Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.mft
File:                     L904BNZFjq8cs5F7XjMvulxxX5E.mft (raw, json)
Hash identifier:          0qHVZ0F8Tm8dshgHty0P68RIeHzB+hWz4FPifqVqoDs=
Subject key identifier:   DB:3F:45:03:BB:0F:6D:4A:AB:6A:A2:10:4D:83:1C:EB:F7:4D:27:1B
Authority key identifier: 2F:DD:38:04:D6:45:8E:AF:1C:B3:91:7B:5E:33:2F:BA:5C:71:5F:91
Certificate issuer:       /CN=A915B551/serialNumber=2FDD3804D6458EAF1CB3917B5E332FBA5C715F91
Certificate serial:       62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L904BNZFjq8cs5F7XjMvulxxX5E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.mft
Manifest number:          61
Signing time:             Sun 19 Oct 2025 10:26:22 +0000
Manifest this update:     Sun 19 Oct 2025 10:26:21 +0000
Manifest next update:     Sun 26 Oct 2025 10:26:21 +0000
Files and hashes:         1: L904BNZFjq8cs5F7XjMvulxxX5E.crl (hash: Tlvl8cfG8lpzDVIX5+TOnpvLl7DjIkM4ocIlEM4RpM0=)
                          2: DE917E7016C511F085B4FF6FC4F9AE02.roa (hash: gTUMCdfGUWrs1q6ayMOBwf36vGkRjWbK2xqTfFcnmzw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.crl
                          rsync://rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L904BNZFjq8cs5F7XjMvulxxX5E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 10:26:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B551, serialNumber=2FDD3804D6458EAF1CB3917B5E332FBA5C715F91
        Validity
            Not Before: Oct 19 10:26:21 2025 GMT
            Not After : Oct 26 10:26:21 2025 GMT
        Subject: CN=68f4bcce-d07f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d8:cb:09:6a:4c:de:77:4f:5f:36:4d:5b:ae:
                    a0:ba:c5:b1:a9:e9:f5:29:9f:cf:dd:1c:d8:a7:47:
                    36:15:54:2b:91:62:9e:91:7b:c8:f2:58:28:54:0c:
                    21:6f:5c:41:22:d5:67:c6:dc:58:e8:a5:cb:7a:82:
                    c8:9a:a2:5d:f4:26:61:0f:ca:48:63:f8:42:1c:b9:
                    b7:cc:f3:48:8e:33:1e:25:f7:06:59:37:5d:a6:08:
                    bb:95:74:3d:65:6c:34:ae:8b:20:bd:32:7d:17:b4:
                    f2:50:a2:bf:f9:c2:c4:22:6d:98:6b:db:bf:4b:3a:
                    8f:89:6e:dc:eb:7a:be:a2:04:8c:e6:d5:d5:93:1e:
                    ce:55:5d:e4:0b:91:66:76:dc:cd:4f:35:96:17:7e:
                    5e:25:9c:92:ff:3b:f8:9f:75:05:8e:34:1e:79:cf:
                    3a:d2:79:ed:5a:e7:13:76:29:ff:92:b3:70:0f:ba:
                    c4:8f:1e:f6:a6:98:a2:0f:9b:be:5c:17:d3:d3:ef:
                    24:a5:57:c7:d5:ee:67:e6:e3:16:5c:7b:36:e0:82:
                    35:0c:e9:20:46:ba:f7:2a:f5:15:ba:c9:ac:9b:76:
                    e5:86:d4:33:42:2e:63:b3:11:98:12:cd:e6:28:98:
                    4a:a0:88:49:94:40:da:dd:b5:63:7f:86:af:9e:e2:
                    54:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:3F:45:03:BB:0F:6D:4A:AB:6A:A2:10:4D:83:1C:EB:F7:4D:27:1B
            X509v3 Authority Key Identifier:
                keyid:2F:DD:38:04:D6:45:8E:AF:1C:B3:91:7B:5E:33:2F:BA:5C:71:5F:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L904BNZFjq8cs5F7XjMvulxxX5E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:c0:c4:8e:5b:1b:c9:75:53:26:c3:2f:06:c7:43:90:5d:ed:
         64:f8:06:4d:bc:3d:4b:b1:19:e1:f3:fd:94:5b:a6:b4:47:ba:
         c2:fb:8c:05:6f:74:5e:56:8a:a2:40:bd:0e:10:b6:85:86:09:
         82:6f:0b:47:a2:c8:da:49:b0:81:ce:bc:58:96:68:94:06:c8:
         3e:e5:25:15:df:22:dd:08:73:cb:c6:9c:03:84:18:05:91:3b:
         55:9a:53:91:53:65:e5:3e:49:66:ae:9f:ae:86:68:d8:4a:01:
         42:63:aa:d5:43:7e:f1:61:ea:b2:a0:94:04:ae:37:0b:74:1b:
         0f:ff:9a:ff:16:c3:00:01:9c:98:6a:91:ff:c2:6c:37:97:12:
         77:11:0c:b0:36:66:b6:d3:ac:dc:47:0d:f8:5b:09:ce:bb:67:
         3e:4c:86:5f:90:d7:6a:27:ae:ad:34:a6:1c:a2:e1:55:2e:33:
         20:ba:8d:3c:24:1b:b5:b6:27:bf:dc:81:3b:ce:1c:e3:7d:12:
         7c:e0:b4:ff:3b:c0:6f:57:7d:0a:cf:b6:5c:5e:e3:f4:bf:ec:
         de:0f:27:26:3e:e4:52:fd:ba:87:28:66:1a:a8:41:bb:59:58:
         1d:fc:fa:e5:b2:2d:3c:f0:0a:54:8e:2e:fe:ab:8b:33:46:55:
         dc:13:13:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:06:35 2025 by rpki-client