Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft
File:                     l_m5BihHZTCOwmiFXVY9q5GGMFs.mft (raw, json)
Hash identifier:          3uQjZwmTYMI9h5bTJChYY1rEjzIq2MT/QtlJGW+VGJA=
Subject key identifier:   56:B6:08:DF:BB:7F:6B:E3:D9:4B:F1:52:84:D4:1D:97:18:99:A9:A2
Authority key identifier: 97:F9:B9:06:28:47:65:30:8E:C2:68:85:5D:56:3D:AB:91:86:30:5B
Certificate issuer:       /CN=A918E4E6/serialNumber=97F9B906284765308EC268855D563DAB9186305B
Certificate serial:       0CBF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_m5BihHZTCOwmiFXVY9q5GGMFs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft
Manifest number:          0CB8
Signing time:             Sat 18 Oct 2025 18:53:36 +0000
Manifest this update:     Sat 18 Oct 2025 18:53:35 +0000
Manifest next update:     Sat 25 Oct 2025 18:53:35 +0000
Files and hashes:         1: l_m5BihHZTCOwmiFXVY9q5GGMFs.crl (hash: QUrNPTP6j6WOKQNFXNgcR2rQzgfupvOzrxYQKAgILuM=)
                          2: 9C9660D4FC6E11E9BC6D4822C4F9AE02.roa (hash: ivTBLc1IHemjBh5C9Wu0pV5fBOGymo+VSgfkbB+w5w8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.crl
                          rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_m5BihHZTCOwmiFXVY9q5GGMFs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 18:53:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3263 (0xcbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E4E6, serialNumber=97F9B906284765308EC268855D563DAB9186305B
        Validity
            Not Before: Oct 18 18:53:35 2025 GMT
            Not After : Oct 25 18:53:35 2025 GMT
        Subject: CN=68f3e230-05a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:98:5e:59:ae:a1:8a:78:b8:5a:0f:bf:ca:76:
                    dc:70:f5:50:53:b8:93:f4:dd:a2:09:ce:33:c0:b3:
                    1c:ff:de:3a:d0:c6:1f:1c:39:7f:25:e9:a2:36:2c:
                    09:ae:99:2a:15:7b:5d:0e:c9:72:6d:58:c0:20:79:
                    bb:06:81:44:4e:74:6b:04:cd:85:1a:f4:38:64:e2:
                    e1:76:ce:1e:f4:f8:85:47:b8:a3:29:58:64:a0:28:
                    40:ce:21:58:74:72:18:3e:a4:53:71:72:71:9d:1f:
                    da:6b:2e:43:28:c1:22:47:e8:4a:2a:a6:88:23:39:
                    19:c4:7a:cb:42:8b:38:42:6a:97:ff:8f:1d:11:7d:
                    c7:f7:2e:e6:01:08:30:0b:d2:9f:e4:d0:b9:82:8e:
                    22:5b:fe:16:6f:a1:17:75:33:c6:66:f8:ec:c3:12:
                    ca:f9:e4:1d:41:52:0b:05:56:fe:48:b7:42:98:08:
                    94:47:08:15:91:60:53:a6:71:40:d3:5a:60:ec:b7:
                    6e:b6:bf:e6:94:4c:7d:52:cc:31:17:d9:a4:ab:20:
                    9a:f5:70:a2:81:48:6f:de:2d:4b:0f:86:a5:d5:ad:
                    dd:f0:5b:4d:87:60:e2:10:98:95:2d:41:68:db:c3:
                    53:e6:78:f5:f7:bf:20:0a:83:88:bf:34:f0:54:d8:
