Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915AA2E/7AFC9DF05AE511EFB11C4945C4F9AE02/9YAtkD2hDNA_zz6OFlX1IcHYV4M.mft
File:                     9YAtkD2hDNA_zz6OFlX1IcHYV4M.mft (raw, json)
Hash identifier:          bMFDVpDa4k1BTjDlissW7UwFq3/p1ndjRGx3mXYHXlw=
Subject key identifier:   08:59:EC:D8:12:EF:DF:DC:88:44:C5:B5:2A:44:AA:41:61:C1:5A:80
Authority key identifier: F5:80:2D:90:3D:A1:0C:D0:3F:CF:3E:8E:16:55:F5:21:C1:D8:57:83
Certificate issuer:       /CN=A915AA2E/serialNumber=F5802D903DA10CD03FCF3E8E1655F521C1D85783
Certificate serial:       E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9YAtkD2hDNA_zz6OFlX1IcHYV4M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915AA2E/7AFC9DF05AE511EFB11C4945C4F9AE02/9YAtkD2hDNA_zz6OFlX1IcHYV4M.mft
Manifest number:          E0
Signing time:             Sun 19 Oct 2025 08:30:09 +0000
Manifest this update:     Sun 19 Oct 2025 08:30:08 +0000
Manifest next update:     Sun 26 Oct 2025 08:30:08 +0000
Files and hashes:         1: 9YAtkD2hDNA_zz6OFlX1IcHYV4M.crl (hash: lRxuH8fIvvDNKrCzBuxvIKSuEeVeeuAFMZaWI39S98M=)
                          2: 485D1C1AABD111F09DF58512C4F9AE02.roa (hash: C+jNBE8aLOWYMKAuhubBOnivrdc2tpfTJOZLFUiLBvc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915AA2E/7AFC9DF05AE511EFB11C4945C4F9AE02/9YAtkD2hDNA_zz6OFlX1IcHYV4M.crl
                          rsync://rpki.apnic.net/member_repository/A915AA2E/7AFC9DF05AE511EFB11C4945C4F9AE02/9YAtkD2hDNA_zz6OFlX1IcHYV4M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9YAtkD2hDNA_zz6OFlX1IcHYV4M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 08:30:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 227 (0xe3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915AA2E, serialNumber=F5802D903DA10CD03FCF3E8E1655F521C1D85783
        Validity
            Not Before: Oct 19 08:30:08 2025 GMT
            Not After : Oct 26 08:30:08 2025 GMT
        Subject: CN=68f4a190-d1b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:47:20:9c:68:36:5e:ee:af:f5:a1:cd:56:4b:
                    63:63:12:5f:bc:69:65:a3:5a:76:2c:90:1f:ef:d5:
                    50:6d:6c:fd:66:f9:c9:39:a5:4d:b3:e3:8e:b7:b0:
                    dd:58:0d:19:da:8b:d4:db:dc:ac:44:26:26:ea:a5:
                    95:cd:d7:96:31:98:d9:9b:38:1d:0c:56:96:e6:32:
                    9d:0b:8a:d8:49:1b:ff:f9:f3:51:43:8d:fa:8f:65:
                    39:06:a5:9e:73:18:f5:27:b4:07:53:5b:e1:ea:1c:
                    4a:34:3a:42:06:a7:0a:9c:1f:de:cd:e7:9f:95:79:
                    41:d5:49:cf:cb:34:11:3a:b6:f2:74:ca:15:2e:8f:
                    bd:9c:20:ce:7c:2f:e3:1d:6d:5e:5c:70:0c:c4:66:
                    1a:33:1a:8a:41:41:35:8c:24:63:16:21:b3:c8:a7:
                    24:16:53:de:b0:5f:76:11:02:fc:c3:67:b6:0b:5e:
                    5e:ba:3c:dc:68:41:1d:09:f5:9c:b9:fe:12:6a:22:
                    9b:73:9b:55:d6:76:38:59:fc:15:e7:9c:dc:f2:ae:
                    b9:c7:bd:bf:a1:0f:ab:ad:46:5d:9f:06:19:8e:08:
                    1a:6d:41:8f:28:54:02:be:e9:f8:db:4d:d1:da:9d:
                    70:12:10:83:68:10:f3:93:f6:3e:eb:73:b0:ea:4f:
