Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.mft
File:                     MJHb_j66tWY-h63G6ZX4gtOyZMo.mft (raw, json)
Hash identifier:          61nBuMdsSaisaV9VdRYO81sbks4WusvtAZIwetu4hiQ=
Subject key identifier:   3D:04:32:69:BB:56:D5:EE:7D:6D:9B:C6:E6:ED:ED:68:2D:A7:F3:21
Authority key identifier: 30:91:DB:FE:3E:BA:B5:66:3E:87:AD:C6:E9:95:F8:82:D3:B2:64:CA
Certificate issuer:       /CN=A91C1C49/serialNumber=3091DBFE3EBAB5663E87ADC6E995F882D3B264CA
Certificate serial:       0C63
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJHb_j66tWY-h63G6ZX4gtOyZMo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.mft
Manifest number:          412B
Signing time:             Sat 18 Oct 2025 15:10:55 +0000
Manifest this update:     Sat 18 Oct 2025 15:10:55 +0000
Manifest next update:     Sat 25 Oct 2025 15:10:55 +0000
Files and hashes:         1: MJHb_j66tWY-h63G6ZX4gtOyZMo.crl (hash: JIPV5REAQMTisNWjpXudRQkL90+VYJ7E/dKB/IgDh2I=)
                          2: 8941689CB44911EA92F1F886C4F9AE02.roa (hash: Uqr4nD/CZBuD2sTlglQJ4RTyydE1vAssru0oXCdlN74=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.crl
                          rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJHb_j66tWY-h63G6ZX4gtOyZMo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 15:10:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3171 (0xc63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1C49, serialNumber=3091DBFE3EBAB5663E87ADC6E995F882D3B264CA
        Validity
            Not Before: Oct 18 15:10:55 2025 GMT
            Not After : Oct 25 15:10:55 2025 GMT
        Subject: CN=68f3adff-9884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a1:0a:03:7d:c3:82:55:99:b1:f7:d1:0f:b0:
                    c6:8b:b1:7a:d9:d8:78:43:07:69:39:be:4c:2d:8a:
                    f4:d3:7f:3f:4f:22:14:ce:75:c8:ec:b2:f9:99:e9:
                    4b:27:a1:63:cd:04:6d:77:cd:37:62:21:f0:ea:76:
                    80:0f:11:7a:ee:97:a6:cd:9a:92:c5:4f:18:70:8e:
                    4b:66:89:0f:ab:3e:c3:09:48:0c:66:c8:e6:dd:39:
                    19:e3:dd:2b:9b:c3:9b:13:4b:e6:5c:85:1e:8f:60:
                    0c:43:89:50:dc:36:d8:86:d6:58:ce:8d:1a:ca:dc:
                    5e:5e:42:c1:67:96:76:18:a7:a1:ca:aa:74:92:3a:
                    80:ee:ee:a7:7c:17:db:95:49:c2:1b:5e:b4:02:d5:
                    47:1a:85:78:b0:10:56:cc:2a:85:d5:e5:b6:91:4c:
                    9a:c4:3a:eb:bb:fd:bd:ea:16:d7:ab:3a:3e:be:58:
                    ef:f1:ef:f6:94:36:c3:42:4e:e8:76:76:95:91:87:
                    a5:6f:cf:de:bd:4f:11:0c:66:65:8f:41:30:62:ca:
                    8e:8c:b1:9e:30:02:cf:a9:dc:9d:ff:bd:07:51:8c:
                    25:3a:8e:0a:5b:00:6f:ea:54:d1:e3:89:55:ed:62:
                    ee:ef:c3:a8:c6:9f:63:08:ed:43:d2:d3:b8:09:92:
                    1f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:04:32:69:BB:56:D5:EE:7D:6D:9B:C6:E6:ED:ED:68:2D:A7:F3:21
