Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.mft
File:                     6H3GxccQQ5BX2KvtkMJtDJyHKzQ.mft (raw, json)
Hash identifier:          FFrnhGKucMFTqtLZUzkMghjxtU8gojImDOUF7VDgIJ8=
Subject key identifier:   5C:7D:A5:08:F4:DA:0F:22:AE:9B:F3:59:72:5C:08:57:B7:C3:B5:F3
Authority key identifier: E8:7D:C6:C5:C7:10:43:90:57:D8:AB:ED:90:C2:6D:0C:9C:87:2B:34
Certificate issuer:       /CN=A9137ABC/serialNumber=E87DC6C5C710439057D8ABED90C26D0C9C872B34
Certificate serial:       2A52
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.mft
Manifest number:          2A41
Signing time:             Sat 18 Oct 2025 14:21:30 +0000
Manifest this update:     Sat 18 Oct 2025 14:21:29 +0000
Manifest next update:     Sat 25 Oct 2025 14:21:29 +0000
Files and hashes:         1: 6H3GxccQQ5BX2KvtkMJtDJyHKzQ.crl (hash: SPDQljjtwjY87JNaIjrZu8M7s9ymdAIXNHCUWG8Tf8o=)
                          2: 79AF67622C3C11EE81B24651C4F9AE02.roa (hash: vmKqro3gn7F1Qg3wm7Klm7w2ti+vviDyxmMgM4ZcJqw=)
                          3: 7A90F2402C3C11EE81B24651C4F9AE02.roa (hash: IS6RP+KmoY800ilz+9/FraPb2PhtRfq61ziRhaqYPqA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 14:21:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10834 (0x2a52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC, serialNumber=E87DC6C5C710439057D8ABED90C26D0C9C872B34
        Validity
            Not Before: Oct 18 14:21:29 2025 GMT
            Not After : Oct 25 14:21:29 2025 GMT
        Subject: CN=68f3a269-efdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:88:b6:de:3f:08:e5:2f:8c:b4:2f:72:0e:82:
                    ee:58:57:c9:6c:01:02:48:ae:bb:52:63:ec:81:a3:
                    a3:5d:5d:15:81:83:90:24:85:3e:3f:66:b6:18:a4:
                    0d:08:ec:0a:65:3f:67:7f:16:27:b7:12:7b:e1:8b:
                    86:44:f6:60:a6:28:ee:00:04:e1:4a:90:dc:c0:66:
                    01:47:8c:bf:a0:30:7e:d4:44:d1:b5:56:3f:31:56:
                    82:c2:e2:f7:ca:43:a8:c7:dd:fc:2e:56:5c:45:99:
                    bf:ab:b5:e8:75:22:a0:96:5d:b0:de:53:ab:47:d7:
                    77:62:cb:a7:3f:5a:e6:11:e0:59:cf:a8:6d:60:be:
                    de:1e:0f:af:a9:b7:d8:52:20:c9:d1:3a:68:b9:43:
                    95:22:44:05:50:f4:ee:19:b7:95:52:30:a9:98:2b:
                    4f:72:6c:6e:63:52:48:80:11:32:16:12:3e:9b:c3:
                    c6:bb:f1:ab:26:36:7a:90:0c:1a:dd:2e:51:4c:ea:
                    7d:72:27:c5:d2:be:e4:2f:9c:bf:e7:30:5d:02:9a:
                    7d:31:7c:4b:0d:c4:73:59:2e:b9:4f:f2:ef:77:6f:
                    cf:28:60:f7:00:7a:47:02:51:d7:d2:b9:1f:b2:6a:
                    f8:01:11:cd:8f:bd:1a:99:5a:bb:70:ab:ef:c0:ef:
                    1c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:7D:A5:08:F4:DA:0F:22:AE:9B:F3:59:72:5C:08:57:B7:C3:B5:F3
            X509v3 Authority Key Identifier:
                keyid:E8:7D:C6:C5:C7:10:43:90:57:D8:AB:ED:90:C2:6D:0C:9C:87:2B:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:e8:95:54:fb:e4:6b:8f:01:99:ff:60:5b:f8:29:55:35:82:
         5a:d1:bb:20:79:4b:89:f4:b7:5b:62:89:41:4c:2b:4b:87:30:
         2c:47:8c:fd:7a:f8:53:63:fc:61:ed:62:f5:7d:18:d2:0c:5c:
         b1:42:f2:1f:1c:91:54:c2:9b:d2:f5:e1:43:46:4e:15:76:fc:
         d8:b1:f1:41:52:59:88:d3:fe:22:1b:fb:0c:ac:57:05:86:5e:
         21:f3:bc:3e:34:7b:bd:db:a4:23:33:d8:ef:44:d3:5b:8e:d2:
         a8:ca:1e:5a:89:02:de:77:65:c6:a5:78:93:eb:28:81:6d:f6:
         7c:71:4d:f7:c4:72:6f:8b:ed:fc:ac:e2:8a:ce:84:fe:b1:96:
         2b:b4:62:a6:8f:47:eb:5a:88:20:d8:a6:60:35:87:52:de:23:
         2f:64:83:f3:89:b3:a9:c0:9d:5a:91:db:04:04:ed:6c:ad:44:
         26:0a:5a:8d:aa:4b:ac:fa:b0:a5:01:c0:50:7b:04:1b:0a:fb:
         8c:21:23:53:86:48:c0:e3:97:60:0e:8f:45:2a:da:b1:3e:ee:
         c2:a0:7e:76:6f:b6:37:22:fe:26:e2:2f:90:4e:fd:73:84:32:
         69:9c:30:8e:94:ce:25:08:af:05:78:2e:7f:82:2e:c1:f0:a5:
         41:af:a4:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:37:31 2025 by rpki-client