Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.mft
File:                     4UieBUVuksrXFYRyAOSnXWw-Q84.mft (raw, json)
Hash identifier:          nVvF7vDhipTG7BLp2BF9mqgEChdvm3fPgwtYCIyNqYQ=
Subject key identifier:   F3:A3:23:7B:9E:D9:6D:93:2D:D0:74:78:04:DC:3B:DC:89:5C:9C:E9
Authority key identifier: E1:48:9E:05:45:6E:92:CA:D7:15:84:72:00:E4:A7:5D:6C:3E:43:CE
Certificate issuer:       /CN=A91F6AE0/serialNumber=E1489E05456E92CAD715847200E4A75D6C3E43CE
Certificate serial:       0311
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UieBUVuksrXFYRyAOSnXWw-Q84.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.mft
Manifest number:          030B
Signing time:             Sun 19 Oct 2025 03:16:42 +0000
Manifest this update:     Sun 19 Oct 2025 03:16:41 +0000
Manifest next update:     Sun 26 Oct 2025 03:16:41 +0000
Files and hashes:         1: 4UieBUVuksrXFYRyAOSnXWw-Q84.crl (hash: RTywuyPXc2RHsrKrl3TmAJSWegYzL7TmtgxeRESPPsY=)
                          2: E2DF828CF20211ECBCC9B986C4F9AE02.roa (hash: z4QSZHsaMIqrT5GqWS+ItSZJBTmn9r2MlyBM2UIg/g4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.crl
                          rsync://rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UieBUVuksrXFYRyAOSnXWw-Q84.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 03:16:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 785 (0x311)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F6AE0, serialNumber=E1489E05456E92CAD715847200E4A75D6C3E43CE
        Validity
            Not Before: Oct 19 03:16:41 2025 GMT
            Not After : Oct 26 03:16:41 2025 GMT
        Subject: CN=68f45819-07bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:79:40:0b:b3:bd:e6:60:2a:08:85:06:72:78:
                    d2:05:13:c8:61:40:2c:c5:f4:9c:eb:a5:cc:f5:99:
                    d8:57:d2:e7:5e:26:3a:25:7c:11:ed:b0:e1:27:dc:
                    f0:7c:3d:67:65:27:b1:42:0e:10:12:5c:98:7d:7a:
                    d9:5b:23:89:94:fd:65:b0:95:79:29:4c:bd:e5:b4:
                    e8:8d:5b:53:c7:12:36:13:1d:0c:cd:d6:12:16:c7:
                    34:24:3b:e0:44:3d:6f:f3:ff:8d:29:03:1a:56:e4:
                    1d:e1:23:5b:c9:ba:48:17:df:47:ad:3a:b1:5c:df:
                    75:3f:a1:a2:ed:43:38:d0:8f:bf:81:71:d8:c9:71:
                    83:e5:52:76:54:ed:a8:86:48:b1:7f:09:c7:cf:e5:
                    59:5e:b7:64:e4:0c:66:eb:d6:49:7b:e0:49:7d:c9:
                    b8:5f:51:99:98:0c:10:30:c5:0d:78:1a:46:86:33:
                    94:4c:df:3b:88:12:e9:90:fc:01:b0:79:d8:0e:09:
                    1c:06:8e:61:d3:63:bb:4b:16:5a:e3:12:96:3a:53:
                    8d:02:4a:5f:4f:c5:cf:07:ab:ab:22:8a:6e:05:ae:
                    02:19:48:23:ec:39:68:d4:fb:55:60:96:f9:a0:8a:
                    a6:21:29:97:f4:69:99:39:cc:fc:69:2d:d0:c5:df:
                    ad:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:A3:23:7B:9E:D9:6D:93:2D:D0:74:78:04:DC:3B:DC:89:5C:9C:E9
            X509v3 Authority Key Identifier:
                keyid:E1:48:9E:05:45:6E:92:CA:D7:15:84:72:00:E4:A7:5D:6C:3E:43:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UieBUVuksrXFYRyAOSnXWw-Q84.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:d7:d2:36:32:ab:ee:2c:3c:89:3b:17:b2:61:36:5a:f8:a2:
         df:06:9c:f2:92:17:7b:66:9c:9a:7f:b1:e8:9b:59:3e:24:ec:
         ea:15:cd:8c:52:1c:43:0b:14:53:40:ce:44:4e:3c:a0:4c:4b:
         7c:63:92:d5:4a:d6:a4:7e:c3:fb:3a:e2:c0:ce:19:59:5f:c0:
         90:a0:52:03:ba:b2:88:18:2b:77:35:b5:e3:c1:d1:e8:92:39:
         9e:be:8c:d4:27:b4:7f:a8:ae:5c:2a:c4:27:1b:ab:49:65:f0:
         34:03:8b:29:33:b6:98:5a:68:c0:ed:f8:83:3c:be:14:1b:16:
         f3:9f:b1:7a:92:fa:e7:1f:2c:bf:3d:14:26:59:31:b0:bf:f4:
         f2:8d:a4:21:a1:3f:88:74:fe:cf:67:39:50:fc:90:3d:47:b4:
         64:c3:fc:c7:0b:50:4e:4d:0f:d4:48:59:db:86:ef:c2:5d:43:
         ab:50:e9:7e:08:e1:7e:f3:32:49:aa:9f:7c:42:64:40:38:9a:
         44:49:3e:5c:45:4e:4c:36:8c:b6:4b:3b:12:0e:45:0a:da:1f:
         be:6e:fa:6b:da:36:3c:4e:3b:a2:e8:a2:fc:8f:4c:02:20:23:
         b2:fe:c4:0c:f4:3f:ff:93:9d:a0:d8:14:2f:6c:0c:e6:f9:90:
         57:03:63:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:48:08 2025 by rpki-client