Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/-tTGddk4luj3XW0tmNf6X-FIRLs.mft
File:                     -tTGddk4luj3XW0tmNf6X-FIRLs.mft (raw, json)
Hash identifier:          RJfa36L2D0tkOrmYmfw5wrEKCNeUpOnlFpVIyfPi/8A=
Subject key identifier:   65:C6:AA:49:2B:13:C7:B7:C1:EE:AC:7D:0B:B4:BB:EB:C0:5E:D3:9B
Authority key identifier: FA:D4:C6:75:D9:38:96:E8:F7:5D:6D:2D:98:D7:FA:5F:E1:48:44:BB
Certificate issuer:       /CN=A914882C/serialNumber=FAD4C675D93896E8F75D6D2D98D7FA5FE14844BB
Certificate serial:       0B98
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tTGddk4luj3XW0tmNf6X-FIRLs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/-tTGddk4luj3XW0tmNf6X-FIRLs.mft
Manifest number:          0B8F
Signing time:             Sat 18 Oct 2025 19:52:28 +0000
Manifest this update:     Sat 18 Oct 2025 19:52:27 +0000
Manifest next update:     Sat 25 Oct 2025 19:52:27 +0000
Files and hashes:         1: -tTGddk4luj3XW0tmNf6X-FIRLs.crl (hash: 3JD0BrxdCxilhuiuMg60Z7M+k59SMivXozbn0UBWJcI=)
                          2: 9AEB003836DD11EABDA48574C4F9AE02.roa (hash: 6AStLiXGFTbizy72srYzdt3NNVrbT13s0hjr9rc8KH4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/-tTGddk4luj3XW0tmNf6X-FIRLs.crl
                          rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/-tTGddk4luj3XW0tmNf6X-FIRLs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tTGddk4luj3XW0tmNf6X-FIRLs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 19:52:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2968 (0xb98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914882C, serialNumber=FAD4C675D93896E8F75D6D2D98D7FA5FE14844BB
        Validity
            Not Before: Oct 18 19:52:27 2025 GMT
            Not After : Oct 25 19:52:27 2025 GMT
        Subject: CN=68f3effc-06d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6d:82:f8:b4:bb:26:e3:73:c7:14:ed:06:1a:
                    09:2b:80:1b:9e:a7:38:b6:f6:1e:75:0d:bd:cb:c2:
                    1c:ac:39:20:01:3f:31:cf:0f:6d:e1:43:fc:4e:88:
                    f5:b9:86:d7:e1:5f:2f:12:42:e1:8c:49:0a:6b:7a:
                    56:78:4b:0e:5c:63:6b:85:d8:9a:aa:08:6a:f1:af:
                    c4:c9:61:d7:24:37:89:cc:d3:7e:48:34:a4:cc:4b:
                    25:91:06:f1:0e:d1:02:a5:ef:5f:9b:80:14:c7:db:
                    de:24:dc:f2:b2:9f:03:3a:28:4e:1c:42:50:97:12:
                    61:df:1d:d3:05:21:fd:f4:11:1d:5a:5a:9d:9a:80:
                    8a:81:6f:29:21:26:e0:24:e2:87:8e:23:98:0a:e5:
                    7e:4e:cd:9f:dc:37:1d:13:4e:72:b6:9e:d3:f3:36:
                    d0:b1:c5:ed:54:4b:ef:e8:1e:e7:2d:dd:ae:9a:0f:
                    6c:a7:d7:0f:0a:4e:27:5d:80:e7:e5:8c:d5:bd:49:
                    d4:e4:a5:e9:d4:19:cf:f9:5f:c3:c4:a1:41:d3:6b:
                    6b:06:7f:a0:cb:26:1c:f1:82:d5:c7:af:eb:e8:7f:
                    d5:32:53:06:2c:e4:f7:5f:62:96:7d:81:b0:75:45:
                    d1:93:ec:68:49:5a:0e:1d:7c:c2:88:ac:24:03:74:
                    43:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:C6:AA:49:2B:13:C7:B7:C1:EE:AC:7D:0B:B4:BB:EB:C0:5E:D3:9B
