qaqczaeEY4rgxQUHr+yV0tdS1fKBTNRHp7CEFWGVL1c=
Subject key identifier:   72:6C:67:65:71:9E:96:ED:16:1A:A4:9A:60:FC:FC:BD:71:09:DE:36
Authority key identifier: EB:56:99:43:52:EB:01:E4:0E:60:C7:8A:43:B9:57:AE:29:0E:F7:45
Certificate issuer:       /CN=A918CDEC/serialNumber=EB56994352EB01E40E60C78A43B957AE290EF745
Certificate serial:       0630
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61aZQ1LrAeQOYMeKQ7lXrikO90U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.mft
Manifest number:          0627
Signing time:             Sun 02 Nov 2025 22:46:24 +0000
Manifest this update:     Sun 02 Nov 2025 22:46:24 +0000
Manifest next update:     Sun 09 Nov 2025 22:46:24 +0000
Files and hashes:         1: 61aZQ1LrAeQOYMeKQ7lXrikO90U.crl (hash: GP1iABicKfSf9+iz7CEyNOhHSAwf2spr1InnTaJRy8U=)
                          2: 7EC2F352BAB711EB8648EE28C4F9AE02.roa (hash: PHugSXTi2dZxLQln/zegbseeVs2jPcn21YYpHl84zeo=)
                          3: 70253888478111EEAF9EB62EC4F9AE02.roa (hash: PqPcM9AknODy/bx8TAswPdKxA7piJbRMKnDsw8NBbDI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.crl
                          rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61aZQ1LrAeQOYMeKQ7lXrikO90U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 22:46:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1584 (0x630)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918CDEC, serialNumber=EB56994352EB01E40E60C78A43B957AE290EF745
        Validity
            Not Before: Nov  2 22:46:24 2025 GMT
            Not After : Nov  9 22:46:24 2025 GMT
        Subject: CN=6907df40-7f6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:eb:da:1e:57:b4:78:fa:98:03:96:d7:f7:61:
                    b6:2b:d3:b8:09:d8:ed:a1:37:7a:98:50:60:cf:b5:
                    7f:7b:b5:0a:9a:5c:43:cb:cb:fe:20:ab:6b:85:cb:
                    74:79:3d:01:c8:09:8c:8e:af:71:da:bb:80:c6:f0:
                    86:e2:19:81:0b:f3:ad:e5:47:71:8e:d3:22:60:71:
                    f0:7a:22:7a:91:4d:3a:be:51:98:5b:09:70:8d:b7:
                    90:b1:f0:2e:06:54:1b:a4:19:d6:b0:3e:cd:58:5f:
                    53:82:11:8d:70:9c:e8:6c:b2:1d:f4:e8:03:ca:79:
                    74:5d:d8:75:9f:d8:ae:d0:4e:9a:55:02:91:ec:69:
                    44:00:81:29:90:cd:c2:9a:bc:9e:84:ec:d6:ac:38:
                    6d:01:50:96:a7:04:c1:95:82:5b:5c:9e:b1:8d:87:
                    fb:36:0e:48:90:c8:9b:30:cc:30:c7:17:84:44:3c:
                    5f:1d:2d:3e:81:f3:df:92:f9:1e:b2:8b:2b:84:2a:
                    57:5b:be:54:97:ea:b0:90:1e:5c:7a:d9:f2:e7:d1:
                    3f:a7:f6:db:0d:6d:f7:9e:e9:7a:0a:2c:51:fa:53:
                    9b:da:57:95:2b:14:27:c3:d2:d9:7f:9b:06:1e:c9:
                    d6:6a:49:8c:ff:ab:96:35:82:89:08:68:34:d9:d3:
                    68:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:6C:67:65:71:9E:96:ED:16:1A:A4:9A:60:FC:FC:BD:71:09:DE:36
            X509v3 Authority Key Identifier:
                keyid:EB:56:99:43:52:EB:01:E4:0E:60:C7:8A:43:B9:57:AE:29:0E:F7:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61aZQ1LrAeQOYMeKQ7lXrikO90U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:85:b5:1f:d8:bf:c5:c7:aa:41:e6:53:2f:f7:05:73:70:a6:
         28:f2:fb:c3:b8:6b:f9:c7:85:59:ca:55:e0:1c:a7:0b:8a:18:
         d0:27:7a:c6:39:a8:80:28:48:c5:10:d8:1c:11:1e:9c:2e:3e:
         1a:c0:82:d6:29:b2:53:f3:bc:8e:bd:93:8b:d9:85:2d:53:bb:
         fd:97:aa:53:c3:48:16:dd:6c:ae:2a:5e:8a:6f:52:d1:57:06:
         b9:ee:07:a2:86:53:8d:0c:3b:56:3c:49:7a:f4:c4:dc:84:1e:
         9b:b2:1f:19:0b:d9:39:22:78:66:e3:bb:57:e6:70:1e:7b:4c:
         09:fa:65:90:62:69:07:2a:21:7c:b3:1a:b7:54:13:54:29:ed:
         61:b1:f8:48:28:63:50:f1:76:84:30:8d:e5:e9:ef:c0:1f:4b:
         e9:5a:da:ec:4d:c7:84:52:85:c9:0f:da:af:7a:ce:ca:de:bf:
         41:cc:a5:ab:4c:fe:44:90:54:23:e4:67:58:be:f2:60:e3:8a:
         15:a3:12:64:31:c5:4c:af:a7:20:c8:5c:f1:dc:fc:90:39:ca:
         cf:d4:b4:c4:c7:ff:f4:c9:9a:37:a5:0e:17:74:c2:31:24:79:
         b5:d2:9f:95:c5:2b:8b:08:39:74:9e:a5:66:d5:5b:2f:38:94:
         f5:0d:89:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:04:40 2025 by rpki-client