Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/0ueOUsXby_XhhB2s5SeuqolKmnY.mft
File:                     0ueOUsXby_XhhB2s5SeuqolKmnY.mft (raw, json)
Hash identifier:          jb5xQ9hgn37KXs2e2TVf3e8mbgjlmouIv/Lwh+HTgpE=
Subject key identifier:   86:DC:95:80:A9:DA:25:F1:CA:38:55:BA:3A:85:2B:FC:E0:5C:26:62
Authority key identifier: D2:E7:8E:52:C5:DB:CB:F5:E1:84:1D:AC:E5:27:AE:AA:89:4A:9A:76
Certificate issuer:       /CN=A91262BD/serialNumber=D2E78E52C5DBCBF5E1841DACE527AEAA894A9A76
Certificate serial:       0682
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ueOUsXby_XhhB2s5SeuqolKmnY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/0ueOUsXby_XhhB2s5SeuqolKmnY.mft
Manifest number:          0672
Signing time:             Sat 25 Oct 2025 00:07:42 +0000
Manifest this update:     Sat 25 Oct 2025 00:07:41 +0000
Manifest next update:     Sat 01 Nov 2025 00:07:41 +0000
Files and hashes:         1: 0ueOUsXby_XhhB2s5SeuqolKmnY.crl (hash: rZ6k24AL9ljo11n1rxSniTZus5ykV2OFZHFCfIA/awM=)
                          2: D0A31DDC8E6011EC93F6710FC4F9AE02.roa (hash: 56SXWg9vgGgESxFQOAJJzB+wTF1OQoT0wNilbJGbabc=)
                          3: CFD605CC8E6011EC93F6710FC4F9AE02.roa (hash: s1rfV8r68HE4TuansWzDnqISJzRH7RjJXWNUpk6BVJU=)
                          4: D19ABBB48E6011EC93F6710FC4F9AE02.roa (hash: 2Y9C9KiNax/FdL7eQM2hCoTzZKyNjRhe4AuCRgLGZn4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/0ueOUsXby_XhhB2s5SeuqolKmnY.crl
                          rsync://rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/0ueOUsXby_XhhB2s5SeuqolKmnY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ueOUsXby_XhhB2s5SeuqolKmnY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 01 Nov 2025 00:07:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1666 (0x682)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262BD, serialNumber=D2E78E52C5DBCBF5E1841DACE527AEAA894A9A76
        Validity
            Not Before: Oct 25 00:07:41 2025 GMT
            Not After : Nov  1 00:07:41 2025 GMT
        Subject: CN=68fc14ce-8dc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:88:cb:5e:7c:7a:ca:6a:b8:16:6d:b3:8c:34:
                    24:dd:99:fe:62:01:8e:6d:86:e2:bf:a3:0b:71:92:
                    40:c4:40:c8:8c:a1:c4:8f:ed:b2:d8:e0:05:58:9a:
                    28:46:7d:bf:99:48:95:bf:3e:b6:ca:6e:27:68:0f:
                    08:d5:a5:cd:b8:65:45:54:35:dd:cd:78:40:79:96:
                    92:25:e8:17:b7:f7:fa:b1:0a:1c:08:0b:50:1a:95:
                    dd:b5:7f:80:c8:02:c8:c7:2d:48:9a:09:0f:a8:47:
                    7b:34:d3:bd:78:3c:19:c5:cf:6e:ac:32:11:60:6b:
                    66:5a:8f:a5:a4:af:24:9b:65:0b:8d:62:08:7a:80:
                    b4:88:73:6b:61:f1:68:ed:51:06:f3:5e:60:df:12:
                    e7:ca:fa:a3:15:6d:e8:89:e2:b6:b0:1c:61:97:ce:
                    bf:a6:66:6f:e4:7b:f2:be:a1:b6:01:2d:c1:33:47:
                    cd:23:18:08:12:56:5d:00:c0:c8:37:b5:34:31:10:
                    ed:9e:8b:84:5c:55:22:0a:0d:be:c8:ff:54:8b:39:
                    3e:0d:60:17:91:78:67:1f:f7:98:66:8e:86:8e:27:
                    ec:f5:98:cd:20:62:40:32:e9:7a:7a:02:a3:19:1a:
                    cb:14:e0:98:6e:3c:c4:a0:5e:da:01:2e:30:36:b1:
                    d3:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:DC:95:80:A9:DA:25:F1:CA:38:55:BA:3A:85:2B:FC:E0:5C:26:62
            X509v3 Authority Key Identifier:
                keyid:D2:E7:8E:52:C5:DB:CB:F5:E1:84:1D:AC:E5:27:AE:AA:89:4A:9A:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/0ueOUsXby_XhhB2s5SeuqolKmnY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ueOUsXby_XhhB2s5SeuqolKmnY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/0ueOUsXby_XhhB2s5SeuqolKmnY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:fc:0d:a4:16:84:cd:0f:77:37:d0:64:31:f8:30:6b:78:87:
         e9:38:39:8e:5c:62:98:05:2c:0f:ad:c4:c1:04:e0:d1:f6:85:
         13:15:4b:06:1c:3a:dc:f6:57:27:ef:18:63:29:58:ba:7e:44:
         57:0a:8f:ac:4b:23:4d:d0:a5:dc:08:b9:3d:88:b6:f7:57:43:
         62:e3:15:21:68:41:33:39:67:d4:69:58:b1:78:b5:25:e3:e6:
         8b:d2:b2:06:fc:e9:0b:b9:02:62:b2:d8:87:32:73:89:68:46:
         ab:17:67:1e:73:cf:a9:c5:d1:68:94:f7:92:d6:e1:fa:f0:2b:
         bd:a3:9e:96:ed:48:5c:c9:02:bf:ea:9b:b0:63:73:c1:ed:d6:
         3a:63:0b:9d:9a:3e:6d:67:b3:29:58:15:b6:ca:95:31:94:ee:
         3e:b5:7e:7e:6b:35:6e:1b:4f:15:97:10:5c:c8:58:d0:d4:67:
         af:40:91:3c:3d:d3:da:9e:00:72:ab:ce:fd:89:12:60:e4:cc:
         c1:ca:6e:68:da:95:71:0f:4c:42:df:40:40:05:8e:60:e6:4a:
         54:ae:ca:df:e4:97:6b:ca:c1:d2:c2:fd:76:90:e2:83:4d:81:
         9f:89:38:d3:12:ef:94:e3:db:c7:f8:9c:ab:82:35:37:23:f0:
         b5:dc:53:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 17:42:02 2025 by rpki-client