Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft
File:                     h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft (raw, json)
Hash identifier:          xOGHrELo3waICasY4AjBqss+FhQYOXxytS3Xp1H/Vss=
Subject key identifier:   6B:1E:0C:BE:4C:00:0F:18:4C:92:26:52:68:E1:B1:B3:2A:C3:3C:44
Authority key identifier: 87:95:4C:02:31:CA:AC:B2:BE:2D:FD:B5:67:C7:4A:F5:EC:B7:5B:0C
Certificate issuer:       /CN=A916BCDF/serialNumber=87954C0231CAACB2BE2DFDB567C74AF5ECB75B0C
Certificate serial:       1268
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h5VMAjHKrLK-Lf21Z8dK9ey3Www.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft
Manifest number:          1259
Signing time:             Mon 20 Oct 2025 17:33:01 +0000
Manifest this update:     Mon 20 Oct 2025 17:33:00 +0000
Manifest next update:     Mon 27 Oct 2025 17:33:00 +0000
Files and hashes:         1: h5VMAjHKrLK-Lf21Z8dK9ey3Www.crl (hash: XzigJafNl3fwc8OpLzouOpRCKhXv0hXKS6+c73XL13w=)
                          2: 698B3FA6986011EE969A225FC4F9AE02.roa (hash: IPMaIsA9uRnd6F5Aml0jreWHK2WPPMV0a6PLoDBBAuw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.crl
                          rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h5VMAjHKrLK-Lf21Z8dK9ey3Www.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 17:33:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4712 (0x1268)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916BCDF, serialNumber=87954C0231CAACB2BE2DFDB567C74AF5ECB75B0C
        Validity
            Not Before: Oct 20 17:33:00 2025 GMT
            Not After : Oct 27 17:33:00 2025 GMT
        Subject: CN=68f6724d-f929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:51:b1:e8:39:90:a9:9f:82:eb:3b:68:b4:ec:
                    ef:55:eb:bf:7e:97:7a:61:d3:ec:65:e2:44:38:fc:
                    2d:cb:30:d2:c0:ab:58:44:61:3e:2e:66:bd:cf:24:
                    82:1d:a6:4d:84:50:ef:42:7f:a7:6d:97:83:8c:ca:
                    e6:e6:0a:c9:e8:44:50:7a:6f:50:89:f0:e4:8e:6c:
                    ff:b7:47:a6:46:e3:3d:18:57:ef:37:d8:36:29:ac:
                    20:87:b1:f2:33:c8:2c:e3:6a:6f:91:e1:83:4a:86:
                    85:aa:ff:cc:01:e0:5b:45:ef:ae:f2:0b:f1:8f:e8:
                    7f:b7:0d:e3:43:06:05:de:35:2f:2a:ae:b2:6c:ee:
                    67:24:bf:e5:27:2d:a1:6a:a8:cd:e5:f8:33:87:4c:
                    41:62:02:e6:12:cc:17:53:2a:83:66:65:9d:4f:bd:
                    f3:1e:bf:7f:c5:c1:b9:f1:55:de:b0:ec:0f:86:51:
                    ac:b1:2e:3f:43:84:7b:02:9e:b8:46:1e:4f:05:8c:
                    6a:e2:28:5f:5a:fb:c4:0f:3a:bb:35:05:ab:93:ec:
                    e6:3b:74:f4:b5:ed:db:de:a7:fd:8d:1f:15:61:fd:
                    0b:5b:8c:b8:b8:10:4b:e6:38:ed:22:79:ca:48:e0:
                    7d:25:3a:eb:d6:c4:18:07:dc:0b:7c:53:c4:80:7c:
                    a3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:1E:0C:BE:4C:00:0F:18:4C:92:26:52:68:E1:B1:B3:2A:C3:3C:44
            X509v3 Authority Key Identifier:
                keyid:87:95:4C:02:31:CA:AC:B2:BE:2D:FD:B5:67:C7:4A:F5:EC:B7:5B:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h5VMAjHKrLK-Lf21Z8dK9ey3Www.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:d2:20:a3:48:fa:d3:a8:05:60:fb:cf:b9:f6:0a:83:01:f9:
         c8:45:c1:14:cb:ae:69:88:6c:75:45:27:b7:c6:ee:a5:ca:18:
         27:f3:09:bf:55:78:b2:17:a0:54:20:81:e4:15:4b:52:5e:f4:
         b3:37:59:2f:d5:0b:bb:fd:0f:e9:ab:2f:5a:b0:bb:ff:ee:77:
         ba:37:90:7d:cd:a0:01:6b:3c:9e:94:21:db:b0:85:d3:09:b7:
         67:ad:5a:9d:d4:4a:9d:bb:7a:53:24:cc:b0:a4:f6:aa:9c:7f:
         ca:a5:f6:f7:2d:ef:67:9c:08:c8:b1:6b:6a:68:44:1f:96:2c:
         59:ae:44:5c:60:05:3e:61:f3:99:de:47:98:ba:03:23:a7:99:
         7e:9b:84:0b:4d:e8:48:97:c2:01:6f:07:93:4c:60:4c:42:38:
         bc:aa:5c:20:87:29:78:b6:80:5d:bc:e8:99:89:10:f7:74:54:
         36:fe:52:35:b4:66:5e:b3:a2:5a:54:70:d9:9b:2f:8c:b3:56:
         8b:b5:53:9d:71:8d:87:5e:12:de:19:e9:41:bb:50:f8:08:dd:
         49:e6:81:1a:eb:b3:a0:1e:e2:bf:76:1a:01:8e:fc:0d:d9:99:
         30:bb:14:3d:fa:b0:b2:75:a4:ce:d3:9a:df:8e:29:6c:9b:69:
         cf:ab:17:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:25:19 2025 by rpki-client