Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft
File:                     5CnUKeZreXs9ihy-JJFXetw4pI4.mft (raw, json)
Hash identifier:          EueaIhF0lXc6B8cLjn61tSNufIXOVSE5G30a8qnfJA4=
Subject key identifier:   A8:78:12:A7:1F:2F:0A:E8:02:84:B7:5E:62:AA:05:E7:D1:0F:34:62
Authority key identifier: E4:29:D4:29:E6:6B:79:7B:3D:8A:1C:BE:24:91:57:7A:DC:38:A4:8E
Certificate issuer:       /CN=A91CC711/serialNumber=E429D429E66B797B3D8A1CBE2491577ADC38A48E
Certificate serial:       0150
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft
Manifest number:          0130
Signing time:             Mon 03 Nov 2025 04:56:53 +0000
Manifest this update:     Mon 03 Nov 2025 04:56:53 +0000
Manifest next update:     Mon 10 Nov 2025 04:56:53 +0000
Files and hashes:         1: 5CnUKeZreXs9ihy-JJFXetw4pI4.crl (hash: pYWkhoOjSXKbYOcY5XQ4KYYUJt3JXx+oSkRpIc8fnpM=)
                          2: 06FA65A81F2711EF98DA2926C4F9AE02.roa (hash: oS4PRK+VFwkVhFqqmzFtlUlVZ/0tESve4AVvdpaS7tg=)
                          3: 25ED44B41EE411EFA62B1335C4F9AE02.roa (hash: zb91MkoqcDkuzuZwD7VYBRLCNDf9oSeL0ikN94ozVn8=)
                          4: A7FC5DEE8D0411EFBD7A0057C4F9AE02.roa (hash: TGsIq74Qma+U6c7Ey8qeEz04VjG5STVU5SpvAS46Q6U=)
                          5: 359CBDB28D0D11EF90882959C4F9AE02.roa (hash: qdwbcsIyL1f3wI2tO7dwB6BR0n7SfSV/G7xRpNDHqtU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.crl
                          rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 04:56:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 336 (0x150)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CC711, serialNumber=E429D429E66B797B3D8A1CBE2491577ADC38A48E
        Validity
            Not Before: Nov  3 04:56:53 2025 GMT
            Not After : Nov 10 04:56:53 2025 GMT
        Subject: CN=69083615-e84c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5f:e8:c9:0f:bc:20:06:c9:07:92:17:c1:9d:
                    d7:0f:06:6b:5d:67:e7:16:2e:63:32:2e:8a:e0:6a:
                    2c:97:1b:0b:7a:d2:e6:43:b9:40:45:cc:11:b7:59:
                    f4:f5:3b:e2:6f:2f:ff:95:b6:50:c7:b3:fe:74:c5:
                    c6:36:c3:e5:ea:f1:0c:0c:13:bc:65:1f:ee:cd:41:
                    b6:8b:ab:16:96:ed:ed:7c:58:e0:a6:0c:87:b3:6c:
                    44:83:14:61:48:9c:68:0c:5a:a2:66:cd:6b:26:3a:
                    83:45:47:84:08:2b:74:39:1d:ee:d3:c0:f1:f0:40:
                    56:e0:c3:a1:06:91:77:8c:23:6e:09:a6:36:63:be:
                    b0:a6:b9:f8:78:18:8f:01:a9:99:97:84:1b:94:3b:
                    e6:0a:1a:44:40:9c:e0:a6:93:9c:6a:68:8c:1a:f0:
                    ad:71:8b:06:86:8a:cf:37:d4:65:cc:03:f3:3d:55:
                    18:b0:2a:85:74:f5:1a:c9:24:78:9f:86:22:83:93:
                    f1:13:0b:78:69:49:14:6f:93:5a:cc:af:2d:e1:1f:
                    e6:22:59:f8:1d:65:d1:0f:01:cf:93:09:73:8d:35:
                    38:ee:0b:11:18:1d:a7:ea:aa:ef:ef:d8:0d:20:1f:
                    58:33:c8:3a:2c:48:fd:12:83:ff:10:bd:56:d3:ea:
                    77:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:78:12:A7:1F:2F:0A:E8:02:84:B7:5E:62:AA:05:E7:D1:0F:34:62
            X509v3 Authority Key Identifier:
                keyid:E4:29:D4:29:E6:6B:79:7B:3D:8A:1C:BE:24:91:57:7A:DC:38:A4:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:e2:1f:96:b2:a4:cb:61:db:b9:fd:82:75:24:09:54:de:e5:
         83:58:4d:ef:bd:56:75:f2:e9:e3:93:94:d1:63:b1:72:aa:d6:
         c1:57:2f:c9:41:28:3d:3c:ec:df:9f:39:cd:1e:7a:6f:38:00:
         ae:c9:12:3a:a3:05:e3:7e:18:92:a9:60:94:ef:62:42:c8:b5:
         22:51:bf:34:67:c2:9f:de:79:61:48:20:2a:9e:7a:d7:8f:6e:
         4e:8a:2f:69:9d:be:9b:92:56:29:ae:29:69:8d:40:a7:c3:e0:
         36:34:41:8c:f2:f6:25:31:c8:ee:9b:3f:20:4c:66:46:ec:64:
         cb:f5:c2:48:35:46:c6:dd:01:a1:d3:7a:b9:a7:cb:ff:55:8e:
         e7:4b:56:c0:4a:3a:ec:5a:d4:fa:7b:65:fa:af:eb:a7:60:60:
         22:be:1e:9b:21:61:4b:df:69:1d:b1:5c:1e:85:66:d2:ef:b5:
         ef:97:2d:19:1f:73:ef:8d:5d:1a:71:48:0e:84:f9:1f:25:10:
         8b:94:20:e5:6c:f7:8a:41:56:97:c1:d5:ea:0e:14:44:10:69:
         3c:e1:40:38:3d:6c:c2:fa:ae:00:b4:d0:84:d4:d3:21:9d:19:
         25:86:6d:03:7b:83:bd:d7:c0:e0:8b:4e:e2:ae:b2:26:30:ee:
         96:4b:73:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 12:34:51 2025 by rpki-client