Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.mft
File:                     M3tFD93J_HAiHaXKCXhYhbHRt8w.mft (raw, json)
Hash identifier:          t+H8Fzl8ckbaI1csrwxfQr7EPPUWTYk2O4OfRbHfot8=
Subject key identifier:   F8:F1:71:1D:4B:39:67:3B:85:EB:51:12:BB:84:E0:2A:5A:6B:6B:66
Authority key identifier: 33:7B:45:0F:DD:C9:FC:70:22:1D:A5:CA:09:78:58:85:B1:D1:B7:CC
Certificate issuer:       /CN=A912981B/serialNumber=337B450FDDC9FC70221DA5CA09785885B1D1B7CC
Certificate serial:       0150
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3tFD93J_HAiHaXKCXhYhbHRt8w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.mft
Manifest number:          0144
Signing time:             Sun 19 Oct 2025 07:14:24 +0000
Manifest this update:     Sun 19 Oct 2025 07:14:23 +0000
Manifest next update:     Sun 26 Oct 2025 07:14:23 +0000
Files and hashes:         1: M3tFD93J_HAiHaXKCXhYhbHRt8w.crl (hash: JV50AUXzMo9/7R5UfPrf/dVy1VIqGDuz3H4JxzX1JRE=)
                          2: 9DD56C2A3FD311F08A76B677C4F9AE02.roa (hash: EhoFh5hj1fnJIAYm7dVoqkfeol8zF4Op7mwB2iCWpG0=)
                          3: 9D107CE43FD311F08A76B677C4F9AE02.roa (hash: M4xxwp5XL8JXkQpTNZQamOx/rEaiqoV0xB/oQh2Nk2Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.crl
                          rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3tFD93J_HAiHaXKCXhYhbHRt8w.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 07:14:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 336 (0x150)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912981B, serialNumber=337B450FDDC9FC70221DA5CA09785885B1D1B7CC
        Validity
            Not Before: Oct 19 07:14:23 2025 GMT
            Not After : Oct 26 07:14:23 2025 GMT
        Subject: CN=68f48fcf-a18a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:42:06:24:36:9a:78:5e:9e:d0:3c:9c:b6:39:
                    26:f1:5e:bd:a9:cb:fe:4e:9b:d9:2f:cc:10:8e:a4:
                    bc:fe:bf:d6:10:0f:a2:17:6a:49:fa:62:c6:9c:ca:
                    10:23:3e:0b:6f:35:6a:63:bc:32:49:74:f3:71:2f:
                    06:ed:71:fe:d4:74:df:40:dd:87:94:c1:d7:d2:bf:
                    e5:8b:b0:1d:14:50:36:ab:52:d6:6e:d5:be:86:ee:
                    57:4c:b7:47:4b:9f:ea:1f:5d:49:4b:6c:88:1c:73:
                    b8:cb:4b:5f:58:45:76:fd:8c:35:a9:55:a0:17:32:
                    dc:28:4a:cb:a7:61:b9:b2:ef:c3:ae:3d:db:e5:52:
                    a7:93:c1:5b:5c:44:81:34:bb:ce:99:12:b3:cb:d9:
                    04:7d:43:89:92:d4:d9:61:e8:87:fa:95:4b:38:87:
                    ff:36:a6:4d:68:b1:b7:cf:ec:c0:88:49:a1:46:a5:
                    b3:69:64:17:0c:29:75:42:f3:d2:8f:63:9d:0b:00:
                    2a:90:60:4d:93:ae:4d:e8:35:1d:ea:27:e1:9c:b2:
                    d1:e0:8e:19:f3:7b:d0:ce:5d:7b:e3:5e:1d:14:27:
                    b6:ec:c3:eb:09:56:e5:25:c9:f8:9b:b5:e5:70:2f:
                    ca:7d:75:09:d2:a9:53:8c:25:25:65:d4:75:70:37:
                    c6:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:F1:71:1D:4B:39:67:3B:85:EB:51:12:BB:84:E0:2A:5A:6B:6B:66
            X509v3 Authority Key Identifier:
                keyid:33:7B:45:0F:DD:C9:FC:70:22:1D:A5:CA:09:78:58:85:B1:D1:B7:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3tFD93J_HAiHaXKCXhYhbHRt8w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:24:34:24:d1:98:e9:21:44:c1:b8:dd:0a:ac:67:44:02:ca:
         62:84:b5:a2:6f:dd:b8:44:55:ed:cb:fb:3a:07:55:cc:17:d3:
         a1:c9:cc:0c:5e:dc:63:e5:04:25:6d:7b:7c:6b:41:60:1f:04:
         73:14:33:1a:71:f4:27:49:66:ae:71:b2:15:ca:86:b2:54:e3:
         fa:0a:14:4d:cc:6c:92:5b:a8:1f:9c:83:8e:2f:6f:ca:49:12:
         93:9a:7a:d4:48:dd:1b:d4:32:27:35:b6:7f:dd:f8:f9:fe:a2:
         1e:3c:04:7f:dd:27:8f:1b:aa:a3:7f:0c:5d:a5:0b:cd:9e:d1:
         4b:de:d7:18:2a:11:0c:bc:2a:dc:9f:f4:ac:09:10:07:0f:dd:
         12:72:86:a7:c2:63:95:05:fa:c7:9f:e4:fb:3a:fa:17:39:c3:
         ed:10:c8:60:a2:39:ce:3c:7c:88:fb:5e:f0:59:63:4f:70:73:
         19:98:23:05:18:e8:6d:2b:6b:d3:9c:f1:40:99:38:04:d2:50:
         45:65:b9:34:11:fa:47:3f:47:f3:d9:d3:fe:6f:ce:43:bb:50:
         3f:b1:54:78:0b:ae:83:3f:dd:a6:35:e2:ee:fe:a6:d2:24:ad:
         6e:3c:5f:64:9c:43:c1:91:67:5e:58:35:30:7a:e7:9e:77:23:
         55:b8:2d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:20:48 2025 by rpki-client