Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft
File:                     p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft (raw, json)
Hash identifier:          Q+9x6dbwF+bduoYR7lY3n3oT6f6LhRUyf6bHVQiRLFc=
Subject key identifier:   1A:5C:EE:33:4A:7F:AF:36:E0:0C:6D:98:45:5C:ED:31:02:A3:65:2A
Authority key identifier: A7:41:EB:41:0D:4B:8E:46:FF:48:AB:70:A1:DA:00:6A:3D:CF:41:A3
Certificate issuer:       /CN=A912CED3/serialNumber=A741EB410D4B8E46FF48AB70A1DA006A3DCF41A3
Certificate serial:       0111
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft
Manifest number:          0106
Signing time:             Tue 07 Oct 2025 05:22:21 +0000
Manifest this update:     Tue 07 Oct 2025 05:22:20 +0000
Manifest next update:     Tue 14 Oct 2025 05:22:20 +0000
Files and hashes:         1: p0HrQQ1Ljkb_SKtwodoAaj3PQaM.crl (hash: owzMA/jr2K16XVx1jCj4D13b4Repz3zs1lkBqSaEy9o=)
                          2: 9D979510990811F08B636355C4F9AE02.roa (hash: fmt9GCF+NE5a4tBRcGx8QWY/xoQMCska/8q7Y4AZLk0=)
                          3: E4EF69C0990711F082A24D54C4F9AE02.roa (hash: Y5663ZSlYh4a1sHc+ifDv616wTEz+ig5EfqmEvk1Bfw=)
                          4: 28E64612990811F09EE9C754C4F9AE02.roa (hash: FLkuh9f3OcXcBtbzCjm/PN/DthDSBx5c67ZjVgxH7Zc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.crl
                          rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Oct 2025 05:22:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 273 (0x111)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912CED3, serialNumber=A741EB410D4B8E46FF48AB70A1DA006A3DCF41A3
        Validity
            Not Before: Oct  7 05:22:20 2025 GMT
            Not After : Oct 14 05:22:20 2025 GMT
        Subject: CN=68e4a38c-7491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a8:54:da:e9:9b:da:0b:b7:a2:56:e7:ca:ad:
                    5e:5e:80:ed:9a:c7:ae:06:83:22:b8:d3:73:3c:a6:
                    01:14:6b:60:df:e1:1f:eb:5c:be:4f:3e:c1:6d:2e:
                    43:93:02:57:27:c0:b8:8f:ca:53:fc:eb:bf:6f:11:
                    9f:23:82:19:23:f5:e8:6a:fe:ce:ec:5f:b3:4a:f5:
                    9f:f9:3f:94:2a:50:a9:52:b5:24:8c:1b:fc:81:f4:
                    1e:f2:56:b4:52:21:80:38:0d:68:d2:05:9c:1f:f6:
                    d0:42:fb:08:e9:4e:c9:00:93:86:bb:86:53:f7:b0:
                    3c:17:c0:8b:b4:85:27:8e:26:df:c0:21:93:b3:d7:
                    34:94:3e:8c:e7:87:3d:e0:05:fb:71:3c:fa:86:3a:
                    69:77:2e:a5:5b:9c:73:97:a5:0a:20:44:1d:59:e0:
                    57:3f:f8:2a:6f:2d:5d:69:d6:5d:8a:50:88:ac:db:
                    15:dc:b9:cf:52:c2:19:0b:2b:a5:7b:a1:50:dc:1d:
                    ca:2a:e4:93:29:05:08:77:60:f3:4f:52:56:e2:24:
                    1c:39:e4:72:b8:dc:bb:3f:90:d7:3a:21:a2:a7:43:
                    60:36:66:af:b4:84:2d:dd:a0:10:a3:4c:5f:29:dd:
