Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.mft
File:                     6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.mft (raw, json)
Hash identifier:          2QpTVnpT3w2xgR2Virt66imatsnbiKyxMo6E7lgtTbA=
Subject key identifier:   52:12:4B:56:81:53:C5:BE:1B:D3:68:3A:18:16:32:92:4D:36:9B:35
Authority key identifier: E8:C2:1B:03:B6:50:83:B2:1B:FA:37:52:6D:12:B3:41:F2:49:CC:8B
Certificate issuer:       /CN=A915EFDF/serialNumber=E8C21B03B65083B21BFA37526D12B341F249CC8B
Certificate serial:       08AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.mft
Manifest number:          0874
Signing time:             Sat 18 Oct 2025 21:58:46 +0000
Manifest this update:     Sat 18 Oct 2025 21:58:46 +0000
Manifest next update:     Sat 25 Oct 2025 21:58:46 +0000
Files and hashes:         1: 6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.crl (hash: 53/gqKcgWzgEyQ83Yqe7m8iCPDdl8o9yrRVGeYNqs8E=)
                          2: C183E63077FD11F0A656FC44C4F9AE02.roa (hash: AiISmBi6EMkVxRTqMrgNjL5g/knPETuoOjLISKxyAhk=)
                          3: 4500A5A669BD11F0A024565FC4F9AE02.roa (hash: MSC30OoLQMQEjzk3rRCJ2ikbFlmuhuMgNqW5DTRWJu8=)
                          4: 03476D523FB011F097B5F864C4F9AE02.roa (hash: nR7G1WKVHgoejOczmztbNWOPg/UYf5k0nHYsKAHUYQo=)
                          5: 87448EFE3D1D11F0A469B051C4F9AE02.roa (hash: HgipkMBuwoWvuAFvEe44spWPZ3CIisx74k8F29IRrNc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.crl
                          rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 21:58:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2220 (0x8ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915EFDF, serialNumber=E8C21B03B65083B21BFA37526D12B341F249CC8B
        Validity
            Not Before: Oct 18 21:58:46 2025 GMT
            Not After : Oct 25 21:58:46 2025 GMT
        Subject: CN=68f40d96-85fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a6:9e:00:21:32:74:c1:ad:bb:2b:ba:40:82:
                    7a:97:d0:a2:16:8a:c8:45:58:92:ed:8e:ca:04:63:
                    91:55:8b:58:8a:ef:e6:bd:6a:fe:de:16:c8:fe:fb:
                    88:29:95:49:aa:00:56:88:08:92:31:b4:49:4e:58:
                    38:36:74:2d:94:a3:88:60:79:a6:46:e7:4f:a8:12:
                    f0:4f:b0:d8:8d:aa:e7:57:dd:19:0e:7c:46:f8:64:
                    50:ea:99:ca:a0:12:30:a3:f8:90:1e:52:00:3e:3d:
                    8a:99:26:4d:1f:ad:65:e5:be:1b:f0:d6:d7:98:f7:
                    ea:ef:26:49:25:f6:eb:33:06:d2:ff:36:82:80:b6:
                    05:ec:d3:99:59:41:da:d3:0c:83:c7:7e:21:63:3e:
                    ae:7f:99:3c:73:77:a7:8e:64:1f:4b:45:8f:a8:5d:
                    34:f4:b0:e5:08:42:06:56:8c:7d:d4:1f:f2:7f:d8:
                    3e:19:56:ca:9c:ad:25:8c:94:a1:cb:c8:aa:9c:f5:
                    ec:8c:13:4a:27:84:cf:ec:72:b4:52:e0:a7:0b:b2:
                    31:f9:c5:4e:1d:47:8e:a3:6c:bb:52:59:9e:a7:a9:
                    fc:6e:ab:0c:7b:7d:e7:75:a6:9b:41:b2:11:5e:ca:
                    09:09:a8:6c:64:13:12:6e:a0:86:fd:2c:9e:af:79:
                    71:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:12:4B:56:81:53:C5:BE:1B:D3:68:3A:18:16:32:92:4D:36:9B:35
            X509v3 Authority Key Identifier:
                keyid:E8:C2:1B:03:B6:50:83:B2:1B:FA:37:52:6D:12:B3:41:F2:49:CC:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:8b:1e:8a:6f:a8:5b:21:63:97:28:52:a2:d3:3c:17:af:a6:
         cd:fb:0c:fa:2d:b8:35:f6:32:25:1b:a1:1b:ed:60:45:ce:67:
         22:80:74:e7:b8:c8:e1:cc:55:85:fa:97:a4:8a:64:0b:8e:ed:
         3a:51:b8:3a:08:d2:b1:05:a8:1e:ab:cd:8b:39:2e:7c:f9:d4:
         23:5d:b6:da:b1:bd:5f:8d:54:0f:76:28:45:63:39:19:50:3a:
         11:dc:a2:4f:74:5b:45:b8:e4:35:25:e2:64:8f:d5:1e:a4:90:
         37:c3:b7:6f:90:ac:6e:68:8a:dd:7b:fc:02:0a:26:8d:3b:d2:
         72:ca:01:22:75:0b:c4:f8:09:64:6d:af:d1:bb:8d:f6:87:93:
         b1:34:80:65:34:e7:ab:62:f6:e6:2b:e1:68:60:6f:23:d1:61:
         a9:c4:b3:76:e0:a4:36:b3:91:eb:83:50:8f:6a:cf:e4:11:c4:
         a1:50:bd:49:54:b7:fc:29:b7:06:e0:b9:5b:37:a4:c9:d3:f2:
         db:e4:a1:fb:ac:a2:8b:c8:d2:5b:b1:2a:8c:7e:e2:2d:79:2a:
         35:54:92:f1:65:57:23:bc:6a:02:c5:5b:4b:df:ca:28:c9:ec:
         48:1c:7b:f4:7e:1d:fe:62:5e:d9:2b:ca:68:47:b9:6a:6d:3a:
         c3:20:df:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:19 2025 by rpki-client