            X509v3 Authority Key Identifier:
                keyid:FA:D4:C6:75:D9:38:96:E8:F7:5D:6D:2D:98:D7:FA:5F:E1:48:44:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/-tTGddk4luj3XW0tmNf6X-FIRLs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tTGddk4luj3XW0tmNf6X-FIRLs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/-tTGddk4luj3XW0tmNf6X-FIRLs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:8b:4d:b1:2b:1b:0d:99:6a:9c:68:89:a1:b4:b9:d6:4e:19:
         eb:17:d4:76:0f:68:7e:01:33:f8:e7:b9:9b:fa:28:38:7f:65:
         ee:e7:0f:a1:a3:df:37:a6:80:ac:eb:c7:72:f5:7e:7c:c5:fb:
         40:2d:eb:d4:18:c3:4a:28:fb:39:2d:7e:2e:83:fb:d4:f9:63:
         77:30:f3:da:28:ab:91:bb:07:36:30:85:1d:bb:51:a3:86:be:
         9b:cf:15:c0:de:3d:e3:cc:fe:d1:22:f3:04:ef:5c:48:5a:32:
         7b:43:a5:34:1e:45:96:cf:ba:2d:51:6b:58:d1:76:f1:ef:53:
         c9:c9:85:d9:55:fd:fc:dc:02:f2:0e:d8:ba:b8:d0:19:e5:8a:
         12:dd:82:ce:06:5d:57:17:9e:26:3a:74:df:38:58:57:5b:87:
         ec:31:4e:a8:db:30:50:c7:31:06:23:86:7a:9c:da:9f:2b:ff:
         48:bf:c6:da:7c:6c:59:da:2c:71:b1:90:5d:c8:3a:dd:37:39:
         85:ec:32:de:a2:13:60:3d:ff:ce:a1:7f:3f:f5:73:1c:97:b0:
         cd:a5:53:93:ac:3d:82:cc:5a:e6:ea:e4:ba:2e:71:fa:41:91:
         1f:ff:6d:7b:85:6b:95:05:b4:dd:88:9d:a7:b6:e6:ca:68:40:
         7d:fe:93:27
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC5gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDg4MkMxMTAvBgNVBAUTKEZBRDRDNjc1RDkzODk2RThGNzVENkQyRDk4RDdGQTVG
RTE0ODQ0QkIwHhcNMjUxMDE4MTk1MjI3WhcNMjUxMDI1MTk1MjI3WjAYMRYwFAYD
VQQDEw02OGYzZWZmYy0wNmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvm2C+LS7JuNzxxTtBhoJK4Abnqc4tvYedQ29y8IcrDkgAT8xzw9t4UP8Toj1
uYbX4V8vEkLhjEkKa3pWeEsOXGNrhdiaqghq8a/EyWHXJDeJzNN+SDSkzEslkQbx
DtECpe9fm4AUx9veJNzysp8DOihOHEJQlxJh3x3TBSH99BEdWlqdmoCKgW8pISbg
JOKHjiOYCuV+Ts2f3DcdE05ytp7T8zbQscXtVEvv6B7nLd2umg9sp9cPCk4nXYDn
5YzVvUnU5KXp1BnP+V/DxKFB02trBn+gyyYc8YLVx6/r6H/VMlMGLOT3X2KWfYGw
dUXRk+xoSVoOHXzCiKwkA3RDcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGXGqkkr
E8e3we6sfQu0u+vAXtObMB8GA1UdIwQYMBaAFPrUxnXZOJbo911tLZjX+l/hSES7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODgyQy9DNjVEMDVDODM2
REMxMUVBODYxOThDNzNDNEY5QUUwMi8tdFRHZGRrNGx1ajNYVzB0bU5mNlgtRklS
THMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy10VEdkZGs0bHVqM1hXMHRtTmY2WC1GSVJMcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
ODgyQy9DNjVEMDVDODM2REMxMUVBODYxOThDNzNDNEY5QUUwMi8tdFRHZGRrNGx1
ajNYVzB0bU5mNlgtRklSTHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA2i02xKxsNmWqcaImhtLnWThnrF9R2D2h+ATP457mb+ig4f2Xu5w+h
o983poCs68dy9X58xftALevUGMNKKPs5LX4ug/vU+WN3MPPaKKuRuwc2MIUdu1Gj
hr6bzxXA3j3jzP7RIvME71xIWjJ7Q6U0HkWWz7otUWtY0Xbx71PJyYXZVf383ALy
Dti6uNAZ5YoS3YLOBl1XF54mOnTfOFhXW4fsMU6o2zBQxzEGI4Z6nNqfK/9Iv8ba
fGxZ2ixxsZBdyDrdNzmF7DLeohNgPf/OoX8/9XMcl7DNpVOTrD2CzFrm6uS6LnH6
QZEf/217hWuVBbTdiJ2ntubKaEB9/pMn
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:11:47 2025 by rpki-client