Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
File:                     aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft (raw, json)
Hash identifier:          V1ujybgLLi0oIEgm1Sji8EEUiiVAk73dwvXyMb6joVk=
Subject key identifier:   CC:45:17:B5:74:72:5B:A3:32:5E:96:E6:52:85:BA:2E:06:3E:6F:59
Authority key identifier: 68:35:DD:FB:84:38:D2:4B:B6:C5:97:93:16:E5:48:91:06:60:90:A7
Certificate issuer:       /CN=A9199197/serialNumber=6835DDFB8438D24BB6C5979316E54891066090A7
Certificate serial:       08F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
Manifest number:          0897
Signing time:             Tue 04 Nov 2025 20:56:14 +0000
Manifest this update:     Tue 04 Nov 2025 20:56:14 +0000
Manifest next update:     Tue 11 Nov 2025 20:56:14 +0000
Files and hashes:         1: aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl (hash: K3HGDHREvpaz5SWEqfipsLEz2ALZpOJaU0zykbMFGMg=)
                          2: 70F51BEE4B0D11EF94975151C4F9AE02.roa (hash: 5OJq3TQL6UcD1e0FTm6+f4tFRojNv3dxN2hOmwh/XMU=)
                          3: 18F343922A5711EBB59D6526C4F9AE02.roa (hash: 67FA0fogoOEO8ZhRY0Z7X/jNdUDR2kpHHHAZ7zc0DNU=)
                          4: 14C388C2114311F0B3944E67C4F9AE02.roa (hash: mTf8cQmCDCOr2IAAbGwT5DT/HAjoFjlHGakTn87Xya0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl
                          rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 20:56:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2296 (0x8f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199197, serialNumber=6835DDFB8438D24BB6C5979316E54891066090A7
        Validity
            Not Before: Nov  4 20:56:14 2025 GMT
            Not After : Nov 11 20:56:14 2025 GMT
        Subject: CN=690a686e-9efe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:54:52:45:5f:2e:89:8e:3c:73:d9:93:86:2b:
                    15:9e:2e:9c:59:66:12:4d:e9:04:bc:15:50:ba:e4:
                    4c:5a:c7:e9:71:80:35:53:4d:84:92:60:6d:e1:82:
                    1a:8c:12:5f:3c:9b:14:8f:c7:5a:71:53:f6:7a:55:
                    a9:ec:49:68:5c:3a:9b:04:9b:2f:45:da:a6:78:70:
                    cf:8f:1a:77:10:76:1d:65:49:97:4f:62:14:c4:4e:
                    3f:37:0d:e0:85:2e:2e:27:ec:5b:6c:2a:12:83:e5:
                    30:71:6b:4e:6d:a7:67:15:28:14:d4:fe:8a:4e:aa:
                    44:8e:42:0e:ff:04:78:6b:ae:9d:0f:23:07:86:58:
                    87:07:6c:3c:ed:dc:61:8c:eb:54:a1:47:11:87:a1:
                    c2:f3:db:38:00:52:49:fe:40:b8:10:7f:52:30:1f:
                    20:2c:67:90:9c:18:2b:2c:30:02:8b:5a:db:f0:ec:
                    fa:f9:bb:38:49:a7:b7:05:12:26:cd:14:9e:d6:a8:
                    2d:2a:53:bb:7b:4c:56:cc:65:56:9d:ed:0a:a0:df:
                    80:25:7f:2e:60:bf:79:45:97:ee:24:7a:e4:1c:fc:
                    95:8c:ef:ac:f5:29:ff:ce:37:44:8c:4a:44:be:e8:
                    08:40:67:34:12:4b:b6:d7:1a:f1:ab:f2:f3:38:bc:
                    be:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:45:17:B5:74:72:5B:A3:32:5E:96:E6:52:85:BA:2E:06:3E:6F:59
            X509v3 Authority Key Identifier:
                keyid:68:35:DD:FB:84:38:D2:4B:B6:C5:97:93:16:E5:48:91:06:60:90:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:8e:4d:2b:3d:f4:58:f3:a6:4c:cd:98:88:a1:42:34:79:f7:
         06:7b:41:50:d0:31:44:3b:17:df:82:f3:da:d1:01:c6:2b:c3:
         38:0b:b9:e7:ea:e3:5b:95:aa:47:35:dc:80:0c:f5:3b:ed:e5:
         07:da:68:2f:c0:85:31:23:ae:07:cc:63:d1:4e:a5:95:34:f9:
         c6:55:9c:76:35:d8:8d:91:7d:5f:5a:6e:01:24:25:30:62:21:
         8f:72:89:50:c4:c3:8a:13:bc:96:c7:a1:21:30:75:2b:1f:53:
         c7:80:23:fe:8a:58:7d:20:78:04:96:39:34:48:10:58:64:b3:
         01:49:58:dc:67:7d:35:b3:df:ae:57:fd:3c:db:1b:49:8b:c3:
         3a:6a:73:eb:f2:e7:02:6e:f8:3f:d9:01:10:d1:49:e8:b1:cf:
         da:97:7a:65:cd:4a:25:1b:bc:f7:92:ae:fe:c1:1c:1d:e0:f9:
         2a:12:09:43:8f:1e:76:5e:70:6a:ee:42:f3:db:91:47:d2:10:
         a8:a4:bb:d1:96:87:b1:c7:3f:78:99:ab:37:d0:82:ae:63:14:
         09:b2:0e:89:14:3e:28:c2:a1:e1:80:65:de:34:44:84:4e:2c:
         0c:e8:86:f3:89:4c:91:65:6e:54:be:48:e1:42:94:e3:bf:35:
         be:83:ce:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:42:41 2025 by rpki-client