Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A15E/7AE1328038A111ED86A56A0BC4F9AE02/9mluXbsSLaCFN-pSMG7vDK6Tb5M.mft
File:                     9mluXbsSLaCFN-pSMG7vDK6Tb5M.mft (raw, json)
Hash identifier:          Nq7V11fiYs3DbTRfuL1X0cpobpECl9A9ceMlertOuWU=
Subject key identifier:   B2:B9:5D:08:EC:56:41:CA:29:A3:00:B5:C8:75:4A:34:D3:3C:18:CB
Authority key identifier: F6:69:6E:5D:BB:12:2D:A0:85:37:EA:52:30:6E:EF:0C:AE:93:6F:93
Certificate issuer:       /CN=A915A15E/serialNumber=F6696E5DBB122DA08537EA52306EEF0CAE936F93
Certificate serial:       0252
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mluXbsSLaCFN-pSMG7vDK6Tb5M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A15E/7AE1328038A111ED86A56A0BC4F9AE02/9mluXbsSLaCFN-pSMG7vDK6Tb5M.mft
Manifest number:          0250
Signing time:             Sun 19 Oct 2025 03:58:57 +0000
Manifest this update:     Sun 19 Oct 2025 03:58:56 +0000
Manifest next update:     Sun 26 Oct 2025 03:58:56 +0000
Files and hashes:         1: 9mluXbsSLaCFN-pSMG7vDK6Tb5M.crl (hash: nsVtDGpeM3FBHpNowv+shy5wmok14VihA8rzJr18oy4=)
                          2: EA813D021FFC11F0A17B9441C4F9AE02.roa (hash: yKsH6HpvVtjhTQFrfTZTpYvl4BY01lpay1ETEnbArEo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A15E/7AE1328038A111ED86A56A0BC4F9AE02/9mluXbsSLaCFN-pSMG7vDK6Tb5M.crl
                          rsync://rpki.apnic.net/member_repository/A915A15E/7AE1328038A111ED86A56A0BC4F9AE02/9mluXbsSLaCFN-pSMG7vDK6Tb5M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mluXbsSLaCFN-pSMG7vDK6Tb5M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 03:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 594 (0x252)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A15E, serialNumber=F6696E5DBB122DA08537EA52306EEF0CAE936F93
        Validity
            Not Before: Oct 19 03:58:56 2025 GMT
            Not After : Oct 26 03:58:56 2025 GMT
        Subject: CN=68f46201-64c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ae:89:9f:c0:ea:8c:28:29:4f:8a:eb:0e:88:
                    58:87:69:1f:84:97:64:2f:23:22:fd:b6:34:c9:d6:
                    4f:e3:81:59:81:ec:0c:bf:4e:21:c9:97:5c:95:56:
                    56:b9:f4:e5:06:93:34:4f:77:c6:92:9c:bd:c9:61:
                    24:fa:02:ee:e0:76:7d:b9:8d:d1:e2:83:06:dc:4e:
                    ee:e9:4d:da:6e:4c:64:43:dc:c7:fc:2d:f9:44:1c:
                    38:91:c2:be:b6:ba:82:e7:25:83:6e:6a:20:89:54:
                    68:03:3a:26:f3:e6:eb:3c:74:1b:8c:96:21:d6:88:
                    3c:69:c7:a1:22:c4:a2:81:56:9e:d5:4b:58:e1:5f:
                    b0:58:1d:7a:6d:d4:d5:00:d7:5a:b2:0d:6f:1d:f3:
                    86:f3:8b:1d:27:a1:f5:c8:f9:eb:fb:40:e6:54:b1:
                    b4:3c:00:b5:0b:78:55:21:2a:5c:f0:7a:7d:ab:6a:
                    87:40:e4:b8:ec:50:3b:65:0e:95:09:62:85:fa:b9:
                    26:18:1b:b7:8d:43:54:67:08:da:eb:2a:5c:ed:96:
                    ef:9d:c6:06:87:cc:4b:6e:0d:aa:7a:c1:9b:64:9c:
                    ce:dd:d1:d3:e5:38:5e:86:08:9f:37:9e:ef:ef:b1:
                    56:a6:69:e9:df:cb:bb:fd:ad:a2:42:3c:e5:45:20:
                    4b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:B9:5D:08:EC:56:41:CA:29:A3:00:B5:C8:75:4A:34:D3:3C:18:CB
            X509v3 Authority Key Identifier:
                keyid:F6:69:6E:5D:BB:12:2D:A0:85:37:EA:52:30:6E:EF:0C:AE:93:6F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A15E/7AE1328038A111ED86A56A0BC4F9AE02/9mluXbsSLaCFN-pSMG7vDK6Tb5M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mluXbsSLaCFN-pSMG7vDK6Tb5M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A15E/7AE1328038A111ED86A56A0BC4F9AE02/9mluXbsSLaCFN-pSMG7vDK6Tb5M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:a4:ff:ee:2d:34:13:e0:ce:ff:ad:49:8c:05:e7:23:ec:90:
         23:91:05:ab:ab:93:32:b8:e4:be:b6:56:18:0e:0c:99:af:d9:
         26:b5:f4:68:bd:ef:e5:63:3f:d4:69:5c:a2:9e:4d:2e:aa:d3:
         ea:cd:f2:83:da:90:c8:cc:7f:fd:62:da:1e:17:84:e7:6e:22:
         e3:f7:b0:4d:a2:03:8a:71:38:45:19:62:86:c3:42:ad:78:05:
         85:fe:a2:4d:c0:03:60:28:ae:3c:f2:b7:cb:10:87:5e:5a:52:
         d3:69:16:b3:bc:bc:c3:b1:e8:95:da:94:29:76:7b:b4:43:00:
         fa:f6:61:77:d6:55:27:58:60:b8:7d:3e:13:b1:db:5e:15:69:
         a5:9b:e0:4d:99:41:1f:49:9c:df:82:07:fd:34:2e:22:fd:79:
         65:c6:b0:b5:da:68:67:af:e8:00:c8:95:e0:30:a8:ac:40:40:
         15:3f:fd:fa:62:15:2f:12:eb:1a:22:9f:84:0b:12:dd:a9:86:
         ec:da:2c:81:60:52:b3:29:ba:c5:2b:06:0e:04:51:e0:e8:fb:
         76:a0:7c:ce:78:4e:20:c9:4b:97:e7:f6:3f:0c:27:c0:4b:65:
         09:16:70:6e:64:a3:91:11:70:c4:93:77:13:c9:5e:a9:00:f6:
         78:20:3f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:44:47 2025 by rpki-client