Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.mft
File:                     M3WpYTTFczGvVN1xTtNj2rMba9A.mft (raw, json)
Hash identifier:          TzMI2mdTKYNVR2YsP0G0yLKT7cY+zpraeC37yW8fZDU=
Subject key identifier:   8B:D1:29:61:23:C8:13:15:FE:9E:C2:3D:3C:96:7D:0F:4E:45:71:36
Authority key identifier: 33:75:A9:61:34:C5:73:31:AF:54:DD:71:4E:D3:63:DA:B3:1B:6B:D0
Certificate issuer:       /CN=A9115620/serialNumber=3375A96134C57331AF54DD714ED363DAB31B6BD0
Certificate serial:       D5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3WpYTTFczGvVN1xTtNj2rMba9A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.mft
Manifest number:          D3
Signing time:             Sun 19 Oct 2025 08:43:48 +0000
Manifest this update:     Sun 19 Oct 2025 08:43:47 +0000
Manifest next update:     Sun 26 Oct 2025 08:43:47 +0000
Files and hashes:         1: M3WpYTTFczGvVN1xTtNj2rMba9A.crl (hash: YpQjPhc42lH1fmbciRhJH3FlcrRaum4Bit5tKdBAQmE=)
                          2: 8334E4446BA911EFADEBED84C4F9AE02.roa (hash: /b8c3NYiRoYt5VnH0mNcKwqwOmBEVRecdoyF1gyL4+8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.crl
                          rsync://rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3WpYTTFczGvVN1xTtNj2rMba9A.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 08:43:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 213 (0xd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9115620, serialNumber=3375A96134C57331AF54DD714ED363DAB31B6BD0
        Validity
            Not Before: Oct 19 08:43:47 2025 GMT
            Not After : Oct 26 08:43:47 2025 GMT
        Subject: CN=68f4a4c3-2329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:4d:61:21:78:fe:32:8e:ba:d3:e9:ee:5a:e9:
                    54:f1:8a:fc:70:91:a9:5f:09:a0:c7:9b:5c:e5:cf:
                    0a:36:c3:c9:88:9d:c4:7c:f4:1f:21:4f:12:c8:a7:
                    cb:4c:d2:50:4b:05:1c:74:7b:a0:f7:a9:be:d3:31:
                    9d:26:aa:68:43:58:66:aa:9b:b7:f8:df:53:07:97:
                    c9:9e:92:4b:ed:d6:86:57:ef:b0:af:8f:60:cb:d4:
                    60:6e:00:36:bc:e0:0e:75:63:38:99:8e:24:33:2a:
                    94:39:d0:94:a0:20:9d:c4:95:ec:55:3f:da:1c:97:
                    6d:64:19:c4:5d:78:e0:de:e2:ae:6c:5f:8d:fb:56:
                    1f:75:5f:57:75:24:e8:3c:50:62:cb:b0:a6:bc:99:
                    b2:1b:eb:f6:0d:2d:1c:40:ab:3f:1d:13:65:d1:1d:
                    34:22:e9:c9:09:c3:28:e1:5e:f6:d6:f5:d1:0c:42:
                    a6:ae:14:85:4b:db:99:90:58:e5:7c:a3:0d:cc:11:
                    83:a4:62:6b:98:8c:03:0e:91:3e:50:cb:e5:3a:98:
                    47:48:31:d5:89:ed:cf:6b:d5:9f:08:4c:d5:07:31:
                    7e:c1:fc:bf:52:6b:2e:d3:35:8b:30:d3:b5:cb:ad:
                    ba:f0:81:1b:64:1c:09:16:c7:73:c0:e8:a0:b2:5b:
                    2e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:D1:29:61:23:C8:13:15:FE:9E:C2:3D:3C:96:7D:0F:4E:45:71:36
            X509v3 Authority Key Identifier:
                keyid:33:75:A9:61:34:C5:73:31:AF:54:DD:71:4E:D3:63:DA:B3:1B:6B:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3WpYTTFczGvVN1xTtNj2rMba9A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:50:4d:a5:6f:e2:2d:7c:d4:99:f6:b0:f3:db:92:a7:51:6c:
         96:82:b7:17:62:f0:65:44:ff:d8:f2:ba:dc:0c:0b:70:c4:c3:
         26:77:35:01:46:94:61:91:89:73:04:27:66:65:b7:a3:fe:5c:
         ae:7e:41:ab:80:27:cd:52:4b:36:86:69:b7:03:84:14:b8:56:
         fb:13:99:37:81:39:2f:c3:a6:91:78:e6:3c:f4:02:e7:ea:70:
         a3:65:11:3b:50:4e:b1:ac:12:b3:75:0f:e2:af:22:b5:91:0d:
         fa:a7:12:09:92:de:9b:66:26:8d:c0:83:e4:2d:ee:60:e4:0f:
         47:b1:2a:ca:02:57:07:4d:83:58:a3:a1:ea:e3:f7:46:4d:70:
         a9:76:12:b8:8d:22:11:6d:07:27:f7:58:18:3b:7a:95:42:fa:
         eb:27:9b:33:48:08:b8:b0:9f:27:6b:0f:83:bf:d9:bb:97:3e:
         81:e2:e9:56:99:17:36:22:5e:30:0e:36:12:5b:67:6e:2d:db:
         c3:34:28:48:3b:02:3b:b7:6c:cd:96:22:25:b7:ba:f1:81:0a:
         53:52:cb:8a:b6:21:77:c8:55:6a:03:00:8a:fb:64:09:4d:df:
         ed:5c:13:8d:8d:a2:a9:cf:a2:fb:58:3a:1d:08:48:ff:7c:48:
         bd:f2:b8:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:08:27 2025 by rpki-client