Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.mft
File:                     ueYM8Xn06svblJK6X3ys9FI5zPQ.mft (raw, json)
Hash identifier:          3v7AW7tk7Ww4Ry5N+4kSGFpLE2dVEJfoInHtpBva38Q=
Subject key identifier:   B6:F9:79:25:6B:90:04:E2:F9:30:DF:FE:DD:AF:CF:F4:AF:78:2D:BA
Authority key identifier: B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4
Certificate issuer:       /CN=A91EE03B/serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4
Certificate serial:       024D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.mft
Manifest number:          0203
Signing time:             Sun 19 Oct 2025 05:35:06 +0000
Manifest this update:     Sun 19 Oct 2025 05:35:05 +0000
Manifest next update:     Sun 26 Oct 2025 05:35:05 +0000
Files and hashes:         1: ueYM8Xn06svblJK6X3ys9FI5zPQ.crl (hash: YbdFN8k6qHmJNhyaJxjkwnUDAr80di8JZ4QqiB2TVL0=)
                          2: 7362D03E37C511EFBA013C34C4F9AE02.roa (hash: J9UTYAikWbU8vUFy05/O20RblyI0R/6cvmoWQQlqRao=)
                          3: 14C4C7D4002611EFBD462953C4F9AE02.roa (hash: 8kJgm21octV347LA5b0+h9xqKVWz2z1gfuxOcYechGQ=)
                          4: D2DF3ACCE25911EF9C741573C4F9AE02.roa (hash: bZo0jjpEK53JojulYhh2uIoOsNZVtFikF4T0wNpVaTc=)
                          5: 43E73F1824D011F0805C1741C4F9AE02.roa (hash: 8mWGVJVNOJKNvpRmJNnFhHAnhQ0UCcRUPU+vCMi+chY=)
                          6: 1DD3ED16BDB611EF8F65515FC4F9AE02.roa (hash: U47nsJ9WKaDxD3HIjdZJqDhU3aurE9CLsz0So1y6hAU=)
                          7: E35133A60ED911EE8A4E0A23C4F9AE02.roa (hash: e25ru4BXX5TZKhE2N5BI3aO29RU1zFDKzTpZQJzhAu0=)
                          8: A13BE9EE8EE911EE8698A64FC4F9AE02.roa (hash: OB+tYh+ezOhErKjf4UNGv3Lw8UDs7ihuZFiU7SbyVcg=)
                          9: 139300E4BA6911EFA78E2F66C4F9AE02.roa (hash: oK/gg2jz6l2+odqa+6HnN0t0SaDFmpXk6CPlQPqG6OA=)
                          10: 3F3EDA068CAB11EF8A61C244C4F9AE02.roa (hash: tlKS/saXcUEqSUdoVe/orILud6VMLOZGDh0+a8Ti4+w=)
                          11: E17B507E25DF11F0B111A515C4F9AE02.roa (hash: 5/aPav0hnKaVORmHzg6d5/te9kJtJygeFIvna6mHtc0=)
                          12: AE0A263AB00411EF95939E11C4F9AE02.roa (hash: 8TgidTWCD46pM3MBDeEQO24WX8WtEAaCQuUE2ZinLOI=)
                          13: 305C2134666211EFB1D51134C4F9AE02.roa (hash: mHWyoaXD9eCyhUezuYUM312SPpVtRjaHke+S1ZIIWUM=)
                          14: E7DC24BCC4C211EF8670983EC4F9AE02.roa (hash: QKESfnhXPWNJehFGb7NWVBUPM3j+NPkYNguECdBBh5k=)
                          15: 7857C144B87211EE98B04B19C4F9AE02.roa (hash: Ygl6owDEWs6V5U72TH4FmIb2N0WDGnO4aWCzCnuCTGA=)
                          16: A069EA0C8EE911EE8698A64FC4F9AE02.roa (hash: KnQ67jxRd2r4K6SCZNe0nZs2NQzYLUias1vgx76E3mE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl
