Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A330/AAE49A38060F11F0A9705281C4F9AE02/-_gSoLmqiu1iGHbIkgH_8QQytpc.mft
File:                     -_gSoLmqiu1iGHbIkgH_8QQytpc.mft (raw, json)
Hash identifier:          81b1H3Jrt8xETcAEtg5rb/vE71nvVP2BIvLchzhWOHY=
Subject key identifier:   76:48:43:EF:BF:EE:FC:AE:46:DE:3C:BC:10:64:07:73:F8:66:DC:8E
Authority key identifier: FB:F8:12:A0:B9:AA:8A:ED:62:18:76:C8:92:01:FF:F1:04:32:B6:97
Certificate issuer:       /CN=A915A330/serialNumber=FBF812A0B9AA8AED621876C89201FFF10432B697
Certificate serial:       6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-_gSoLmqiu1iGHbIkgH_8QQytpc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A330/AAE49A38060F11F0A9705281C4F9AE02/-_gSoLmqiu1iGHbIkgH_8QQytpc.mft
Manifest number:          6D
Signing time:             Sun 19 Oct 2025 10:16:58 +0000
Manifest this update:     Sun 19 Oct 2025 10:16:58 +0000
Manifest next update:     Sun 26 Oct 2025 10:16:58 +0000
Files and hashes:         1: -_gSoLmqiu1iGHbIkgH_8QQytpc.crl (hash: FF05LVr2FaOall8dEcSjyZiAb7Rcw+EnkFyJiA0xzEI=)
                          2: 5F2F693A061211F0BA5A2029C4F9AE02.roa (hash: ti/+dlDrn7n64hxfzOvr4hnKhT6sYm889q99u/P1yZw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A330/AAE49A38060F11F0A9705281C4F9AE02/-_gSoLmqiu1iGHbIkgH_8QQytpc.crl
                          rsync://rpki.apnic.net/member_repository/A915A330/AAE49A38060F11F0A9705281C4F9AE02/-_gSoLmqiu1iGHbIkgH_8QQytpc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-_gSoLmqiu1iGHbIkgH_8QQytpc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 10:16:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110 (0x6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A330, serialNumber=FBF812A0B9AA8AED621876C89201FFF10432B697
        Validity
            Not Before: Oct 19 10:16:58 2025 GMT
            Not After : Oct 26 10:16:58 2025 GMT
        Subject: CN=68f4ba9a-db2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:76:1b:25:ed:3b:5f:18:2b:18:4a:0e:21:08:
                    b7:bb:e7:68:b2:e0:68:85:a6:6e:87:a3:56:96:e3:
                    49:9d:a5:af:dd:fd:59:17:5d:c8:28:ea:6b:a3:47:
                    22:be:e7:38:4d:e4:a6:90:ce:17:39:b9:0b:8d:c9:
                    42:a8:ce:2b:5f:11:0b:88:2d:4b:d1:f3:76:46:df:
                    2f:cd:c1:9e:4d:c7:1d:e9:16:04:9f:f5:2a:b4:1e:
                    dd:63:4e:4b:8a:6f:69:b8:0e:90:66:31:ec:4a:5a:
                    f5:e6:ea:20:67:41:4a:5b:c8:e9:a2:5f:37:c5:96:
                    60:9d:d1:ff:fb:a9:94:6c:39:47:5f:80:d5:a9:a1:
                    7f:bc:6b:b8:c1:82:2d:e1:6e:d8:76:f8:d7:66:9b:
                    f7:2e:65:06:6b:c5:66:e6:2e:a9:c9:bf:53:6d:01:
                    87:56:f5:d8:fd:1d:59:c0:15:84:df:fc:1c:29:9b:
                    07:4d:f8:25:32:c7:e4:43:34:1a:f0:64:5e:5b:68:
                    c3:6d:c3:9a:8d:a9:ae:ee:a6:4d:cf:fa:f6:45:1b:
                    f1:cc:9a:83:a0:10:eb:96:1b:ee:f7:44:58:7a:5f:
                    c5:ad:5e:64:a5:66:1e:c6:78:05:d8:f3:60:22:18:
                    27:ba:8d:15:30:27:34:cc:39:61:7d:fa:59:04:35:
