Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft
File:                     pu8GtolYGCHHjIgpG731xRKjP0E.mft (raw, json)
Hash identifier:          Yfxzr9l9aROgtsjTG0cdtRaee4UZ0xWG1WHly6s/LwI=
Subject key identifier:   D5:EF:0D:7B:6F:0A:23:FF:B7:5F:51:9E:28:FE:F0:24:4D:8A:04:9E
Authority key identifier: A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41
Certificate issuer:       /CN=A9198847/serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41
Certificate serial:       0DE8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft
Manifest number:          0DB1
Signing time:             Sat 18 Oct 2025 18:38:12 +0000
Manifest this update:     Sat 18 Oct 2025 18:38:11 +0000
Manifest next update:     Sat 25 Oct 2025 18:38:11 +0000
Files and hashes:         1: pu8GtolYGCHHjIgpG731xRKjP0E.crl (hash: pM4IbGP0hZKbz7lbLf+oz+nSEbpzTN13vSWPln/Tk+c=)
                          2: C40CFBDED7E011EFBC9A924AC4F9AE02.roa (hash: KMP4fS0KJ0rV6tzyJoqXTC8btS2FqftO8fBCSBS+5IE=)
                          3: 8E8D88CC7FF911F09985006DC4F9AE02.roa (hash: ephMktk7dldPDpqOYOq0zlTVGd1aoKcLbgXlsFlKEgM=)
                          4: 7938B3C66FC111EC91536F62C4F9AE02.roa (hash: eIKfHf/XSmCHqSrtE/mqXSvnhQ2z8uL0Vg+6q1rOPNA=)
                          5: 7F7231ACE18011EF8702D74DC4F9AE02.roa (hash: TY0we0LCT2NhieXnw4ZC8SmWs1+jQYEFzS94Z1jJrh0=)
                          6: 13C099EE366711F0B5877C84C4F9AE02.roa (hash: e7UzY1XC0eLBl2c9zPdawS11TdFN1eY25CHBco5Agic=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.crl
                          rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 18:38:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3560 (0xde8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9198847, serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41
        Validity
            Not Before: Oct 18 18:38:11 2025 GMT
            Not After : Oct 25 18:38:11 2025 GMT
        Subject: CN=68f3de93-ad39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:99:14:c3:a3:69:3d:11:76:a4:d6:a0:7d:f5:
                    ad:cf:97:16:4b:4f:93:e7:17:fa:32:4f:90:3b:99:
                    28:d8:95:d9:e1:2d:6d:d1:a0:f8:1f:2c:79:d8:ce:
                    ff:10:fa:a8:72:69:02:fa:cd:a1:db:a4:43:f9:7c:
                    b8:39:32:0c:89:b3:e3:6a:dd:7e:be:7d:d4:0a:61:
                    d8:38:69:27:97:1a:31:b2:e1:a8:58:79:51:12:bf:
                    0e:5b:cc:e5:d1:8f:06:8c:09:c0:eb:28:7e:57:3a:
                    a0:d8:61:39:b6:59:28:7a:3c:73:13:6f:38:19:95:
                    72:b8:eb:f9:11:b5:34:9c:66:df:87:f5:46:e2:64:
                    07:8f:04:9b:4a:27:4a:7d:6a:c6:08:e2:cd:63:f6:
                    86:3a:8d:56:01:92:61:cc:ea:8a:0a:3e:77:53:fd:
                    39:42:0e:02:5c:ae:ea:71:3c:d5:17:f8:a5:c0:92:
                    e2:a4:e0:e3:73:78:85:64:40:52:4d:7c:6b:22:91:
                    44:d0:bb:83:84:be:cd:d4:bd:e7:0e:92:f1:52:ff:
                    9c:76:65:dd:87:e6:ec:3f:0d:88:7c:83:f2:43:fe:
                    bc:60:28:12:54:ca:30:88:27:fb:81:39:8a:ec:3f:
                    c4:a9:da:c9:85:67:c8:b9:dc:f2:f7:60:de:1f:05:
                    4c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:EF:0D:7B:6F:0A:23:FF:B7:5F:51:9E:28:FE:F0:24:4D:8A:04:9E
            X509v3 Authority Key Identifier:
                keyid:A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:d3:05:79:75:96:8d:bd:fc:81:a8:e6:fb:f3:ac:70:4b:51:
         50:56:bb:2e:22:d8:75:20:36:a2:02:f5:a2:4d:e9:6d:4a:13:
         c8:57:46:66:39:ab:b9:bb:51:e2:87:a6:c3:86:de:61:77:cb:
         80:c6:46:04:1e:ed:fd:75:9b:50:bf:fd:b5:4a:98:7b:02:20:
         aa:e8:6d:af:9a:e7:6a:de:82:78:2f:6c:ac:25:28:79:f9:6b:
         ea:3e:01:bd:7e:57:fb:f7:07:d6:89:b1:a0:fd:9d:b7:7f:00:
         d1:22:54:c3:c4:45:df:61:5c:1a:3f:62:d8:57:60:f4:0f:a2:
         12:4c:0a:96:97:2f:46:dd:64:aa:94:83:1c:86:bd:76:33:23:
         db:74:4e:83:f3:9c:0f:13:c2:8d:9b:b6:19:59:3c:73:3c:da:
         0d:e6:66:62:76:6c:08:66:15:b5:14:58:b2:e4:f4:56:b5:e0:
         31:d7:4c:ce:a3:23:9e:f7:3e:d4:44:40:7f:aa:4e:18:60:c1:
         f4:82:8b:f6:40:13:2a:bb:3b:26:e7:a6:a2:b1:bc:e0:10:72:
         a9:ef:7d:7c:64:3c:8a:19:fc:55:25:15:d7:67:f6:8f:14:dc:
         85:4f:dd:6c:7a:34:b8:c4:6a:a0:3a:1e:fe:ec:62:59:f3:e9:
         ec:25:65:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:20:32 2025 by rpki-client