Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/u51dUPdVgZcvw68cbOavz1fPuT8.mft
File:                     u51dUPdVgZcvw68cbOavz1fPuT8.mft (raw, json)
Hash identifier:          BDMSY35KAultzbJJqYY2OtxWyQ9tGORFcJP4nWi2fxE=
Subject key identifier:   12:B8:62:2E:FF:2A:5D:04:F0:58:B2:55:B7:39:CB:30:E8:1F:D9:6A
Authority key identifier: BB:9D:5D:50:F7:55:81:97:2F:C3:AF:1C:6C:E6:AF:CF:57:CF:B9:3F
Certificate issuer:       /CN=A913DD6A/serialNumber=BB9D5D50F75581972FC3AF1C6CE6AFCF57CFB93F
Certificate serial:       0828
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u51dUPdVgZcvw68cbOavz1fPuT8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/u51dUPdVgZcvw68cbOavz1fPuT8.mft
Manifest number:          0811
Signing time:             Sat 18 Oct 2025 22:17:30 +0000
Manifest this update:     Sat 18 Oct 2025 22:17:30 +0000
Manifest next update:     Sat 25 Oct 2025 22:17:30 +0000
Files and hashes:         1: u51dUPdVgZcvw68cbOavz1fPuT8.crl (hash: XtAX0gLltvVBzTqhd8qrNiEJIM4jikP8WnbO8PTdRYc=)
                          2: 862720F4031611EB9086351AC4F9AE02.roa (hash: DyEl2YZoDemWKVRwtuDEk5jnI5cd5vACB1EojyL/sHQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/u51dUPdVgZcvw68cbOavz1fPuT8.crl
                          rsync://rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/u51dUPdVgZcvw68cbOavz1fPuT8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u51dUPdVgZcvw68cbOavz1fPuT8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 22:17:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2088 (0x828)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913DD6A, serialNumber=BB9D5D50F75581972FC3AF1C6CE6AFCF57CFB93F
        Validity
            Not Before: Oct 18 22:17:30 2025 GMT
            Not After : Oct 25 22:17:30 2025 GMT
        Subject: CN=68f411fa-6801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e8:b9:37:1a:a2:9b:50:1d:f4:16:65:54:d2:
                    d3:fe:ca:6f:0f:99:fb:89:13:80:57:f2:96:5a:15:
                    04:0d:2c:9c:e3:45:5b:36:d6:40:f1:f2:8e:a3:f4:
                    cc:ca:3d:f1:7c:c4:96:bb:8e:74:c2:be:34:dd:5d:
                    58:cc:06:c5:23:07:7d:2f:e2:00:ee:8a:77:9c:88:
                    49:29:28:63:78:77:7c:14:4e:db:f3:c1:f7:0f:09:
                    a1:72:31:b5:39:1e:40:ca:fd:e0:dd:6b:a3:ec:81:
                    aa:b9:42:fc:bf:fe:a2:3a:a0:13:ed:45:66:b6:c1:
                    66:3f:fb:18:b6:cc:b8:28:ab:be:ef:9c:6e:e0:9b:
                    12:3f:b6:d0:e6:29:19:26:35:96:a4:49:d0:da:c9:
                    e7:15:09:c8:52:08:10:50:a1:37:62:b9:75:5b:03:
                    2a:ea:b7:f9:12:8c:0a:a9:d7:95:1c:22:8d:69:ba:
                    f5:87:53:af:4f:06:c6:c7:60:a2:90:e3:11:d9:5a:
                    d9:1b:26:f7:48:26:8f:7e:16:98:ea:d3:d2:1f:b3:
                    3b:63:be:f0:2b:4b:d9:90:12:fa:2f:c6:22:62:51:
                    33:7e:15:77:b1:d2:69:2c:13:16:55:43:63:3f:e9:
                    2d:34:45:aa:4d:11:9a:0b:54:7e:3b:ec:3b:c9:e2:
                    ae:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:B8:62:2E:FF:2A:5D:04:F0:58:B2:55:B7:39:CB:30:E8:1F:D9:6A
            X509v3 Authority Key Identifier:
                keyid:BB:9D:5D:50:F7:55:81:97:2F:C3:AF:1C:6C:E6:AF:CF:57:CF:B9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/u51dUPdVgZcvw68cbOavz1fPuT8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u51dUPdVgZcvw68cbOavz1fPuT8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/u51dUPdVgZcvw68cbOavz1fPuT8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:da:f1:a4:b3:de:78:9f:0a:3c:2b:d8:f3:74:98:17:04:6d:
         7f:e2:6a:c5:aa:19:ec:7b:45:50:b0:53:53:66:0d:7d:4b:bc:
         aa:37:0f:a1:ef:4d:37:83:6d:7e:79:bb:94:44:2d:2f:5b:49:
         af:ad:06:ff:83:70:e1:25:3b:6c:dd:12:da:fe:89:a6:92:f7:
         73:67:93:8f:73:80:3f:d5:ec:50:49:6b:a1:fa:bc:4a:4a:e4:
         81:43:01:d4:ae:a4:e4:ad:c3:5d:41:94:36:d8:6a:a2:b4:2d:
         8f:a7:af:54:6a:0f:76:29:fe:5e:28:c1:22:90:63:97:b0:3a:
         56:21:e2:e7:c2:64:ec:bf:7c:0e:c0:07:c4:09:75:07:2f:b3:
         a1:c3:42:5f:1e:e9:7e:2e:ec:7d:eb:5f:75:7d:6e:73:7e:28:
         b4:c3:c3:c7:22:80:98:64:fa:08:15:91:b1:3a:d8:68:e7:b3:
         22:bd:34:25:11:f2:db:7f:77:e0:a5:c5:5c:8b:ea:2c:75:51:
         e2:2e:61:9c:de:33:66:92:3c:bf:21:e8:9b:42:26:f8:bd:0f:
         f0:ef:79:b5:eb:5a:0d:12:91:78:bb:5f:54:c8:19:63:3e:88:
         89:84:f6:fa:ef:68:48:3b:31:42:bc:dd:aa:ff:cd:61:b0:b1:
         88:47:62:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:08:17 2025 by rpki-client