                    d6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:48:43:EF:BF:EE:FC:AE:46:DE:3C:BC:10:64:07:73:F8:66:DC:8E
            X509v3 Authority Key Identifier:
                keyid:FB:F8:12:A0:B9:AA:8A:ED:62:18:76:C8:92:01:FF:F1:04:32:B6:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A330/AAE49A38060F11F0A9705281C4F9AE02/-_gSoLmqiu1iGHbIkgH_8QQytpc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-_gSoLmqiu1iGHbIkgH_8QQytpc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A330/AAE49A38060F11F0A9705281C4F9AE02/-_gSoLmqiu1iGHbIkgH_8QQytpc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:5c:dc:58:34:27:aa:af:ca:14:f8:61:bd:83:bd:31:d5:5d:
         a7:db:6a:81:b8:00:97:eb:25:1f:74:28:d5:ce:47:26:e7:00:
         d2:2a:fb:3c:f0:61:1b:3b:17:4a:0f:ba:f6:e9:54:ea:aa:29:
         6f:10:81:3e:64:a1:a8:45:70:f2:fb:5b:25:94:e5:47:51:dd:
         58:c7:23:98:01:6c:04:7e:73:a8:52:7a:e6:ef:13:fc:f4:f4:
         42:8d:98:44:bc:1c:dc:b6:79:6a:63:a0:c7:6a:92:87:11:44:
         61:6d:14:b8:ee:e9:95:73:ff:e6:e6:28:2d:14:ab:79:98:88:
         23:d5:b5:10:b9:31:f9:0a:d9:43:62:34:b9:7c:42:62:3b:99:
         65:a4:86:f2:db:a0:66:96:e8:9b:7d:e1:39:4e:be:75:49:bc:
         30:8d:0d:85:36:e7:0b:d8:54:9e:4d:46:2b:44:e6:b0:cd:03:
         04:bd:9c:1e:af:27:fb:11:27:fb:ce:e7:a9:40:78:b2:16:59:
         62:36:a9:31:06:cb:69:d5:01:a1:1c:0f:cf:e6:41:5b:b0:a1:
         27:a7:e0:b0:3c:1b:42:bb:e0:d2:5c:b9:af:18:09:5e:8f:e0:
         61:7c:51:2e:fe:e1:3c:e8:bf:c4:aa:15:17:f2:0d:4c:62:6f:
         12:46:14:2f
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBbjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
QTMzMDExMC8GA1UEBRMoRkJGODEyQTBCOUFBOEFFRDYyMTg3NkM4OTIwMUZGRjEw
NDMyQjY5NzAeFw0yNTEwMTkxMDE2NThaFw0yNTEwMjYxMDE2NThaMBgxFjAUBgNV
BAMTDTY4ZjRiYTlhLWRiMmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC3dhsl7TtfGCsYSg4hCLe752iy4GiFpm6Ho1aW40mdpa/d/VkXXcgo6mujRyK+
5zhN5KaQzhc5uQuNyUKozitfEQuILUvR83ZG3y/NwZ5Nxx3pFgSf9Sq0Ht1jTkuK
b2m4DpBmMexKWvXm6iBnQUpbyOmiXzfFlmCd0f/7qZRsOUdfgNWpoX+8a7jBgi3h
bth2+Ndmm/cuZQZrxWbmLqnJv1NtAYdW9dj9HVnAFYTf/BwpmwdN+CUyx+RDNBrw
ZF5baMNtw5qNqa7upk3P+vZFG/HMmoOgEOuWG+73RFh6X8WtXmSlZh7GeAXY82Ai
GCe6jRUwJzTMOWF9+lkENdbvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdkhD77/u
/K5G3jy8EGQHc/hm3I4wHwYDVR0jBBgwFoAU+/gSoLmqiu1iGHbIkgH/8QQytpcw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVBMzMwL0FBRTQ5QTM4MDYw
RjExRjBBOTcwNTI4MUM0RjlBRTAyLy1fZ1NvTG1xaXUxaUdIYklrZ0hfOFFReXRw
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvLV9nU29MbXFpdTFpR0hiSWtnSF84UVF5dHBjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVB
MzMwL0FBRTQ5QTM4MDYwRjExRjBBOTcwNTI4MUM0RjlBRTAyLy1fZ1NvTG1xaXUx
aUdIYklrZ0hfOFFReXRwYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAHBc3Fg0J6qvyhT4Yb2DvTHVXafbaoG4AJfrJR90KNXORybnANIq+zzw
YRs7F0oPuvbpVOqqKW8QgT5koahFcPL7WyWU5UdR3VjHI5gBbAR+c6hSeubvE/z0
9EKNmES8HNy2eWpjoMdqkocRRGFtFLju6ZVz/+bmKC0Uq3mYiCPVtRC5MfkK2UNi
NLl8QmI7mWWkhvLboGaW6Jt94TlOvnVJvDCNDYU25wvYVJ5NRitE5rDNAwS9nB6v
J/sRJ/vO56lAeLIWWWI2qTEGy2nVAaEcD8/mQVuwoSen4LA8G0K74NJcua8YCV6P
4GF8US7+4Tzov8SqFRfyDUxibxJGFC8=
-----END CERTIFICATE-----
Generated at Mon Oct 20 11:28:52 2025 by rpki-client