Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/iseesut_a1et3hy6QDxuWCNtNEU.mft
File:                     iseesut_a1et3hy6QDxuWCNtNEU.mft (raw, json)
Hash identifier:          N4RTxJbSMcuOFxuJPO7frBLqVN0TJ7QRi6hBN+zWUBM=
Subject key identifier:   68:BB:C5:15:12:34:36:13:1E:26:CC:A4:B5:5B:D6:6F:95:30:12:92
Authority key identifier: 8A:C7:9E:B2:EB:7F:6B:57:AD:DE:1C:BA:40:3C:6E:58:23:6D:34:45
Certificate issuer:       /CN=A91BF026/serialNumber=8AC79EB2EB7F6B57ADDE1CBA403C6E58236D3445
Certificate serial:       08BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iseesut_a1et3hy6QDxuWCNtNEU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/iseesut_a1et3hy6QDxuWCNtNEU.mft
Manifest number:          2026
Signing time:             Sat 18 Oct 2025 16:58:48 +0000
Manifest this update:     Sat 18 Oct 2025 16:58:47 +0000
Manifest next update:     Sat 25 Oct 2025 16:58:47 +0000
Files and hashes:         1: iseesut_a1et3hy6QDxuWCNtNEU.crl (hash: zm+8uj9VhJ0yAci20NLAiuiBzhBBA2cienSwFg3odlw=)
                          2: 710575A2635611ED90FD8A69C4F9AE02.roa (hash: Ojjbd1Ng9etxINrkJllS0XvsVkU95FVK8QTd3UlRsHQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/iseesut_a1et3hy6QDxuWCNtNEU.crl
                          rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/iseesut_a1et3hy6QDxuWCNtNEU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iseesut_a1et3hy6QDxuWCNtNEU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 16:58:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2236 (0x8bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF026, serialNumber=8AC79EB2EB7F6B57ADDE1CBA403C6E58236D3445
        Validity
            Not Before: Oct 18 16:58:47 2025 GMT
            Not After : Oct 25 16:58:47 2025 GMT
        Subject: CN=68f3c748-7629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1b:60:c4:5e:b0:db:ee:c0:06:7a:11:9d:af:
                    0f:c2:23:c7:72:c1:ff:6a:64:68:20:b6:ab:a1:b2:
                    f6:09:3a:f1:28:2b:65:4e:c0:61:ee:c2:cb:64:8c:
                    27:d7:d7:b0:29:dc:ba:62:b3:1e:f4:f9:2e:cf:ee:
                    f3:13:9d:bf:05:64:ab:7f:0a:15:60:a9:55:22:10:
                    1c:b0:6c:1e:29:6e:0c:14:7c:cb:13:c8:fc:fe:e4:
                    db:37:e6:bc:2a:6f:1c:87:59:27:29:f2:b7:7b:74:
                    0c:eb:6c:de:73:d6:6e:ac:73:57:f0:c7:65:67:db:
                    99:93:f1:44:9e:f6:71:1e:19:c9:50:01:7e:e8:2d:
                    1d:06:e1:6d:41:21:99:39:1c:08:a1:8a:7f:af:55:
                    3c:92:80:28:87:db:40:c6:9c:0f:22:22:fe:1a:ac:
                    12:59:41:6e:02:17:f0:f0:72:62:2d:5d:50:6e:5b:
                    a3:b6:2a:09:da:0f:27:e6:45:44:7f:3e:41:23:5c:
                    28:bb:fc:e6:5b:ce:1e:8d:de:16:ab:19:4e:3d:31:
                    66:d4:83:64:fa:65:ef:a8:f5:f0:4d:d6:66:ec:07:
                    ec:80:e4:0d:01:d2:6b:f7:10:2d:70:00:ce:1c:29:
                    9c:1e:2f:a4:27:06:97:90:e8:76:a8:7b:62:77:d1:
                    ce:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:BB:C5:15:12:34:36:13:1E:26:CC:A4:B5:5B:D6:6F:95:30:12:92
            X509v3 Authority Key Identifier:
                keyid:8A:C7:9E:B2:EB:7F:6B:57:AD:DE:1C:BA:40:3C:6E:58:23:6D:34:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/iseesut_a1et3hy6QDxuWCNtNEU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iseesut_a1et3hy6QDxuWCNtNEU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/iseesut_a1et3hy6QDxuWCNtNEU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:f8:d2:79:c3:f5:f6:af:f2:0c:58:18:01:f5:7a:86:31:b2:
         31:4e:d7:3d:ab:02:c1:a0:f1:13:de:ad:35:8f:d4:3a:eb:30:
         1f:1f:d6:1d:9b:b0:d6:41:2b:d3:f1:8d:85:99:b0:be:35:bb:
         0d:9f:c1:a9:04:b7:e9:7f:01:05:aa:d8:22:20:57:2e:a0:07:
         5b:2f:c4:a6:ea:79:c5:90:25:55:03:e4:da:e5:2a:91:a5:ad:
         5d:d8:04:22:ec:3b:e2:df:5c:33:87:97:23:8e:32:22:ac:18:
         06:c9:9b:6f:03:7c:20:36:37:32:53:d7:2c:e4:66:db:53:4f:
         e0:5c:e0:83:74:34:8d:91:c9:73:58:46:c8:ef:75:2a:f8:2c:
         50:63:c0:27:a6:9b:91:a1:9f:9d:00:0b:d5:53:d6:36:85:a8:
         68:45:3d:27:0d:48:bb:5e:2b:88:e6:e9:9a:d2:06:57:c5:80:
         a4:fb:eb:a5:56:1c:64:2e:73:5c:dd:b1:41:ed:1a:f9:77:89:
         32:44:e0:31:9f:68:42:65:fd:f5:7e:07:04:f1:6c:1a:86:ac:
         ec:f6:f8:cf:7d:ac:1d:b4:47:3f:cf:06:39:02:3d:03:be:7c:
         b5:6f:6b:27:9c:ad:65:98:e5:31:ef:27:e9:e6:ce:46:45:76:
         c5:9a:e7:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:47:58 2025 by rpki-client