                          rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 05:35:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 589 (0x24d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE03B, serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4
        Validity
            Not Before: Oct 19 05:35:05 2025 GMT
            Not After : Oct 26 05:35:05 2025 GMT
        Subject: CN=68f47889-6d63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:98:c5:fc:65:ce:a6:48:11:99:6c:de:49:8c:
                    51:7e:b9:9d:0a:b8:7e:95:06:56:5c:2a:12:ec:4f:
                    8c:02:73:ae:ba:34:dd:7a:e9:71:60:f1:d4:af:93:
                    ee:09:68:80:a9:40:18:3e:2f:94:1c:e7:44:fa:34:
                    2a:49:1c:57:77:33:c6:24:40:f5:a9:19:9c:fd:e5:
                    b5:e0:a8:bd:e0:c3:c5:02:31:f2:b3:5a:44:17:32:
                    fa:dd:cc:87:d1:7f:c4:19:58:10:d6:01:c0:ea:fb:
                    68:d6:aa:a6:87:28:f9:20:da:7b:3a:1a:4b:e7:64:
                    20:6d:b3:f7:01:3c:a8:e6:ec:b1:e3:d0:10:52:0f:
                    15:a4:b3:88:fb:8e:7d:b7:e6:e2:85:9a:39:5c:1a:
                    af:77:b4:b3:e6:b8:8b:be:80:a7:03:84:80:23:1f:
                    05:dc:45:4e:fc:53:b2:47:c6:83:c7:c0:83:bd:ef:
                    c3:56:57:f6:05:09:74:05:31:19:8f:c4:b1:24:16:
                    05:62:04:c1:cd:20:5e:12:ed:74:10:1e:50:85:46:
                    3b:9a:61:12:55:9a:98:6d:d2:59:4a:ac:0a:33:37:
                    56:3e:fc:59:32:20:51:25:41:fd:ae:ac:58:98:12:
                    df:bb:3f:65:26:3c:c4:bc:26:94:f8:9a:75:09:3a:
                    97:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:F9:79:25:6B:90:04:E2:F9:30:DF:FE:DD:AF:CF:F4:AF:78:2D:BA
            X509v3 Authority Key Identifier:
                keyid:B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:12:97:45:17:6b:0e:43:21:44:5a:09:16:2f:1b:9e:38:b8:
         3d:d7:a4:6c:c7:b2:2c:ab:05:7a:7e:8f:62:52:f1:6f:26:93:
         d1:46:55:4e:f4:81:19:b4:3f:6d:03:ac:48:ae:be:6b:db:f3:
         6b:2f:77:ec:68:9b:85:d6:34:d5:67:ea:22:14:17:1c:42:cc:
         21:b3:89:4f:3e:97:46:80:c6:17:a9:be:86:a1:4e:31:01:43:
         9b:02:7a:3c:92:28:c9:18:5a:d1:86:c4:ef:37:ae:9a:40:cf:
         a9:b2:66:f9:95:b2:9b:b0:df:bc:2c:46:ac:cb:e8:06:99:1d:
         92:34:57:47:8b:77:94:24:c3:1b:64:da:d0:99:0b:4a:d2:f1:
         3e:52:ff:0d:4d:fe:a5:da:61:c3:51:1f:08:c5:17:d3:a6:ac:
         e1:0f:be:40:aa:39:98:50:dc:7a:13:97:ad:a8:75:ad:d8:62:
         4e:b5:52:04:d1:ab:02:63:4c:b7:bb:d2:e0:5e:88:c7:7d:ea:
         45:1b:16:1e:1b:64:a4:c4:12:23:99:ac:01:bc:db:a2:ff:49:
         5b:f6:2f:54:7b:24:bd:d6:df:01:b7:c2:c8:7f:ed:0a:b8:70:
         fd:47:87:4c:1c:73:5a:3d:9f:16:a0:49:20:3c:ae:f8:ad:30:
         7e:bb:3b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:37:55 2025 by rpki-client