Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft
File:                     FfB_78oF6EbUU4USXou0J3WDAPk.mft (raw, json)
Hash identifier:          O7wIC1awa2DxDQzo/PlxbuInYcU2Xm6cShIKGWXsIFA=
Subject key identifier:   C4:8A:3A:7C:DB:85:7B:43:2B:F2:82:AC:01:DF:48:77:10:E5:F0:2F
Authority key identifier: 15:F0:7F:EF:CA:05:E8:46:D4:53:85:12:5E:8B:B4:27:75:83:00:F9
Certificate issuer:       /CN=A91503BB/serialNumber=15F07FEFCA05E846D45385125E8BB427758300F9
Certificate serial:       0BF1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfB_78oF6EbUU4USXou0J3WDAPk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft
Manifest number:          0BEA
Signing time:             Thu 18 Sep 2025 19:02:28 +0000
Manifest this update:     Thu 18 Sep 2025 19:02:27 +0000
Manifest next update:     Thu 25 Sep 2025 19:02:27 +0000
Files and hashes:         1: FfB_78oF6EbUU4USXou0J3WDAPk.crl (hash: Qz7812fE10/slj4VWymuaF3+1T4L3bm03ImUaB3dKoY=)
                          2: FC90C520213411EA8D675645C4F9AE02.roa (hash: bfvf5p0RJyl+DBh15oeIU1R+cb9fxOcLHABt0IlZccM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.crl
                          rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfB_78oF6EbUU4USXou0J3WDAPk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Sep 2025 19:02:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3057 (0xbf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91503BB, serialNumber=15F07FEFCA05E846D45385125E8BB427758300F9
        Validity
            Not Before: Sep 18 19:02:27 2025 GMT
            Not After : Sep 25 19:02:27 2025 GMT
        Subject: CN=68cc5743-e73b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:60:fc:e9:d1:99:8f:d6:96:ee:b5:3a:0f:89:
                    df:7c:0d:be:06:78:65:fd:aa:cd:5d:6d:d4:1c:d6:
                    d7:76:82:e9:ea:ae:a4:6b:a2:0c:97:33:c4:f9:59:
                    c3:89:44:c2:9c:0f:78:df:71:ec:8c:cf:9e:89:11:
                    fd:19:65:47:ea:83:33:a7:05:00:3f:21:24:33:e3:
                    45:1a:aa:75:6e:85:56:94:58:37:41:0e:77:da:8d:
                    90:bb:b2:e8:4c:18:2d:fb:19:ac:2c:9f:db:06:65:
                    4a:3a:55:7f:8e:30:1f:96:35:68:3a:ef:c9:02:60:
                    1f:72:43:ef:b3:75:96:34:5d:50:17:1b:69:0e:c5:
                    0e:7f:45:04:23:28:dc:51:e4:4c:bb:19:29:36:ae:
                    8d:54:19:b4:bd:98:b7:0f:1c:8f:f1:24:26:83:a3:
                    d2:60:7f:7e:2f:86:9b:7e:a7:0a:6f:5e:5d:91:23:
                    f7:25:6d:b4:02:e5:52:f8:ca:90:30:95:95:fe:62:
                    6f:69:1d:65:c9:ba:8e:d4:05:c6:57:4a:6b:70:d6:
                    db:25:03:58:10:bf:54:df:d9:12:e7:76:e4:86:c5:
                    02:57:c5:43:8f:88:6a:9c:ca:ea:8d:96:5f:92:6b:
                    08:ee:bb:23:0a:e1:35:d3:ae:b6:89:c6:a7:cf:34:
                    3e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:8A:3A:7C:DB:85:7B:43:2B:F2:82:AC:01:DF:48:77:10:E5:F0:2F
            X509v3 Authority Key Identifier:
                keyid:15:F0:7F:EF:CA:05:E8:46:D4:53:85:12:5E:8B:B4:27:75:83:00:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfB_78oF6EbUU4USXou0J3WDAPk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:38:ee:aa:3b:2d:63:95:0a:c8:e3:ad:c7:da:df:5e:0b:ee:
         c1:7c:23:9c:df:73:d6:55:23:60:97:f6:f2:e4:32:cd:c8:54:
         7c:ef:55:d0:61:27:49:37:4e:67:f4:28:67:02:4a:b2:4f:97:
         33:07:82:55:96:fb:99:35:b8:02:ce:ae:65:a6:c4:45:f4:57:
         3f:cd:75:8e:13:cb:34:c7:a9:39:06:81:c8:91:12:6e:36:18:
         1d:01:05:52:20:39:48:59:59:ed:71:e1:d2:16:dc:98:b3:60:
         37:a5:b3:b8:fa:ae:0f:30:04:5c:a6:75:61:8f:4c:31:ba:63:
         12:2d:53:47:4d:9b:5c:c4:c0:72:6f:a8:3b:38:09:89:10:49:
         eb:ce:d8:f2:08:df:28:43:93:54:54:e2:69:20:5b:a5:b6:81:
         b5:e3:0f:0b:60:62:0b:fe:fe:37:61:1d:a1:e9:61:40:63:15:
         56:04:4f:0d:72:44:e1:7d:f7:56:09:bb:e1:cb:b7:fa:2a:47:
         19:ef:5e:77:f3:ae:32:6c:26:8c:6b:1f:b5:fc:3f:fb:07:a6:
         2f:1f:c5:c4:85:fa:44:e8:87:ea:ab:49:f6:cd:f3:52:6a:78:
         b0:6f:a6:a2:07:19:2e:51:d9:44:1c:8c:0c:2c:07:8b:63:f1:
         bd:b8:2a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 02:49:06 2025 by rpki-client