Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft
File:                     H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft (raw, json)
Hash identifier:          NDuSdZ2XkHPyZSJtMbCZoSWO9yS+VyR7e2hfY8x6FOo=
Subject key identifier:   9E:74:AB:F8:02:9A:6F:19:42:E2:98:31:A4:4C:61:B0:8A:10:DC:0D
Authority key identifier: 1F:4D:CE:34:39:B1:F4:03:5F:FF:8C:71:CE:35:9E:5D:20:E6:9A:24
Certificate issuer:       /CN=A91F8282/serialNumber=1F4DCE3439B1F4035FFF8C71CE359E5D20E69A24
Certificate serial:       76
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/H03ONDmx9ANf_4xxzjWeXSDmmiQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft
Manifest number:          75
Signing time:             Sun 19 Oct 2025 10:11:08 +0000
Manifest this update:     Sun 19 Oct 2025 10:11:07 +0000
Manifest next update:     Sun 26 Oct 2025 10:11:07 +0000
Files and hashes:         1: H03ONDmx9ANf_4xxzjWeXSDmmiQ.crl (hash: VnbbsnL5Pki9WZcnmHNo2xcfSxbBxf8gr3sj0jq7/xE=)
                          2: 0664C974FEF811EFB0C52572C4F9AE02.roa (hash: LMQmjwLQrmdrjw5ITfcjjvXTHrCvldYng4+Bqh2xDu8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.crl
                          rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/H03ONDmx9ANf_4xxzjWeXSDmmiQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 10:11:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118 (0x76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8282, serialNumber=1F4DCE3439B1F4035FFF8C71CE359E5D20E69A24
        Validity
            Not Before: Oct 19 10:11:07 2025 GMT
            Not After : Oct 26 10:11:07 2025 GMT
        Subject: CN=68f4b93c-c288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b0:87:56:f3:ef:8d:a0:a0:91:dd:3f:59:f2:
                    5e:64:2a:47:ad:e2:94:a1:b4:37:ba:81:03:e4:91:
                    21:ed:d2:89:7e:2b:3b:44:b2:c3:82:df:b9:4a:94:
                    09:4d:44:05:19:c0:e0:1c:ef:b1:11:fc:a1:ae:45:
                    76:b9:1a:10:00:90:5e:b7:db:dd:3e:74:9c:ee:00:
                    b5:7f:29:c7:86:60:87:aa:71:06:a2:da:62:94:c8:
                    c7:9b:15:9b:d8:de:28:b2:e4:2d:da:9b:af:5c:be:
                    a3:55:6b:8f:62:fe:69:0f:f1:e3:70:19:08:68:46:
                    79:5b:6c:a4:b6:e2:6a:0f:cc:48:6f:77:8f:e6:09:
                    c0:70:45:c2:3e:1e:d3:9f:1b:8b:98:38:dc:29:79:
                    bf:0e:fe:5e:01:94:6c:64:18:47:70:b7:83:52:76:
                    73:38:3e:f4:03:fa:67:ac:73:e6:a6:b9:eb:be:70:
                    03:5c:9a:24:7d:15:ca:e8:7f:75:c8:fc:59:ee:81:
                    b9:36:64:e9:7f:74:5d:b4:f4:1e:d1:1e:1e:a1:ea:
                    e3:98:f5:80:6e:f1:6b:fd:03:49:00:3b:7b:ec:29:
                    91:16:03:b5:76:c4:4f:01:15:de:f0:66:1f:b8:00:
                    86:3b:f1:aa:77:5e:15:cb:1f:a4:cd:ac:89:4b:f9:
                    5c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:74:AB:F8:02:9A:6F:19:42:E2:98:31:A4:4C:61:B0:8A:10:DC:0D
            X509v3 Authority Key Identifier:
                keyid:1F:4D:CE:34:39:B1:F4:03:5F:FF:8C:71:CE:35:9E:5D:20:E6:9A:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/H03ONDmx9ANf_4xxzjWeXSDmmiQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:3b:53:b0:f6:a7:f6:5d:82:06:57:22:20:c9:2d:7e:69:d7:
         be:3c:99:08:c9:d6:21:7f:5d:19:ae:6d:8d:54:9d:1f:ab:71:
         bd:74:b4:7a:b0:5d:ec:51:42:ed:78:62:69:0c:91:b2:53:05:
         ce:6b:af:df:4d:83:57:cc:d7:31:3f:40:04:46:49:d0:10:11:
         86:ec:c5:73:02:c2:78:b6:09:99:64:ab:0b:1b:29:e3:97:2f:
         80:d9:b3:c5:37:50:0e:db:09:e8:79:0b:e1:50:52:2b:ef:f6:
         1e:b1:ce:54:f5:a6:00:61:59:c2:0f:7b:d0:f7:70:c8:d3:dd:
         a1:e1:b7:fc:03:8f:63:4c:59:fa:f5:55:57:21:cf:e2:c2:d0:
         5a:30:66:d7:2b:a4:e9:ac:5b:37:92:52:2d:5c:e0:fc:82:ac:
         20:27:32:c2:5d:8a:d5:10:32:78:61:e6:06:b4:04:e6:ce:f2:
         e8:01:ba:f9:de:92:4b:ef:6f:e4:8d:66:79:f3:f8:cb:66:57:
         73:40:27:01:23:e0:ee:7d:79:45:2e:52:22:43:72:71:7d:a1:
         15:47:18:58:b4:09:37:9e:1b:93:21:78:a6:80:60:1b:9b:c5:
         30:38:d8:cf:38:62:f8:14:65:0f:92:bc:22:76:c7:f1:f9:d2:
         28:46:75:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:57:25 2025 by rpki-client