Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A797/766AC9B26E9211F0BBEB7C3AC4F9AE02/mTsBukE-5Ujz_H_LCaM7kZWWb0Y.mft
File:                     mTsBukE-5Ujz_H_LCaM7kZWWb0Y.mft (raw, json)
Hash identifier:          uzrxohjLpWeHSMCylMsr0MMvF1UjOq6y/oYy232UfCo=
Subject key identifier:   C7:56:7C:DB:D2:4B:1C:AB:94:85:F5:D6:04:57:33:4A:CD:C2:5F:6D
Authority key identifier: 99:3B:01:BA:41:3E:E5:48:F3:FC:7F:CB:09:A3:3B:91:95:96:6F:46
Certificate issuer:       /CN=A915A797/serialNumber=993B01BA413EE548F3FC7FCB09A33B9195966F46
Certificate serial:       35
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTsBukE-5Ujz_H_LCaM7kZWWb0Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A797/766AC9B26E9211F0BBEB7C3AC4F9AE02/mTsBukE-5Ujz_H_LCaM7kZWWb0Y.mft
Manifest number:          2F
Signing time:             Sun 19 Oct 2025 11:14:18 +0000
Manifest this update:     Sun 19 Oct 2025 11:14:17 +0000
Manifest next update:     Sun 26 Oct 2025 11:14:17 +0000
Files and hashes:         1: mTsBukE-5Ujz_H_LCaM7kZWWb0Y.crl (hash: GHPzBNsc4xT2LI+iSZ8FUllFQ9tE3+k5G7JZ4gNCwy4=)
                          2: 77B72AD6944E11F0AE3B5D3BC4F9AE02.roa (hash: epzctK0uJO+JncA4Vqlt5S7STICljtNpDvzUWLCrJD0=)
                          3: 1110B336733A11F0A50CB40BC4F9AE02.roa (hash: krjsbGchHznXD9xE+7coZ2q4Y50tByhAIOZ2Cdtlbl4=)
                          4: 117FF3C2733A11F0A50CB40BC4F9AE02.roa (hash: 9WYj2zFPUN3jX99W/3L3u0gLSL5u/6TLs64/L7pHdxc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A797/766AC9B26E9211F0BBEB7C3AC4F9AE02/mTsBukE-5Ujz_H_LCaM7kZWWb0Y.crl
                          rsync://rpki.apnic.net/member_repository/A915A797/766AC9B26E9211F0BBEB7C3AC4F9AE02/mTsBukE-5Ujz_H_LCaM7kZWWb0Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTsBukE-5Ujz_H_LCaM7kZWWb0Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 11:14:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53 (0x35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A797, serialNumber=993B01BA413EE548F3FC7FCB09A33B9195966F46
        Validity
            Not Before: Oct 19 11:14:17 2025 GMT
            Not After : Oct 26 11:14:17 2025 GMT
        Subject: CN=68f4c809-0ad6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f1:ef:f6:44:fd:92:22:3b:0e:07:5b:38:a2:
                    82:2b:77:83:9a:14:57:e2:38:2b:39:18:98:29:e2:
                    2e:69:ad:7e:ce:ab:58:44:24:5e:24:16:f0:b1:f8:
                    01:95:c8:a4:d4:86:90:22:8d:ee:2d:59:28:40:85:
                    87:f5:c9:bb:dd:9d:fd:18:34:99:3c:92:8a:48:03:
                    55:e7:e1:7e:93:79:2d:19:05:21:f0:56:09:c2:2c:
                    42:c1:2b:23:01:1b:14:69:8c:8e:b3:a5:7c:6b:2e:
                    1f:6f:1d:29:c3:2f:05:c6:66:65:23:0c:51:9b:c2:
                    11:61:13:17:f9:5f:04:d9:2c:a6:98:bf:7a:0b:4b:
                    d1:80:fd:ff:67:e4:dc:3e:36:15:ed:ba:7e:bd:b9:
                    1b:66:91:2c:00:53:9e:58:ee:a4:1a:c7:1a:2c:f9:
                    43:ac:21:1f:78:f7:a9:a0:4f:6c:63:06:45:30:9c:
                    a6:26:7f:b5:e5:7f:d8:68:4f:b6:78:af:83:1d:70:
                    b7:4b:20:4f:88:0c:2a:c6:65:b5:43:03:c0:e1:5e:
                    fe:22:3e:d7:53:2b:52:4d:46:7b:2b:7d:23:3c:6f:
                    d1:03:a4:de:35:a1:1f:c4:6f:79:70:c9:ee:92:20:
                    fd:ed:83:e6:d7:82:49:d4:6f:96:f5:00:30:03:d8:
                    63:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:56:7C:DB:D2:4B:1C:AB:94:85:F5:D6:04:57:33:4A:CD:C2:5F:6D
            X509v3 Authority Key Identifier:
                keyid:99:3B:01:BA:41:3E:E5:48:F3:FC:7F:CB:09:A3:3B:91:95:96:6F:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A797/766AC9B26E9211F0BBEB7C3AC4F9AE02/mTsBukE-5Ujz_H_LCaM7kZWWb0Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTsBukE-5Ujz_H_LCaM7kZWWb0Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A797/766AC9B26E9211F0BBEB7C3AC4F9AE02/mTsBukE-5Ujz_H_LCaM7kZWWb0Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:c3:45:f2:aa:14:13:e5:15:5f:e8:0e:d7:d7:e3:fc:f7:49:
         00:f5:e2:10:80:02:a2:b9:56:2a:d8:b5:2f:b2:1b:78:91:43:
         07:f3:26:b0:0a:34:5b:9d:30:5e:32:36:f2:25:e8:5c:a1:85:
         e6:b0:7a:ec:ad:d8:e4:30:dc:b4:ef:be:3b:25:2e:0c:1b:9d:
         57:2f:73:a6:53:5d:c5:3a:f1:39:95:69:b9:63:a3:7f:e9:f9:
         cf:88:b4:3e:c8:f7:b7:1e:1a:ba:50:55:f0:db:2a:36:64:e6:
         16:71:20:d1:d6:18:e1:1f:a7:51:a7:54:b1:82:3a:75:fb:8e:
         01:ca:bc:ae:d1:04:fb:23:dc:47:be:c5:25:27:51:73:76:75:
         6c:cb:39:37:cd:d7:50:85:25:b8:a5:75:28:f3:ba:b2:10:db:
         ed:61:be:a5:62:56:2a:85:ff:11:bd:02:07:38:be:f1:48:24:
         d6:0d:b8:3c:be:aa:bb:18:25:5f:b0:5f:24:94:c4:58:9e:a6:
         25:73:03:21:b8:6f:21:79:2f:f7:c4:7f:ee:a2:a1:16:35:32:
         b5:7b:97:a4:25:3b:fa:c2:3f:f8:9a:7c:dd:cd:5e:6c:06:aa:
         e1:3a:99:9d:e5:0c:72:7d:ef:8f:c8:f2:f6:e7:d5:7b:06:f7:
         ba:ea:77:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:32:26 2025 by rpki-client