Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915BDD9/2272C5F0F1B411EE9FDFB867C4F9AE02/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.mft
File:                     Shbh6zvfjdRgc8JVc1Ok_Ohwh80.mft (raw, json)
Hash identifier:          GZjpDVnDXiQTr3S0Z4zTIf4XBQgdBQIbbCjWQawQ8l4=
Subject key identifier:   F8:D6:F9:7A:30:0A:A0:94:92:20:C2:20:F3:C8:BC:97:92:3B:BA:FD
Authority key identifier: 4A:16:E1:EB:3B:DF:8D:D4:60:73:C2:55:73:53:A4:FC:E8:70:87:CD
Certificate issuer:       /CN=A915BDD9/serialNumber=4A16E1EB3BDF8DD46073C2557353A4FCE87087CD
Certificate serial:       011E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BDD9/2272C5F0F1B411EE9FDFB867C4F9AE02/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.mft
Manifest number:          011E
Signing time:             Sun 19 Oct 2025 07:34:50 +0000
Manifest this update:     Sun 19 Oct 2025 07:34:49 +0000
Manifest next update:     Sun 26 Oct 2025 07:34:49 +0000
Files and hashes:         1: Shbh6zvfjdRgc8JVc1Ok_Ohwh80.crl (hash: aa+NgSgYa+1NMFVCmoq+yKtiIAy9Ph+BqxngapUrtB0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BDD9/2272C5F0F1B411EE9FDFB867C4F9AE02/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.crl
                          rsync://rpki.apnic.net/member_repository/A915BDD9/2272C5F0F1B411EE9FDFB867C4F9AE02/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 07:34:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 286 (0x11e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BDD9, serialNumber=4A16E1EB3BDF8DD46073C2557353A4FCE87087CD
        Validity
            Not Before: Oct 19 07:34:49 2025 GMT
            Not After : Oct 26 07:34:49 2025 GMT
        Subject: CN=68f4949a-c0a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:bc:17:8d:94:e8:a2:21:99:4c:3c:8c:18:7a:
                    8c:8b:e8:1c:a9:ec:51:05:40:09:36:ce:66:e9:43:
                    1d:1b:7a:05:8c:56:04:40:3a:0c:bc:0a:c8:86:24:
                    46:f6:30:b4:f9:d5:cf:ab:3d:26:6d:0a:8d:d7:e0:
                    d6:7a:72:fa:23:5c:82:81:64:00:db:e4:8b:08:19:
                    de:41:3b:5b:8b:b4:60:36:d2:81:91:56:c3:ef:b0:
                    cc:38:1a:e0:04:80:7f:ad:05:22:d0:4e:f8:a1:b1:
                    84:d0:1a:85:ed:ac:1b:89:fc:f3:2b:80:e9:cd:13:
                    c9:49:45:70:f5:13:04:71:b6:3f:3f:2b:37:1f:7d:
                    28:7e:b0:9e:99:a9:26:e2:fd:88:7b:b6:61:f5:05:
                    c2:8b:79:92:69:b2:4e:a4:e4:d8:e4:b7:4e:78:54:
                    f4:29:83:a9:5c:58:65:98:a9:8d:47:e8:ce:34:71:
                    32:bb:d6:00:d5:38:73:92:2d:ec:c5:98:20:12:3a:
                    e7:c7:ff:e6:25:7b:71:7a:a7:44:ed:1d:ef:6f:b5:
                    fe:2a:b5:fd:3f:15:6f:4f:f1:50:5c:b3:ba:36:4f:
                    30:3f:06:3e:0d:97:2c:8f:29:88:4c:c3:62:25:d2:
                    e3:db:43:a5:89:e3:66:bb:a5:00:32:75:c5:fe:92:
                    bb:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:D6:F9:7A:30:0A:A0:94:92:20:C2:20:F3:C8:BC:97:92:3B:BA:FD
            X509v3 Authority Key Identifier:
                keyid:4A:16:E1:EB:3B:DF:8D:D4:60:73:C2:55:73:53:A4:FC:E8:70:87:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BDD9/2272C5F0F1B411EE9FDFB867C4F9AE02/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BDD9/2272C5F0F1B411EE9FDFB867C4F9AE02/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:47:f2:50:5b:50:e6:53:22:25:60:99:d5:c3:0a:fa:a8:c9:
         f9:ee:41:6a:2d:79:ab:2e:03:72:08:39:d4:a2:6f:8e:a8:a0:
         b4:7b:ef:49:cb:7c:58:01:2d:b7:69:a9:7f:40:38:91:a6:83:
         a6:33:f3:04:60:af:5f:f5:50:4f:f7:50:00:8f:3f:5c:f9:60:
         08:b8:38:36:92:c7:f6:ee:e0:69:94:a4:7d:1c:88:f4:5f:f2:
         11:72:04:79:99:ff:d1:35:e4:9b:df:96:07:85:1f:89:34:68:
         fd:89:89:9e:f2:c3:a2:08:61:c4:a3:fc:b2:3b:25:e8:38:38:
         29:49:b2:60:a8:92:c1:2f:8b:24:4c:0a:cb:f0:93:0d:f1:59:
         b2:2c:ac:4d:b7:22:66:2a:7d:0b:cd:99:fa:ac:50:52:d6:2c:
         51:e6:d3:b9:b3:05:be:83:00:9a:b4:39:e3:f2:12:b5:4f:b9:
         5f:61:72:68:4c:df:df:35:b7:a9:7c:e6:65:db:c0:fd:f3:7c:
         a5:d0:8e:26:c5:59:03:67:17:87:e7:78:14:dc:e1:50:57:c1:
         7b:c9:48:cf:ed:9a:f3:59:37:0b:69:44:fe:eb:91:75:7e:b9:
         f3:3d:22:6c:2a:36:9c:96:07:5f:2e:f2:d7:d8:2f:7e:2b:8d:
         99:8b:80:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:25:32 2025 by rpki-client