            X509v3 Authority Key Identifier:
                keyid:30:91:DB:FE:3E:BA:B5:66:3E:87:AD:C6:E9:95:F8:82:D3:B2:64:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJHb_j66tWY-h63G6ZX4gtOyZMo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:a2:92:0d:0a:73:33:1a:1d:b3:65:af:f6:1e:1f:43:1e:1f:
         2a:32:4c:46:ef:3b:8a:d3:db:11:c8:ec:1a:e4:64:5f:d7:5e:
         7c:f1:3d:1a:99:78:6c:7d:72:04:8b:a8:19:d8:a5:43:60:29:
         9b:45:ae:38:1f:03:90:94:4a:ec:2c:47:dd:b5:75:2d:37:9c:
         f0:3e:7c:3d:d0:9c:1d:c4:eb:b8:66:0d:82:4b:4a:f6:0c:4e:
         b7:73:a2:26:68:25:a1:2d:21:12:6b:f5:bd:47:b3:cf:70:c4:
         3a:74:d2:a1:2a:ee:d2:6d:66:3b:bc:54:7a:e8:9a:b2:c4:71:
         42:cf:1c:c6:ef:9f:de:53:0a:e9:63:f8:9e:52:cc:6e:34:e8:
         27:6e:90:65:c8:99:9f:17:71:ae:93:35:4b:91:10:91:7a:43:
         c7:56:e5:21:85:93:15:b6:d2:2b:03:82:5d:7f:22:62:ff:79:
         74:e3:70:97:fa:53:04:b1:5c:25:98:22:8b:42:ff:b6:80:10:
         33:12:4a:22:5e:85:60:38:f0:18:ec:aa:f8:4c:ac:c6:1c:74:
         c4:9b:6d:b1:72:ec:62:a9:b0:f6:a7:57:68:d2:37:ec:ec:38:
         bc:a5:95:05:a6:4e:a9:a4:bf:84:e5:b1:a9:da:22:9a:40:e2:
         ce:3a:a5:2b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDGMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzFDNDkxMTAvBgNVBAUTKDMwOTFEQkZFM0VCQUI1NjYzRTg3QURDNkU5OTVGODgy
RDNCMjY0Q0EwHhcNMjUxMDE4MTUxMDU1WhcNMjUxMDI1MTUxMDU1WjAYMRYwFAYD
VQQDEw02OGYzYWRmZi05ODg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr6EKA33DglWZsffRD7DGi7F62dh4QwdpOb5MLYr0038/TyIUznXI7LL5melL
J6FjzQRtd803YiHw6naADxF67pemzZqSxU8YcI5LZokPqz7DCUgMZsjm3TkZ490r
m8ObE0vmXIUej2AMQ4lQ3DbYhtZYzo0aytxeXkLBZ5Z2GKehyqp0kjqA7u6nfBfb
lUnCG160AtVHGoV4sBBWzCqF1eW2kUyaxDrru/296hbXqzo+vljv8e/2lDbDQk7o
dnaVkYelb8/evU8RDGZlj0EwYsqOjLGeMALPqdyd/70HUYwlOo4KWwBv6lTR44lV
7WLu78Ooxp9jCO1D0tO4CZIf9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD0EMmm7
VtXufW2bxubt7Wgtp/MhMB8GA1UdIwQYMBaAFDCR2/4+urVmPoetxumV+ILTsmTK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUM0OS9DNDlGNzVGODFE
OUYxMUUyOUVGQkEyOTAwOEIwMkNEMi9NSkhiX2o2NnRXWS1oNjNHNlpYNGd0T3la
TW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01KSGJfajY2dFdZLWg2M0c2Wlg0Z3RPeVpNby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MUM0OS9DNDlGNzVGODFEOUYxMUUyOUVGQkEyOTAwOEIwMkNEMi9NSkhiX2o2NnRX
WS1oNjNHNlpYNGd0T3laTW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAhopINCnMzGh2zZa/2Hh9DHh8qMkxG7zuK09sRyOwa5GRf11588T0a
mXhsfXIEi6gZ2KVDYCmbRa44HwOQlErsLEfdtXUtN5zwPnw90JwdxOu4Zg2CS0r2
DE63c6ImaCWhLSESa/W9R7PPcMQ6dNKhKu7SbWY7vFR66JqyxHFCzxzG75/eUwrp
Y/ieUsxuNOgnbpBlyJmfF3GukzVLkRCRekPHVuUhhZMVttIrA4JdfyJi/3l043CX
+lMEsVwlmCKLQv+2gBAzEkoiXoVgOPAY7Kr4TKzGHHTEm22xcuxiqbD2p1do0jfs
7Di8pZUFpk6ppL+E5bGp2iKaQOLOOqUr
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:50:00 2025 by rpki-client