                    fd:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:B6:08:DF:BB:7F:6B:E3:D9:4B:F1:52:84:D4:1D:97:18:99:A9:A2
            X509v3 Authority Key Identifier:
                keyid:97:F9:B9:06:28:47:65:30:8E:C2:68:85:5D:56:3D:AB:91:86:30:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_m5BihHZTCOwmiFXVY9q5GGMFs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:1b:37:54:7a:08:b9:85:da:87:fc:3a:e4:5e:b3:b1:eb:59:
         b4:98:25:57:f8:69:cf:c3:74:c8:5e:d8:5e:19:db:a6:d8:00:
         1d:b5:06:e1:48:cf:08:0c:4f:b6:2e:52:0e:62:30:ad:53:5f:
         5d:ff:fd:b3:bd:48:35:6c:be:2e:8d:91:96:33:3c:8d:5b:27:
         7e:09:a7:73:8f:1c:d3:1e:9b:e5:cf:69:f3:b4:53:f0:f1:f5:
         53:98:13:9b:3d:c9:ee:ab:c2:8b:90:a1:88:23:e0:ce:91:58:
         72:9f:53:64:1d:49:44:9a:20:4a:0e:55:b8:05:af:92:ac:e4:
         9d:a2:8e:b6:ab:8a:35:40:64:97:cc:c0:33:22:65:ed:8f:58:
         59:02:d0:df:be:fd:bd:a4:d4:60:fe:70:36:29:17:c3:82:06:
         16:27:04:c2:f2:9b:14:98:23:d7:e0:48:5a:3c:5d:f4:18:e0:
         b2:24:2b:62:09:86:c6:ff:3b:68:13:ba:b3:f5:1c:65:e9:a1:
         3f:a9:d8:fb:33:ad:7d:85:c8:62:c8:b1:a4:3d:8f:25:58:76:
         79:ec:9a:fa:51:d6:3e:28:53:ad:3b:42:85:b6:75:f6:72:1c:
         62:9a:2c:66:01:07:07:a1:40:9f:68:18:d5:ec:09:84:cd:ee:
         88:84:8e:be
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEU0RTYxMTAvBgNVBAUTKDk3RjlCOTA2Mjg0NzY1MzA4RUMyNjg4NTVENTYzREFC
OTE4NjMwNUIwHhcNMjUxMDE4MTg1MzM1WhcNMjUxMDI1MTg1MzM1WjAYMRYwFAYD
VQQDEw02OGYzZTIzMC0wNWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv5heWa6hini4Wg+/ynbccPVQU7iT9N2iCc4zwLMc/9460MYfHDl/JemiNiwJ
rpkqFXtdDslybVjAIHm7BoFETnRrBM2FGvQ4ZOLhds4e9PiFR7ijKVhkoChAziFY
dHIYPqRTcXJxnR/aay5DKMEiR+hKKqaIIzkZxHrLQos4QmqX/48dEX3H9y7mAQgw
C9Kf5NC5go4iW/4Wb6EXdTPGZvjswxLK+eQdQVILBVb+SLdCmAiURwgVkWBTpnFA
01pg7Ldutr/mlEx9UswxF9mkqyCa9XCigUhv3i1LD4al1a3d8FtNh2DiEJiVLUFo
28NT5nj1978gCoOIvzTwVNj9JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFa2CN+7
f2vj2UvxUoTUHZcYmamiMB8GA1UdIwQYMBaAFJf5uQYoR2UwjsJohV1WPauRhjBb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTRFNi8yQjNCMkZDRUZD
NkQxMUU5OEZDMkM5MUNDNEY5QUUwMi9sX201QmloSFpUQ093bWlGWFZZOXE1R0dN
RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xfbTVCaWhIWlRDT3dtaUZYVlk5cTVHR01Gcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RTRFNi8yQjNCMkZDRUZDNkQxMUU5OEZDMkM5MUNDNEY5QUUwMi9sX201QmloSFpU
Q093bWlGWFZZOXE1R0dNRnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA2GzdUegi5hdqH/DrkXrOx61m0mCVX+GnPw3TIXtheGdum2AAdtQbh
SM8IDE+2LlIOYjCtU19d//2zvUg1bL4ujZGWMzyNWyd+CadzjxzTHpvlz2nztFPw
8fVTmBObPcnuq8KLkKGII+DOkVhyn1NkHUlEmiBKDlW4Ba+SrOSdoo62q4o1QGSX
zMAzImXtj1hZAtDfvv29pNRg/nA2KRfDggYWJwTC8psUmCPX4EhaPF30GOCyJCti
CYbG/ztoE7qz9Rxl6aE/qdj7M619hchiyLGkPY8lWHZ57Jr6UdY+KFOtO0KFtnX2
chximixmAQcHoUCfaBjV7AmEze6IhI6+
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:08:33 2025 by rpki-client