Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B01FF/B8C1E7D4412111ECAC525483C4F9AE02/Z15jpMF4xvVmAmQCRHJGTrmOG10.mft
File:                     Z15jpMF4xvVmAmQCRHJGTrmOG10.mft (raw, json)
Hash identifier:          g4mWOcx4oJ3V7OSRjpQg8+qdVhKwUYdI0Y38va2fkMk=
Subject key identifier:   BE:D7:81:02:4A:91:01:54:07:06:43:DF:60:D2:8B:4A:4E:4D:0E:1A
Authority key identifier: 67:5E:63:A4:C1:78:C6:F5:66:02:64:02:44:72:46:4E:B9:8E:1B:5D
Certificate issuer:       /CN=A91B01FF/serialNumber=675E63A4C178C6F5660264024472464EB98E1B5D
Certificate serial:       04D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z15jpMF4xvVmAmQCRHJGTrmOG10.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B01FF/B8C1E7D4412111ECAC525483C4F9AE02/Z15jpMF4xvVmAmQCRHJGTrmOG10.mft
Manifest number:          04D2
Signing time:             Tue 04 Nov 2025 23:53:57 +0000
Manifest this update:     Tue 04 Nov 2025 23:53:56 +0000
Manifest next update:     Tue 11 Nov 2025 23:53:56 +0000
Files and hashes:         1: Z15jpMF4xvVmAmQCRHJGTrmOG10.crl (hash: 9AZczAfjMuZBgLqBYu9N2rk6dqDDo6Sv3c3Tubp01Pw=)
                          2: CBCD0962B91511EE865E5E34C4F9AE02.roa (hash: /ooE2VFwIyhJ0GDoQeohGtb0l3eCORZIYsK88m8yo4M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B01FF/B8C1E7D4412111ECAC525483C4F9AE02/Z15jpMF4xvVmAmQCRHJGTrmOG10.crl
                          rsync://rpki.apnic.net/member_repository/A91B01FF/B8C1E7D4412111ECAC525483C4F9AE02/Z15jpMF4xvVmAmQCRHJGTrmOG10.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z15jpMF4xvVmAmQCRHJGTrmOG10.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 23:53:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1241 (0x4d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B01FF, serialNumber=675E63A4C178C6F5660264024472464EB98E1B5D
        Validity
            Not Before: Nov  4 23:53:56 2025 GMT
            Not After : Nov 11 23:53:56 2025 GMT
        Subject: CN=690a9215-d321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:34:4f:72:28:13:e2:07:c3:87:14:bb:c0:43:
                    9c:67:35:60:d8:f7:55:61:9c:df:4b:24:9e:2a:09:
                    b1:de:fe:a7:c4:2d:0e:c9:57:97:63:57:84:ca:a1:
                    ff:36:29:c0:d5:11:d3:45:db:f1:bb:7e:7a:d8:ba:
                    2c:f6:f6:1c:e3:5b:6f:12:00:fd:41:ec:88:12:29:
                    ad:68:7b:c9:3a:62:bb:63:d2:4d:de:97:f0:01:68:
                    32:74:60:94:60:e4:9f:bd:d4:ce:fa:b7:24:91:61:
                    71:c6:da:a6:79:bb:6e:6f:14:13:4e:05:b0:12:cd:
                    bf:c4:f5:a6:b7:20:91:5e:bc:f6:cb:11:47:db:2a:
                    41:eb:fb:62:c0:a5:37:52:bb:b1:3e:34:3e:3d:93:
                    71:4e:b0:7e:5d:2b:92:30:08:ca:0a:4f:6d:02:02:
                    0a:52:b7:6a:89:b7:d2:1e:60:f8:db:ab:90:9b:3e:
                    1b:d4:41:bb:8c:ca:bb:fc:cc:50:35:2e:c5:af:9c:
                    af:e8:aa:df:97:10:d7:b3:c7:4f:68:7a:80:ce:fb:
                    68:d6:f9:d3:32:c5:a4:ff:a8:c0:61:b8:ad:64:c6:
                    ec:4f:71:34:1f:a5:0c:ad:67:45:81:71:94:ea:a7:
                    1b:5b:b4:99:d5:a6:34:1d:88:ae:ce:3d:a6:92:c5:
                    f2:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:D7:81:02:4A:91:01:54:07:06:43:DF:60:D2:8B:4A:4E:4D:0E:1A
            X509v3 Authority Key Identifier:
                keyid:67:5E:63:A4:C1:78:C6:F5:66:02:64:02:44:72:46:4E:B9:8E:1B:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B01FF/B8C1E7D4412111ECAC525483C4F9AE02/Z15jpMF4xvVmAmQCRHJGTrmOG10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z15jpMF4xvVmAmQCRHJGTrmOG10.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B01FF/B8C1E7D4412111ECAC525483C4F9AE02/Z15jpMF4xvVmAmQCRHJGTrmOG10.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:ff:8c:76:a9:a8:79:85:49:0b:37:32:01:02:0d:42:11:5a:
         8b:06:28:5e:6b:96:d9:31:04:cd:57:92:ec:fd:fe:93:93:f5:
         e5:7c:be:1f:2d:f3:27:c1:6f:29:02:3b:6a:a5:30:9c:b8:47:
         93:31:1c:5e:7f:05:0e:c9:71:bb:0e:30:92:f5:54:2c:89:3a:
         11:d1:15:62:10:ca:74:7c:13:a5:e2:61:94:1a:3f:ab:8e:23:
         26:4f:48:16:95:23:e7:20:d3:7b:b4:9b:08:cd:55:c5:f4:cf:
         30:be:fd:17:41:db:39:44:55:7b:35:a8:54:21:aa:30:17:4e:
         d1:7e:95:2f:f3:0c:90:99:1c:f7:7b:03:ca:09:07:43:7a:fd:
         ba:a1:26:4a:de:8e:88:80:a6:b2:43:c7:e4:de:54:bc:2b:d9:
         6b:c1:4c:75:87:24:65:a4:75:03:70:54:98:cf:a6:d8:36:64:
         2d:37:8e:ac:1d:96:ec:cd:00:af:e2:9f:b1:6c:ec:07:c2:82:
         2a:1c:5f:73:fc:e0:f1:69:6e:2e:e2:af:aa:7f:b4:e6:a6:87:
         a7:6c:ac:1c:41:64:0a:21:36:05:36:d6:6a:c0:2d:80:aa:44:
         ec:28:30:af:18:be:33:2f:e8:70:ff:d1:59:38:c5:af:a9:f9:
         21:eb:43:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:16:14 2025 by rpki-client