Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.mft
File:                     x5XlnAMMfJKfy-R0Gfxexp4frP0.mft (raw, json)
Hash identifier:          rqHp0vhDrJVK3fUpdetgHZBfGLD8vfOG6JKYf18t1oY=
Subject key identifier:   05:85:4C:57:2B:F0:25:35:9C:85:68:A8:B7:F9:E5:FC:20:6A:FE:FA
Authority key identifier: C7:95:E5:9C:03:0C:7C:92:9F:CB:E4:74:19:FC:5E:C6:9E:1F:AC:FD
Certificate issuer:       /CN=A91A3FEB/serialNumber=C795E59C030C7C929FCBE47419FC5EC69E1FACFD
Certificate serial:       079F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5XlnAMMfJKfy-R0Gfxexp4frP0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.mft
Manifest number:          0799
Signing time:             Tue 04 Nov 2025 21:32:15 +0000
Manifest this update:     Tue 04 Nov 2025 21:32:14 +0000
Manifest next update:     Tue 11 Nov 2025 21:32:14 +0000
Files and hashes:         1: x5XlnAMMfJKfy-R0Gfxexp4frP0.crl (hash: VehutmOsxx9mzZM+MQbzjF9Ah/fr8q7rGoTY+nXP1/s=)
                          2: B722FC542A0411EB992DD32EC4F9AE02.roa (hash: wsrS8Hj9tlKWrRYJKi3rNPfDpEOnN9QMK0e9qX0Cib4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.crl
                          rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5XlnAMMfJKfy-R0Gfxexp4frP0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 21:32:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1951 (0x79f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3FEB, serialNumber=C795E59C030C7C929FCBE47419FC5EC69E1FACFD
        Validity
            Not Before: Nov  4 21:32:14 2025 GMT
            Not After : Nov 11 21:32:14 2025 GMT
        Subject: CN=690a70de-fd2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c3:dd:ce:ab:05:fd:48:95:2c:41:b3:1e:ad:
                    ef:c2:3e:bf:c7:9c:23:56:84:85:94:09:68:a5:d5:
                    22:1c:85:5f:dc:93:15:1d:ad:a5:39:27:46:0f:21:
                    7b:68:77:95:38:b0:d9:83:d3:1d:f4:66:57:e5:58:
                    f9:c6:30:0b:98:29:6c:76:7a:8d:d1:98:56:68:de:
                    90:93:9c:00:fd:1b:ab:ad:7c:57:fa:8f:55:1e:0a:
                    85:ac:3b:3f:93:65:c9:a1:8a:4c:ce:9e:d8:74:fe:
                    da:97:aa:95:4a:35:5b:b1:be:aa:ba:2f:79:bb:df:
                    c2:3c:36:ad:c9:d8:be:c0:20:b0:36:1f:c0:ca:15:
                    aa:54:c8:5e:6b:5f:8c:bd:88:d0:4e:58:84:e0:42:
                    5e:e7:97:96:ee:ef:11:15:aa:d7:b9:77:2b:1f:eb:
                    9a:4a:0c:b7:c6:2c:15:35:e9:2c:1c:38:d6:ba:df:
                    49:82:59:f6:43:f9:96:68:49:79:ee:d5:6f:0e:ec:
                    0a:50:91:dc:aa:25:ee:04:bf:f3:de:0c:ff:e8:15:
                    68:96:5a:c0:35:bf:70:ed:0f:5b:96:0a:2b:26:cd:
                    05:0b:98:3f:e0:27:90:42:0a:26:da:c0:27:88:85:
                    d5:e4:be:74:4a:54:62:aa:9f:d8:18:cb:e4:2f:d3:
                    5e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:85:4C:57:2B:F0:25:35:9C:85:68:A8:B7:F9:E5:FC:20:6A:FE:FA
            X509v3 Authority Key Identifier:
                keyid:C7:95:E5:9C:03:0C:7C:92:9F:CB:E4:74:19:FC:5E:C6:9E:1F:AC:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5XlnAMMfJKfy-R0Gfxexp4frP0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:23:92:cd:f8:d8:15:97:e0:9c:d4:fd:d9:84:3e:96:d8:19:
         27:75:81:ba:8a:11:7c:65:f5:3d:77:3f:2e:46:dc:0e:7d:00:
         2a:31:b6:f7:9a:a9:4a:a7:5c:d8:0c:c2:12:67:0b:1e:38:a3:
         f6:6b:ea:8f:9a:de:7a:4c:6d:f3:e8:11:cd:f8:74:8b:53:52:
         94:17:ac:55:e5:95:4a:54:0a:f0:d5:18:15:2a:50:53:a3:ff:
         33:e2:8e:58:7b:56:3a:9f:43:a9:85:43:a6:7b:07:33:54:61:
         56:11:4e:ca:bf:d8:6f:d7:d7:cc:59:b2:0a:9b:1b:18:17:01:
         ea:f7:0a:3b:9f:bf:2f:e5:31:20:f1:f6:83:41:2e:e5:2e:b8:
         2d:58:f1:d7:aa:6e:74:41:37:3c:22:3b:34:17:c0:96:08:10:
         a5:0f:9e:73:2c:52:e5:a3:ee:33:22:00:32:a5:67:82:b6:78:
         d1:99:2d:55:88:30:fd:79:34:3a:dd:c9:7b:20:57:88:53:b0:
         6b:1d:5e:e1:21:db:49:0d:e2:3f:af:04:7b:2b:1c:91:7e:b0:
         f8:fd:d3:11:50:62:e8:b7:3e:f6:a5:8f:f1:e2:48:b5:cf:08:
         49:4e:69:c8:95:a7:bc:27:56:72:44:ee:0e:41:f2:2e:dd:50:
         3b:d9:ad:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:48:59 2025 by rpki-client