Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/mBpus4OnlllRIB38cbLqDUSWGxQ.mft
File:                     mBpus4OnlllRIB38cbLqDUSWGxQ.mft (raw, json)
Hash identifier:          Tfui49u4NImg1mplyPUofdgNO/QycprytUehHOxk77s=
Subject key identifier:   6E:1C:F1:C5:14:9D:73:E3:B2:11:BF:6A:36:CE:1A:DB:0D:16:75:81
Authority key identifier: 98:1A:6E:B3:83:A7:96:59:51:20:1D:FC:71:B2:EA:0D:44:96:1B:14
Certificate issuer:       /CN=A9110888/serialNumber=981A6EB383A7965951201DFC71B2EA0D44961B14
Certificate serial:       05A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBpus4OnlllRIB38cbLqDUSWGxQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/mBpus4OnlllRIB38cbLqDUSWGxQ.mft
Manifest number:          05A2
Signing time:             Sun 19 Oct 2025 00:50:57 +0000
Manifest this update:     Sun 19 Oct 2025 00:50:57 +0000
Manifest next update:     Sun 26 Oct 2025 00:50:57 +0000
Files and hashes:         1: mBpus4OnlllRIB38cbLqDUSWGxQ.crl (hash: VXnXqx8TtSvdCSzDMN6LrolIjGOahawL2GGn7ugNN9U=)
                          2: B6FC3096EB1611EBB525CD6AC4F9AE02.roa (hash: 9s+ytbSfZP14tsCh3SQ3yDAVSot/0B8wxn8RGQZH8yM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/mBpus4OnlllRIB38cbLqDUSWGxQ.crl
                          rsync://rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/mBpus4OnlllRIB38cbLqDUSWGxQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBpus4OnlllRIB38cbLqDUSWGxQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 00:50:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1448 (0x5a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110888, serialNumber=981A6EB383A7965951201DFC71B2EA0D44961B14
        Validity
            Not Before: Oct 19 00:50:57 2025 GMT
            Not After : Oct 26 00:50:57 2025 GMT
        Subject: CN=68f435f1-a2bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8a:00:ee:e1:f9:5f:dc:28:db:91:18:dc:e3:
                    f7:24:28:cc:6d:94:a1:3e:1d:57:a7:6e:9a:52:2a:
                    1e:d6:80:2c:b7:5e:89:c3:7f:dc:81:26:2c:e6:47:
                    51:ec:3f:b0:7c:b8:73:f7:16:9e:2f:8f:69:3e:f7:
                    ff:f7:01:80:a1:e6:bb:4b:bf:66:ff:b2:8a:f9:36:
                    70:30:f9:c1:b2:97:5f:85:4d:4a:f0:63:cc:59:2d:
                    b9:b8:cb:5b:04:ba:e0:e6:40:d4:2b:e6:72:35:21:
                    86:cf:da:46:1e:28:a8:81:c1:dd:1c:1a:f9:53:58:
                    07:91:58:4d:d1:7c:38:69:ba:e1:ff:3f:84:67:e4:
                    e0:44:7b:f4:4e:4d:20:8a:94:4b:f6:7a:64:54:a6:
                    4e:99:d6:53:d6:04:66:4a:74:39:ba:af:fb:dc:79:
                    a0:0a:24:b8:2a:0f:84:ab:77:97:30:e8:ac:bb:08:
                    7d:82:60:c0:1b:76:5b:54:08:90:81:b6:c2:8f:f5:
                    f9:a5:0c:9c:f8:ad:e8:85:b4:d4:be:f2:a1:2f:a9:
                    79:e7:29:e5:b3:14:c1:a1:3b:94:89:f1:54:64:06:
                    a1:97:b0:e0:59:72:e2:c9:10:88:c5:a6:35:cc:33:
                    a9:fa:15:df:cd:ab:53:6d:86:ea:b2:b9:9f:d2:3c:
                    39:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:1C:F1:C5:14:9D:73:E3:B2:11:BF:6A:36:CE:1A:DB:0D:16:75:81
            X509v3 Authority Key Identifier:
                keyid:98:1A:6E:B3:83:A7:96:59:51:20:1D:FC:71:B2:EA:0D:44:96:1B:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/mBpus4OnlllRIB38cbLqDUSWGxQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBpus4OnlllRIB38cbLqDUSWGxQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/mBpus4OnlllRIB38cbLqDUSWGxQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:11:c8:d7:71:c0:cb:03:63:bc:61:49:90:8a:6f:bc:f4:80:
         8f:69:53:cb:cd:05:63:52:de:90:bb:cd:4a:75:bc:35:98:e0:
         f7:81:0c:9c:5e:03:fd:09:07:c4:c8:d8:6e:ea:0b:6f:e6:6a:
         98:4c:f2:6a:61:db:83:dc:92:1e:74:38:98:c5:01:3c:0d:57:
         3f:4a:d6:0a:ad:66:f8:36:92:ea:43:a8:cc:71:1e:42:bb:a2:
         0a:1b:7c:b1:86:e7:cb:87:7a:c9:68:9c:97:20:08:b1:70:1c:
         ef:f2:85:54:09:7f:7d:58:a9:af:b3:94:78:b9:74:23:2d:00:
         ab:eb:cd:3a:d0:44:de:42:85:20:96:b6:61:ac:21:62:b9:f5:
         b1:95:63:e9:f7:a9:f1:a0:ea:fd:b5:a6:3a:2f:5e:24:e0:6e:
         44:92:a0:78:9b:07:2d:26:c3:be:71:87:72:98:60:86:89:97:
         34:46:83:b5:fb:3c:8a:af:0b:e2:3a:43:54:c9:6b:e4:f2:ce:
         a2:af:b2:e7:6a:82:19:ef:85:2a:45:41:33:8a:81:59:da:ca:
         eb:ef:f8:95:22:45:46:59:52:e7:53:7a:54:84:58:42:1c:a5:
         1d:3d:40:34:26:38:b6:f2:bc:88:4c:c0:b4:03:c3:15:2e:5c:
         4b:bb:c2:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:43:48 2025 by rpki-client