Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.mft
File:                     2uHOCtpntEcTxhsfrsT11NZ6FZ8.mft (raw, json)
Hash identifier:          elhx8whoYiD0lRdXhbJy9B5FGrGgiVdTIUs2Dq5mQ6c=
Subject key identifier:   C0:26:4C:9C:E4:12:39:DE:BE:A7:21:23:FD:D8:27:92:E5:8B:5F:8A
Authority key identifier: DA:E1:CE:0A:DA:67:B4:47:13:C6:1B:1F:AE:C4:F5:D4:D6:7A:15:9F
Certificate issuer:       /CN=A915ACE2/serialNumber=DAE1CE0ADA67B44713C61B1FAEC4F5D4D67A159F
Certificate serial:       4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2uHOCtpntEcTxhsfrsT11NZ6FZ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.mft
Manifest number:          3A
Signing time:             Sun 19 Oct 2025 11:15:40 +0000
Manifest this update:     Sun 19 Oct 2025 11:15:39 +0000
Manifest next update:     Sun 26 Oct 2025 11:15:39 +0000
Files and hashes:         1: 2uHOCtpntEcTxhsfrsT11NZ6FZ8.crl (hash: Mv7D/TDHYJMRnhNfnHk3XdgjKCu/agdLtoM8N0kjlko=)
                          2: 6C8EEADA8FE011F0A1C6120DC4F9AE02.roa (hash: F+R2fk0YjqijE6FasKZCYAmvjOnVu/mYSIbi31Ovw6o=)
                          3: 7D08B8F68FDF11F0B34EBA0BC4F9AE02.roa (hash: ziDdc7ON5gmiCX4Ym4QO/xFvs2ZmtqL0y4LOF+ZKS9M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.crl
                          rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2uHOCtpntEcTxhsfrsT11NZ6FZ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 11:15:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75 (0x4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915ACE2, serialNumber=DAE1CE0ADA67B44713C61B1FAEC4F5D4D67A159F
        Validity
            Not Before: Oct 19 11:15:39 2025 GMT
            Not After : Oct 26 11:15:39 2025 GMT
        Subject: CN=68f4c85b-6109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:dd:4a:a6:4e:55:76:05:7c:a6:67:83:ea:9a:
                    c9:d8:cd:a4:7a:ad:c0:f6:1d:ea:fa:f7:06:0a:42:
                    f4:0d:58:bb:f5:6b:75:93:01:ad:00:be:c4:f0:b7:
                    24:8b:c1:0b:a5:2e:e7:ac:75:67:e4:7f:cb:ab:2c:
                    ad:28:98:60:3e:02:0f:45:8c:8f:3c:7e:c7:b2:27:
                    dc:a1:e8:05:dc:bf:50:4a:08:bb:2f:50:a9:5d:8b:
                    d4:c8:5c:ca:63:3f:ae:1d:f4:5f:7c:84:b1:9d:d5:
                    75:38:dd:f2:7f:46:6d:cd:94:b7:bc:79:95:1a:a7:
                    d5:8a:58:12:26:b0:03:74:42:c8:83:f5:9b:a2:57:
                    38:d8:28:fa:a9:f8:ba:2b:f7:65:02:48:78:4d:b0:
                    13:d6:88:f6:bd:15:ce:56:c8:ae:6b:db:fe:e8:a0:
                    09:32:6d:7a:bd:96:a3:a5:37:9c:58:61:0e:58:51:
                    0a:b9:19:a3:66:a2:d5:36:cd:38:6a:da:ab:7d:3e:
                    8c:da:9c:a3:d2:32:4f:7f:93:69:28:96:ec:4b:16:
                    d3:5b:df:8f:67:62:2f:0b:8e:8d:7e:57:f7:31:d3:
                    a2:fe:e8:a9:eb:35:30:7b:df:f3:d1:81:67:c1:79:
                    7a:7d:4c:58:aa:22:84:32:3d:b4:f3:5a:78:8a:3f:
                    c8:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:26:4C:9C:E4:12:39:DE:BE:A7:21:23:FD:D8:27:92:E5:8B:5F:8A
            X509v3 Authority Key Identifier:
                keyid:DA:E1:CE:0A:DA:67:B4:47:13:C6:1B:1F:AE:C4:F5:D4:D6:7A:15:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2uHOCtpntEcTxhsfrsT11NZ6FZ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:db:4b:c8:3d:0c:bf:dc:e2:d1:2a:00:a9:fc:b5:28:b8:5f:
         64:1f:ae:2a:f7:e3:35:22:43:41:6d:9c:76:3b:08:d2:79:d3:
         ea:cb:ef:d1:fb:8e:59:d1:98:95:1a:f1:b4:84:3d:6c:34:c5:
         15:c4:2b:d3:14:98:86:5f:21:74:21:c7:8d:be:ef:a4:15:52:
         12:dd:e7:b7:6b:96:89:54:3a:64:f0:c6:32:25:40:24:9b:54:
         f1:49:0f:d4:d4:7b:97:19:a4:5f:70:78:b9:03:e2:12:1a:0a:
         4d:57:fd:11:07:41:55:29:50:2e:6f:c6:f7:a7:41:7d:ea:14:
         80:58:6b:11:95:5a:50:de:15:cc:08:e8:e9:c8:1e:4e:5a:8d:
         4a:18:54:52:d2:c4:39:5c:54:78:9f:0f:0b:b1:df:4e:99:7e:
         1a:d5:72:6d:1c:94:b6:85:e5:29:d9:dc:b3:64:77:bf:73:7b:
         c7:cb:8f:fc:30:13:9f:06:fb:8d:e4:8c:0c:4e:dd:9e:3c:d9:
         11:ba:3b:03:c5:6a:d3:c0:15:99:a4:f3:2a:59:6b:c8:04:a7:
         08:15:f1:b2:28:ca:56:9c:0e:68:d4:bb:b1:5f:5f:61:a0:10:
         f5:df:2e:9d:b1:19:e3:01:92:d5:39:6f:b3:7c:94:f1:0a:58:
         4f:05:e3:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:59:13 2025 by rpki-client