Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A921/E38D182EC5B411EA9926C81DC4F9AE02/76bB5uz60eiKn0TSgALu1jmyulQ.mft
File:                     76bB5uz60eiKn0TSgALu1jmyulQ.mft (raw, json)
Hash identifier:          okDDzmWBIVHXfz1L1U/WWIa0wlxBEVAVf2/T8AucCVQ=
Subject key identifier:   B8:83:53:2C:2E:5F:A0:73:5F:55:7D:F7:C1:D5:A2:CE:7A:61:D0:EB
Authority key identifier: EF:A6:C1:E6:EC:FA:D1:E8:8A:9F:44:D2:80:02:EE:D6:39:B2:BA:54
Certificate issuer:       /CN=A915A921/serialNumber=EFA6C1E6ECFAD1E88A9F44D28002EED639B2BA54
Certificate serial:       08B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/76bB5uz60eiKn0TSgALu1jmyulQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A921/E38D182EC5B411EA9926C81DC4F9AE02/76bB5uz60eiKn0TSgALu1jmyulQ.mft
Manifest number:          08B0
Signing time:             Sat 18 Oct 2025 21:38:57 +0000
Manifest this update:     Sat 18 Oct 2025 21:38:56 +0000
Manifest next update:     Sat 25 Oct 2025 21:38:56 +0000
Files and hashes:         1: 76bB5uz60eiKn0TSgALu1jmyulQ.crl (hash: KaARFj9ftwEhao/dCn6shL9hZ02pRLf5Z1eCx11dCdo=)
                          2: AFB3319E5F0C11EC8C2C2820C4F9AE02.roa (hash: oQabdmEmsE0xS2pzwUEQIF+XAWD0QihN42o3aT+jjXE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A921/E38D182EC5B411EA9926C81DC4F9AE02/76bB5uz60eiKn0TSgALu1jmyulQ.crl
                          rsync://rpki.apnic.net/member_repository/A915A921/E38D182EC5B411EA9926C81DC4F9AE02/76bB5uz60eiKn0TSgALu1jmyulQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/76bB5uz60eiKn0TSgALu1jmyulQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 21:38:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2233 (0x8b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A921, serialNumber=EFA6C1E6ECFAD1E88A9F44D28002EED639B2BA54
        Validity
            Not Before: Oct 18 21:38:56 2025 GMT
            Not After : Oct 25 21:38:56 2025 GMT
        Subject: CN=68f408f1-f395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:20:3d:ab:d8:8a:70:bf:13:3c:bf:06:c1:4f:
                    29:aa:91:da:87:19:00:de:59:dc:93:c9:23:d4:d6:
                    40:e6:83:f5:e5:82:d8:78:7d:12:4c:f2:5a:cd:e8:
                    68:10:d6:35:3b:91:eb:e9:29:6a:4c:3a:33:fc:6e:
                    51:08:ae:83:cc:dc:9d:26:2e:50:47:33:25:d9:35:
                    78:b2:16:9b:3a:22:bb:3e:88:b8:19:d1:ee:48:32:
                    dc:70:44:24:7a:7a:fb:07:02:54:fd:75:50:2f:14:
                    34:9b:71:81:55:8a:b8:6e:8a:24:d5:e1:f4:eb:f4:
                    6c:e2:85:3b:85:52:84:e1:e8:76:1a:f9:ce:ca:73:
                    ab:14:13:d7:8e:e3:f6:0d:b3:17:e9:74:85:f3:59:
                    5d:e9:8b:a9:3e:47:48:db:02:82:33:d6:db:cc:ca:
                    47:9b:09:cf:9f:35:f4:5b:45:9a:a1:74:ae:08:e5:
                    75:82:11:31:71:7b:9b:a7:5a:0c:d0:00:1e:61:f4:
                    30:6e:66:69:85:54:bd:f8:6e:3b:ef:56:e6:6f:55:
                    03:18:ce:cf:7e:bc:bf:c9:86:66:3e:7c:cd:e1:cd:
                    4c:47:c3:d9:96:f1:c6:fd:ea:66:91:85:ca:2e:77:
                    71:90:33:82:54:b2:87:1b:43:6c:d1:fe:23:90:08:
                    74:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:83:53:2C:2E:5F:A0:73:5F:55:7D:F7:C1:D5:A2:CE:7A:61:D0:EB
            X509v3 Authority Key Identifier:
                keyid:EF:A6:C1:E6:EC:FA:D1:E8:8A:9F:44:D2:80:02:EE:D6:39:B2:BA:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A921/E38D182EC5B411EA9926C81DC4F9AE02/76bB5uz60eiKn0TSgALu1jmyulQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/76bB5uz60eiKn0TSgALu1jmyulQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A921/E38D182EC5B411EA9926C81DC4F9AE02/76bB5uz60eiKn0TSgALu1jmyulQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:6f:b9:4f:17:4d:12:4a:ea:c7:1a:0a:58:18:1c:e7:2c:42:
         9d:77:6e:4e:6f:bf:8d:27:7b:d8:35:c2:73:01:57:fd:6b:92:
         0d:15:41:d9:61:26:10:dc:97:b4:85:ba:cb:f8:a3:ab:f8:6e:
         c8:fd:c6:ab:b4:75:83:84:12:3a:72:e5:26:4f:1f:d9:22:63:
         4d:55:2f:b2:ea:d2:98:ed:33:dc:57:87:57:99:50:56:4c:bf:
         b2:2c:68:0a:d4:27:80:36:20:ea:f1:54:14:4e:04:42:a1:36:
         ec:08:50:d0:ca:22:ce:f9:19:5f:98:95:11:fd:4a:64:3d:cf:
         8f:02:5c:64:29:dc:e2:1f:eb:51:4c:8a:e1:7b:6e:86:ff:0b:
         7a:0b:9e:a8:aa:e6:e6:80:66:2d:0d:e7:88:33:1f:17:ea:df:
         69:ea:60:c7:75:cd:ba:0f:95:bc:bb:88:03:07:3c:25:be:7e:
         e9:0b:38:3c:34:1d:ad:6e:18:2d:9d:2e:f7:81:d7:fe:09:67:
         1a:a0:74:50:45:b0:38:ca:5b:77:7f:ce:50:33:7b:a5:ec:59:
         c0:0f:cc:63:48:97:1e:8f:c8:69:c0:01:b6:63:e5:a3:f7:1e:
         ee:6b:b7:48:09:99:05:26:d4:46:05:d6:1b:e4:d1:40:37:d7:
         e3:e0:0a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:32:59 2025 by rpki-client