Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft
File:                     99dMf7iwuu_DY1zU41BIr4jjnu8.mft (raw, json)
Hash identifier:          5bykyP7P//dt8deYciO15KR0OIUyvpoeVewQ+FMMixU=
Subject key identifier:   22:F6:72:B9:B2:41:4B:38:2E:8D:13:15:21:30:4D:2B:4B:C9:09:6C
Authority key identifier: F7:D7:4C:7F:B8:B0:BA:EF:C3:63:5C:D4:E3:50:48:AF:88:E3:9E:EF
Certificate issuer:       /CN=A919F6A8/serialNumber=F7D74C7FB8B0BAEFC3635CD4E35048AF88E39EEF
Certificate serial:       1AF2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft
Manifest number:          1AA7
Signing time:             Sun 02 Nov 2025 16:20:32 +0000
Manifest this update:     Sun 02 Nov 2025 16:20:32 +0000
Manifest next update:     Sun 09 Nov 2025 16:20:32 +0000
Files and hashes:         1: 99dMf7iwuu_DY1zU41BIr4jjnu8.crl (hash: u60aWpY/Fp9wMG03oysWUmdGHXI/cbxvhysfsYNkLK4=)
                          2: 2578CBCCFD4611EDA9A46F52C4F9AE02.roa (hash: ZY9UVEPOCB1tx7LWMX0JPtFEK9gl6SqjcejUUwF9APo=)
                          3: 16A3B47EED7A11EAB00FA463C4F9AE02.roa (hash: p7tQRESvOucR4loUarfHpuL5VMHiMFu4353xIOkSzpw=)
                          4: 1E17F340724911E88CAE8E84C4F9AE02.roa (hash: H1ZnHxZixXVbHo7aB0OBCDDL/HvZe6bvZhxCcCw4jYQ=)
                          5: F5257E60FD4111ED947CD631C4F9AE02.roa (hash: e4tQVidUhYeVOQueW5SrNgjm3m0qmH9C2+LHfapMlI0=)
                          6: AC39D9F8615211E7BAD4DA61C4F9AE02.roa (hash: janciRMHjU97zB3lXitJwIl9Ika5JfzU+v8Mkow8p3Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.crl
                          rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 16:20:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6898 (0x1af2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F6A8, serialNumber=F7D74C7FB8B0BAEFC3635CD4E35048AF88E39EEF
        Validity
            Not Before: Nov  2 16:20:32 2025 GMT
            Not After : Nov  9 16:20:32 2025 GMT
        Subject: CN=690784d0-2dc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ba:23:4f:86:2d:7f:b0:43:b9:33:a9:83:92:
                    53:4f:97:1d:66:c9:87:a5:b5:85:6b:aa:94:db:d7:
                    2f:13:7e:a5:26:d8:ee:8b:93:34:c0:59:9c:74:1d:
                    ab:f8:66:c8:77:f4:7f:fb:8e:56:33:49:2b:49:c9:
                    02:ae:45:77:cf:c8:7a:04:83:2c:b6:9b:29:c1:81:
                    3e:db:98:27:80:17:b4:a4:0f:ce:44:df:6f:da:a4:
                    91:16:b0:c4:ff:c4:26:02:d0:ab:d7:13:4e:e6:1c:
                    80:42:0a:42:ec:50:3d:2b:1b:70:17:5a:5a:d4:d5:
                    f6:18:2e:7a:e5:8f:33:16:21:0d:94:c8:42:0d:58:
                    43:3f:97:de:dc:ec:cb:f3:a8:34:52:93:8a:46:35:
                    18:bc:7e:60:26:90:14:c7:13:ca:26:3c:0e:d4:6b:
                    18:bd:ed:40:59:e9:e6:14:ac:49:da:8b:32:9d:70:
                    1d:d2:f0:b8:e1:48:be:ef:84:13:f9:64:9f:3d:37:
                    6e:2c:9c:fa:47:a2:0d:9d:69:25:60:31:11:f0:1c:
                    c6:07:8b:c0:eb:ca:88:ed:5a:6e:c5:64:5f:47:f3:
                    ea:79:47:51:df:00:37:40:27:38:5f:15:a5:59:cc:
                    64:97:17:53:ef:e4:78:46:59:8f:15:a0:c7:a6:7c:
                    e8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:F6:72:B9:B2:41:4B:38:2E:8D:13:15:21:30:4D:2B:4B:C9:09:6C
            X509v3 Authority Key Identifier:
                keyid:F7:D7:4C:7F:B8:B0:BA:EF:C3:63:5C:D4:E3:50:48:AF:88:E3:9E:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:78:91:92:a2:d2:70:f0:43:10:e9:8e:3a:e4:f9:db:f0:5d:
         63:f9:59:6b:6a:89:c6:30:a4:7b:57:b3:f6:45:1f:90:34:ed:
         89:b7:c7:97:b0:d3:b6:4a:2f:66:d2:34:60:7f:d0:5f:1a:7b:
         55:e8:65:2f:94:ac:47:ff:2b:78:58:6e:f4:7b:52:9a:ad:3e:
         25:c4:03:a5:8a:2e:97:1b:09:fd:75:9c:3c:39:6f:af:89:b6:
         6e:b3:ce:cc:30:5e:69:b4:8f:ca:d6:2d:74:27:ad:d3:e3:b4:
         41:af:e6:0b:6b:65:7d:27:32:52:c1:48:9c:c5:0a:93:73:a8:
         3d:3e:1e:21:00:0c:87:13:81:65:93:45:5e:23:42:60:7e:91:
         56:b3:cd:23:23:27:60:c0:34:fa:3e:ae:a8:87:a8:42:5d:66:
         f5:8b:90:57:aa:b2:c0:81:7e:65:c0:26:82:ca:1c:df:73:34:
         bd:67:ea:4f:65:a7:a8:06:e2:ba:f1:15:a2:76:6e:4c:bd:10:
         ba:9b:9a:9c:54:1d:4a:0c:00:39:5c:ef:5a:08:89:e2:43:ca:
         0f:89:20:f1:d9:58:e9:d1:e4:6e:ae:c6:a9:61:31:a6:21:79:
         f1:7e:81:b1:8f:8f:63:ee:49:a7:8c:b8:20:e8:d2:be:aa:40:
         86:f0:e1:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 16:04:52 2025 by rpki-client