                    ac:43:ce:06:3c:e2:82:5e:9f:c7:9b:39:ba:81:f2:
                    55:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:5C:EE:33:4A:7F:AF:36:E0:0C:6D:98:45:5C:ED:31:02:A3:65:2A
            X509v3 Authority Key Identifier:
                keyid:A7:41:EB:41:0D:4B:8E:46:FF:48:AB:70:A1:DA:00:6A:3D:CF:41:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:6c:55:25:62:ce:86:66:e3:fd:1b:64:37:d1:bf:36:ed:89:
         e0:43:b4:ff:6c:56:ff:00:8a:45:1f:e5:fa:8e:82:e0:63:0f:
         f3:ed:13:c5:ee:fd:0c:58:d2:80:31:ce:7a:d8:84:b7:a3:d1:
         08:b5:4b:39:fe:4e:ce:f4:82:3c:a4:1d:3c:63:9b:53:23:28:
         0e:ca:9b:ab:c9:07:0f:01:88:d0:ac:da:b3:e0:be:11:47:95:
         dc:b1:38:ea:49:87:59:02:84:ff:ae:aa:6e:5b:92:c9:c3:d3:
         dd:b9:29:de:a7:7f:22:31:6a:70:a9:23:63:5b:46:ed:44:22:
         10:85:54:96:79:d0:6a:c5:18:d3:15:e8:7f:a7:db:0e:95:54:
         82:5b:14:65:b7:f8:b2:42:d8:c9:37:07:16:d3:42:b8:fe:88:
         df:d3:f8:95:13:78:9c:85:69:d2:78:5d:82:31:19:4d:0e:2f:
         7a:8a:0f:64:c9:70:d1:5c:a8:8d:5e:7a:8e:17:e9:38:ab:82:
         c3:d5:11:01:5d:00:f7:27:c6:62:e8:cd:bc:a9:19:3b:82:ab:
         21:2f:2d:e3:80:6c:98:1e:7a:3c:1c:3c:1f:b2:3d:94:69:e9:
         4d:8d:3c:65:14:68:fe:e1:76:00:a3:48:be:d5:24:a1:74:7a:
         b7:24:93:f0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkNFRDMxMTAvBgNVBAUTKEE3NDFFQjQxMEQ0QjhFNDZGRjQ4QUI3MEExREEwMDZB
M0RDRjQxQTMwHhcNMjUxMDA3MDUyMjIwWhcNMjUxMDE0MDUyMjIwWjAYMRYwFAYD
VQQDEw02OGU0YTM4Yy03NDkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy6hU2umb2gu3olbnyq1eXoDtmseuBoMiuNNzPKYBFGtg3+Ef61y+Tz7BbS5D
kwJXJ8C4j8pT/Ou/bxGfI4IZI/Xoav7O7F+zSvWf+T+UKlCpUrUkjBv8gfQe8la0
UiGAOA1o0gWcH/bQQvsI6U7JAJOGu4ZT97A8F8CLtIUnjibfwCGTs9c0lD6M54c9
4AX7cTz6hjppdy6lW5xzl6UKIEQdWeBXP/gqby1dadZdilCIrNsV3LnPUsIZCyul
e6FQ3B3KKuSTKQUId2DzT1JW4iQcOeRyuNy7P5DXOiGip0NgNmavtIQt3aAQo0xf
Kd2sQ84GPOKCXp/Hmzm6gfJVswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBpc7jNK
f6824AxtmEVc7TECo2UqMB8GA1UdIwQYMBaAFKdB60ENS45G/0ircKHaAGo9z0Gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0VEMy8zQzE2MUZBNjIx
NkMxMUVGODBCMTUzMkJDNEY5QUUwMi9wMEhyUVExTGprYl9TS3R3b2RvQWFqM1BR
YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3AwSHJRUTFMamtiX1NLdHdvZG9BYWozUFFhTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
Q0VEMy8zQzE2MUZBNjIxNkMxMUVGODBCMTUzMkJDNEY5QUUwMi9wMEhyUVExTGpr
Yl9TS3R3b2RvQWFqM1BRYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBKbFUlYs6GZuP9G2Q30b827YngQ7T/bFb/AIpFH+X6joLgYw/z7RPF
7v0MWNKAMc562IS3o9EItUs5/k7O9II8pB08Y5tTIygOypuryQcPAYjQrNqz4L4R
R5XcsTjqSYdZAoT/rqpuW5LJw9PduSnep38iMWpwqSNjW0btRCIQhVSWedBqxRjT
Feh/p9sOlVSCWxRlt/iyQtjJNwcW00K4/ojf0/iVE3ichWnSeF2CMRlNDi96ig9k
yXDRXKiNXnqOF+k4q4LD1REBXQD3J8Zi6M28qRk7gqshLy3jgGyYHno8HDwfsj2U
aelNjTxlFGj+4XYAo0i+1SShdHq3JJPw
-----END CERTIFICATE-----
Generated at Wed Oct 8 23:40:17 2025 by rpki-client