                    92:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:59:EC:D8:12:EF:DF:DC:88:44:C5:B5:2A:44:AA:41:61:C1:5A:80
            X509v3 Authority Key Identifier:
                keyid:F5:80:2D:90:3D:A1:0C:D0:3F:CF:3E:8E:16:55:F5:21:C1:D8:57:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915AA2E/7AFC9DF05AE511EFB11C4945C4F9AE02/9YAtkD2hDNA_zz6OFlX1IcHYV4M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9YAtkD2hDNA_zz6OFlX1IcHYV4M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AA2E/7AFC9DF05AE511EFB11C4945C4F9AE02/9YAtkD2hDNA_zz6OFlX1IcHYV4M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:3f:66:4e:65:ca:28:23:d9:15:e3:d3:36:35:c5:ef:19:4b:
         70:5a:d1:35:96:43:9d:47:92:de:33:8b:21:8c:4f:d4:6d:8b:
         57:28:80:6a:de:3c:a0:3b:97:36:f1:da:f1:d8:66:72:ac:6a:
         26:1a:87:e3:24:35:f7:87:70:3b:0d:fd:9d:c9:0a:4f:65:a6:
         bd:92:61:32:94:eb:d8:d4:b7:08:e0:15:9c:bb:31:00:72:7f:
         c6:aa:9f:ee:df:81:09:48:fe:64:46:3f:ef:75:6c:ed:62:ee:
         23:9d:4c:d4:36:c9:28:a3:fc:8a:78:e5:48:9b:2f:9f:58:7b:
         cc:7a:9c:c8:97:16:0c:a9:72:d9:24:8c:ef:ff:e9:2d:31:40:
         8f:23:8d:68:d8:95:e4:12:e6:01:37:97:db:9a:dd:5f:c7:5c:
         5d:f3:dc:a0:c8:87:f9:72:57:69:7b:f1:bd:75:9b:3c:85:7e:
         dd:27:d6:4c:98:fe:67:f0:d5:8b:ea:f0:3c:84:01:90:d7:3c:
         7f:f6:c0:36:66:a8:5f:d0:ed:1d:02:f3:bb:5f:ca:c1:1a:c2:
         9d:be:46:66:14:7f:7a:9a:f5:e1:91:ee:7b:26:8f:0a:05:5e:
         74:77:9c:b7:28:8f:b2:7e:39:8f:16:a4:5a:95:87:c7:2f:ba:
         68:b5:f7:60
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUFBMkUxMTAvBgNVBAUTKEY1ODAyRDkwM0RBMTBDRDAzRkNGM0U4RTE2NTVGNTIx
QzFEODU3ODMwHhcNMjUxMDE5MDgzMDA4WhcNMjUxMDI2MDgzMDA4WjAYMRYwFAYD
VQQDEw02OGY0YTE5MC1kMWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0EcgnGg2Xu6v9aHNVktjYxJfvGllo1p2LJAf79VQbWz9ZvnJOaVNs+OOt7Dd
WA0Z2ovU29ysRCYm6qWVzdeWMZjZmzgdDFaW5jKdC4rYSRv/+fNRQ436j2U5BqWe
cxj1J7QHU1vh6hxKNDpCBqcKnB/ezeeflXlB1UnPyzQROrbydMoVLo+9nCDOfC/j
HW1eXHAMxGYaMxqKQUE1jCRjFiGzyKckFlPesF92EQL8w2e2C15eujzcaEEdCfWc
uf4SaiKbc5tV1nY4WfwV55zc8q65x72/oQ+rrUZdnwYZjggabUGPKFQCvun4203R
2p1wEhCDaBDzk/Y+63Ow6k+SKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAhZ7NgS
79/ciETFtSpEqkFhwVqAMB8GA1UdIwQYMBaAFPWALZA9oQzQP88+jhZV9SHB2FeD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QUEyRS83QUZDOURGMDVB
RTUxMUVGQjExQzQ5NDVDNEY5QUUwMi85WUF0a0QyaEROQV96ejZPRmxYMUljSFlW
NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlZQXRrRDJoRE5BX3p6Nk9GbFgxSWNIWVY0TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QUEyRS83QUZDOURGMDVBRTUxMUVGQjExQzQ5NDVDNEY5QUUwMi85WUF0a0QyaERO
QV96ejZPRmxYMUljSFlWNE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDNP2ZOZcooI9kV49M2NcXvGUtwWtE1lkOdR5LeM4shjE/UbYtXKIBq
3jygO5c28drx2GZyrGomGofjJDX3h3A7Df2dyQpPZaa9kmEylOvY1LcI4BWcuzEA
cn/Gqp/u34EJSP5kRj/vdWztYu4jnUzUNskoo/yKeOVImy+fWHvMepzIlxYMqXLZ
JIzv/+ktMUCPI41o2JXkEuYBN5fbmt1fx1xd89ygyIf5cldpe/G9dZs8hX7dJ9ZM
mP5n8NWL6vA8hAGQ1zx/9sA2Zqhf0O0dAvO7X8rBGsKdvkZmFH96mvXhke57Jo8K
BV50d5y3KI+yfjmPFqRalYfHL7potfdg
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:44:29 2025 by rpki-client