Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.mft
File:                     rtuffjhfpkQ204S8t7kuCUaVVDM.mft (raw, json)
Hash identifier:          /cxWq5OqmbCxyd8wHNpRER8hZQ3Bx8i/6X+o7xmTncA=
Subject key identifier:   8B:52:5E:15:3A:6E:FC:65:F9:D0:E1:41:3E:60:54:63:5B:27:3F:0B
Authority key identifier: AE:DB:9F:7E:38:5F:A6:44:36:D3:84:BC:B7:B9:2E:09:46:95:54:33
Certificate issuer:       /CN=A911424D/serialNumber=AEDB9F7E385FA64436D384BCB7B92E0946955433
Certificate serial:       0F35
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rtuffjhfpkQ204S8t7kuCUaVVDM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.mft
Manifest number:          0F2C
Signing time:             Sat 18 Oct 2025 18:12:34 +0000
Manifest this update:     Sat 18 Oct 2025 18:12:33 +0000
Manifest next update:     Sat 25 Oct 2025 18:12:33 +0000
Files and hashes:         1: rtuffjhfpkQ204S8t7kuCUaVVDM.crl (hash: vKk+glYvejmz77DqEVCAQSwYrBmuV7jlHvgveS7iiMo=)
                          2: 87625FC0812011E9890A4533C4F9AE02.roa (hash: LbtoKXQWVtjM8PuzryWfj67xT/YA5C3Pl76nVAvV2lM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.crl
                          rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rtuffjhfpkQ204S8t7kuCUaVVDM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 18:12:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3893 (0xf35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911424D, serialNumber=AEDB9F7E385FA64436D384BCB7B92E0946955433
        Validity
            Not Before: Oct 18 18:12:33 2025 GMT
            Not After : Oct 25 18:12:33 2025 GMT
        Subject: CN=68f3d892-1dfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b1:22:f2:7d:81:2d:7f:fb:28:fe:a8:9a:8e:
                    c8:84:a9:ac:36:7a:4f:09:25:81:fa:22:62:e3:c3:
                    73:b7:dc:a8:32:00:17:82:53:2b:b6:6f:86:ff:c2:
                    c6:09:35:9d:b8:a2:10:bd:56:17:1e:9e:93:68:39:
                    43:1f:c5:d0:5f:1b:d3:27:a7:18:b1:55:52:2d:ff:
                    b6:7d:7d:21:fb:c4:7c:a7:3b:cb:52:70:c6:a6:3d:
                    fe:ac:85:0e:47:8d:10:7b:8c:2b:74:68:3b:15:d4:
                    4a:50:9e:fb:1e:da:e3:35:20:f5:e4:31:76:3a:a2:
                    df:71:9b:39:44:e3:24:4c:c7:d1:1a:0f:ea:21:bb:
                    3d:ee:f1:04:22:4f:a5:51:bf:c7:13:f0:a1:7d:e7:
                    2a:2d:7a:b4:59:34:34:ba:61:39:15:94:1b:44:e3:
                    19:a0:b1:6a:20:80:a5:b9:89:d5:46:ee:84:77:e6:
                    32:19:63:18:48:55:d0:5b:fb:79:a1:01:a3:04:72:
                    e1:d7:b8:8e:6d:1b:54:2c:a9:08:a9:8c:61:0e:21:
                    c6:73:5b:b3:ed:f7:48:c1:e9:cd:02:62:e4:f0:cd:
                    47:99:b9:39:de:51:83:ac:82:ad:9c:bc:7c:15:45:
                    86:51:35:21:0f:e3:1e:f2:fc:7c:b4:e7:bf:ab:f7:
                    7e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:52:5E:15:3A:6E:FC:65:F9:D0:E1:41:3E:60:54:63:5B:27:3F:0B
            X509v3 Authority Key Identifier:
                keyid:AE:DB:9F:7E:38:5F:A6:44:36:D3:84:BC:B7:B9:2E:09:46:95:54:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rtuffjhfpkQ204S8t7kuCUaVVDM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:7a:69:3a:c6:ea:bb:18:af:91:5b:8d:20:b5:35:41:eb:ee:
         80:33:b5:24:7b:aa:d1:d2:d4:0a:f3:ca:8d:43:fe:ad:e3:5a:
         fd:cf:6c:79:06:0f:11:15:99:7c:ca:b6:52:77:33:c3:3e:3c:
         fa:31:ac:65:a9:8c:ad:85:87:4a:4a:94:ef:03:25:05:72:8e:
         5d:4e:c4:c6:df:78:a5:57:1e:63:f3:79:99:58:48:27:dc:4a:
         b7:9b:ee:b7:65:e7:3a:45:b3:52:94:90:5a:56:4e:ea:40:5d:
         a6:f5:34:80:19:4c:0a:e6:e9:5c:d6:64:95:04:72:20:93:55:
         49:8c:61:67:5c:bb:0c:9c:24:68:42:bf:4a:0c:73:34:bb:57:
         ea:74:26:18:91:e1:1b:2d:40:2e:0f:f7:2d:b3:b9:9b:59:c3:
         ee:88:2e:74:79:24:ab:bd:d5:f8:e5:8e:72:bc:ce:47:11:2a:
         af:11:f7:79:03:b6:e2:60:e0:29:0e:60:25:8f:48:68:60:96:
         c7:42:e2:82:9f:37:e7:5c:ee:24:5f:4c:f4:0e:d6:ff:4e:47:
         7e:1a:ab:11:a6:da:81:e8:86:0b:89:07:10:90:a5:a8:d1:19:
         cc:f8:1b:6e:b4:9d:6c:30:35:a3:22:7e:6a:39:01:3e:b0:00:
         54:4f:a7:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:32:01 2025 by rpki-client