Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft
File:                     b3fBnxHTKqqkLiaRb3SC77j5ehw.mft (raw, json)
Hash identifier:          9B0/KsGD+PlLB29ltOjJbJzU9mzqxCsra+nPbxHAmmo=
Subject key identifier:   F5:3B:0D:32:F3:84:9E:91:55:F1:83:D0:06:DA:44:47:D3:58:00:B0
Authority key identifier: 6F:77:C1:9F:11:D3:2A:AA:A4:2E:26:91:6F:74:82:EF:B8:F9:7A:1C
Certificate issuer:       /CN=A913D125/serialNumber=6F77C19F11D32AAAA42E26916F7482EFB8F97A1C
Certificate serial:       97
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b3fBnxHTKqqkLiaRb3SC77j5ehw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft
Manifest number:          95
Signing time:             Sun 19 Oct 2025 09:41:21 +0000
Manifest this update:     Sun 19 Oct 2025 09:41:20 +0000
Manifest next update:     Sun 26 Oct 2025 09:41:20 +0000
Files and hashes:         1: b3fBnxHTKqqkLiaRb3SC77j5ehw.crl (hash: Ztui8SH3NeqAxL147QLi8eplxvjRbhBO648c5ZsmOc0=)
                          2: 62743016CC1111EFA5744A6FC4F9AE02.roa (hash: 6dXw7Y4MWNrxoZ0iMg2dM88R43+4l/3mUETzTfwLRvg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.crl
                          rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b3fBnxHTKqqkLiaRb3SC77j5ehw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 09:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 151 (0x97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D125, serialNumber=6F77C19F11D32AAAA42E26916F7482EFB8F97A1C
        Validity
            Not Before: Oct 19 09:41:20 2025 GMT
            Not After : Oct 26 09:41:20 2025 GMT
        Subject: CN=68f4b240-c8aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:88:46:2d:b5:49:cb:23:a5:33:6a:66:e2:5a:
                    c9:f3:60:42:6b:83:f3:6b:54:2d:a1:d4:27:9a:27:
                    bd:08:78:e1:80:0d:cb:8a:77:82:69:f9:0b:3d:cf:
                    51:86:23:ba:5a:48:ce:8b:e4:ba:12:a6:3c:26:f5:
                    a0:cb:fe:a8:98:a2:25:04:83:1c:5e:0c:3c:cd:71:
                    0b:57:4f:f5:86:f9:55:d5:d7:71:27:b0:8c:82:94:
                    f1:94:c2:e8:75:c6:47:cc:bd:e3:e2:13:29:42:cc:
                    28:d2:69:d0:43:66:de:80:11:51:af:50:fd:53:a3:
                    7b:b3:9b:6b:bc:c0:89:b1:8e:0e:11:d5:1f:50:f5:
                    92:bb:c0:dd:ea:ac:c7:7d:ca:1e:4b:11:5a:c5:4c:
                    29:52:d5:47:52:86:88:88:05:64:1d:2e:53:de:17:
                    e4:63:cb:d4:92:37:3d:2d:0d:96:83:93:3c:8e:12:
                    88:29:3f:58:99:49:b6:93:14:99:a4:d9:0a:b2:cc:
                    58:3f:8f:9c:be:aa:88:a9:b5:27:44:65:33:57:f2:
                    ba:50:46:a7:86:36:96:91:6f:ee:a4:3c:1d:3f:74:
                    d0:8d:1e:a8:3b:80:00:fa:a5:6b:d1:ac:97:8f:f8:
                    b5:a2:b0:44:ac:37:71:9e:1c:17:c4:b5:08:f1:82:
                    bc:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:3B:0D:32:F3:84:9E:91:55:F1:83:D0:06:DA:44:47:D3:58:00:B0
            X509v3 Authority Key Identifier:
                keyid:6F:77:C1:9F:11:D3:2A:AA:A4:2E:26:91:6F:74:82:EF:B8:F9:7A:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b3fBnxHTKqqkLiaRb3SC77j5ehw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:85:90:22:e0:9a:22:24:2e:f5:7b:a7:7d:d8:45:82:19:82:
         81:eb:00:a0:7f:3d:92:a5:92:04:25:f0:fb:dc:b7:42:2d:9a:
         a9:bc:ca:d4:b8:fc:3c:85:04:3a:de:29:db:d9:d7:17:4d:ff:
         fa:d2:53:77:4c:99:4d:45:b3:3e:f7:5c:21:ac:8f:90:8b:23:
         a3:cd:1b:17:6f:b0:2a:cc:d8:ad:2e:8b:83:ba:a0:c1:86:71:
         19:6d:c1:7d:a3:1e:2b:2d:dd:a3:d5:92:fa:46:0f:70:6e:87:
         93:e0:f8:9a:56:1b:8d:b2:a0:f9:a8:66:19:e6:49:a7:54:43:
         47:54:19:c5:2a:ea:2f:1c:b5:e0:8d:40:57:4d:a8:a4:ef:5d:
         6e:ed:90:e1:b6:d9:0f:7a:60:0a:72:2a:6d:50:5c:86:50:69:
         54:20:91:37:39:2a:2b:31:5e:e2:ca:ca:24:07:82:d7:60:1a:
         03:47:07:4e:ea:8c:48:83:05:58:17:f7:4e:3e:22:82:7c:ab:
         97:f3:e2:d7:ff:b6:58:b4:9c:86:23:44:60:d0:4f:8a:f8:77:
         14:83:da:f1:4b:08:ba:96:0e:2e:1f:72:16:17:27:af:da:d8:
         b4:13:f9:c4:94:78:a2:77:47:7e:40:a1:3f:e5:07:f0:bc:7d:
         30:2a:14:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:04:31 2025 by rpki-client