Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915216F/11B2C80AA39E11EE9DC71C60C4F9AE02/bUGUPlFfU_mSYZyH8COTgRJT3mc.mft
File:                     bUGUPlFfU_mSYZyH8COTgRJT3mc.mft (raw, json)
Hash identifier:          yDRRpISIFtreLpMDTacftidfWNIaBlQtpFvcvMRprLQ=
Subject key identifier:   CE:6F:E6:15:F3:6D:22:AC:B2:CC:75:4B:2A:40:40:FB:D8:5E:83:D6
Authority key identifier: 6D:41:94:3E:51:5F:53:F9:92:61:9C:87:F0:23:93:81:12:53:DE:67
Certificate issuer:       /CN=A915216F/serialNumber=6D41943E515F53F992619C87F02393811253DE67
Certificate serial:       015F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bUGUPlFfU_mSYZyH8COTgRJT3mc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915216F/11B2C80AA39E11EE9DC71C60C4F9AE02/bUGUPlFfU_mSYZyH8COTgRJT3mc.mft
Manifest number:          015A
Signing time:             Sun 19 Oct 2025 06:52:39 +0000
Manifest this update:     Sun 19 Oct 2025 06:52:39 +0000
Manifest next update:     Sun 26 Oct 2025 06:52:39 +0000
Files and hashes:         1: bUGUPlFfU_mSYZyH8COTgRJT3mc.crl (hash: +F18LCUuFESJCRHhBCtgBGS7TSRIn6JcoIElUup7ZrU=)
                          2: 038457CEA3A011EEBE44947FC4F9AE02.roa (hash: PgCUtYUopFfJUcc6oCyLffXra/44Q+4sS+exi8w3QBc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915216F/11B2C80AA39E11EE9DC71C60C4F9AE02/bUGUPlFfU_mSYZyH8COTgRJT3mc.crl
                          rsync://rpki.apnic.net/member_repository/A915216F/11B2C80AA39E11EE9DC71C60C4F9AE02/bUGUPlFfU_mSYZyH8COTgRJT3mc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bUGUPlFfU_mSYZyH8COTgRJT3mc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 06:52:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 351 (0x15f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915216F, serialNumber=6D41943E515F53F992619C87F02393811253DE67
        Validity
            Not Before: Oct 19 06:52:39 2025 GMT
            Not After : Oct 26 06:52:39 2025 GMT
        Subject: CN=68f48ab7-c550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bb:76:d4:3d:3e:6a:f2:45:d7:84:1d:b8:af:
                    f0:d2:b8:40:ee:20:b8:af:d7:e0:16:3d:ed:b7:04:
                    47:35:9b:fc:3d:23:d6:33:61:3b:b5:2c:13:71:e8:
                    25:02:d1:06:fe:6b:f3:f1:90:35:59:47:f0:e8:03:
                    70:39:94:a7:ad:bc:49:cb:a0:bd:3e:06:24:70:2b:
                    72:82:dc:33:68:d0:7d:49:39:80:11:b3:1b:24:a5:
                    70:c1:0c:eb:4b:74:43:49:d3:79:00:53:df:a6:c6:
                    8e:14:15:b2:b3:2f:4f:9d:10:63:e7:e3:82:1e:75:
                    be:81:13:83:23:5d:15:ba:16:ff:13:50:c8:81:8d:
                    36:15:b6:a6:a5:2c:f9:a3:5e:49:eb:64:54:42:cd:
                    48:76:2f:32:c8:2a:6f:ef:3e:c3:b1:1c:a7:45:b8:
                    55:76:0a:56:4d:85:34:0c:c0:1a:c3:b0:04:7d:42:
                    f8:20:8c:b7:0d:89:fd:a7:be:a9:ba:a0:3b:2c:61:
                    62:8b:29:6e:d4:5a:a1:d8:43:02:9a:a2:de:66:53:
                    b3:08:b7:a7:65:f4:fe:8b:e4:63:02:86:7c:ea:cc:
                    21:fa:71:d8:f3:4e:7e:79:85:90:2b:dd:da:e6:1a:
                    b0:e5:87:89:6f:ad:25:fa:a7:9d:8b:fe:e7:a4:ec:
                    aa:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:6F:E6:15:F3:6D:22:AC:B2:CC:75:4B:2A:40:40:FB:D8:5E:83:D6
            X509v3 Authority Key Identifier:
                keyid:6D:41:94:3E:51:5F:53:F9:92:61:9C:87:F0:23:93:81:12:53:DE:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915216F/11B2C80AA39E11EE9DC71C60C4F9AE02/bUGUPlFfU_mSYZyH8COTgRJT3mc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bUGUPlFfU_mSYZyH8COTgRJT3mc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915216F/11B2C80AA39E11EE9DC71C60C4F9AE02/bUGUPlFfU_mSYZyH8COTgRJT3mc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:6f:4b:b8:a2:51:3d:7f:c9:d4:1d:3b:38:29:67:e1:94:59:
         de:94:60:08:6d:1e:77:65:25:b4:30:18:b9:4f:5d:18:93:ed:
         ad:75:44:9c:d7:17:88:4d:51:0f:47:80:8a:0a:9b:da:0e:85:
         09:cc:b8:68:9c:0d:1f:10:b3:bb:0b:92:ec:fc:3a:44:a3:b2:
         da:1a:04:52:37:0c:a4:bb:9d:15:db:b3:46:54:30:15:fa:66:
         70:8e:6e:84:f6:06:f6:fa:de:6e:87:66:a4:2a:7c:12:99:2f:
         15:da:99:16:4c:fd:71:3d:11:e6:63:2a:68:cd:ee:59:8d:74:
         46:4f:2b:03:9f:b8:3e:2a:36:29:33:e2:f8:cf:62:a8:51:37:
         69:23:cd:ed:75:e9:44:d4:30:b5:b7:4f:7a:59:1e:e8:5f:52:
         a0:08:6c:dd:9c:43:09:ac:59:25:a5:c1:28:63:e7:2e:29:c6:
         56:f6:67:8d:37:b7:63:2b:ac:87:16:5f:d7:5a:b6:46:59:6a:
         a1:39:16:dd:44:19:22:aa:2b:cd:28:6f:89:a0:e2:ef:ba:b8:
         58:87:f6:07:32:37:9c:9a:21:9a:7c:87:97:83:a8:b9:2b:0e:
         fa:01:1b:30:f9:cf:4c:60:94:a2:2f:0e:7a:97:70:d0:44:81:
         58:40:83:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:58:53 2025 by rpki-client