Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft
File:                     2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft (raw, json)
Hash identifier:          oPPIJuealnO7srfd+45nxYIw/+yxgiqg0knvTq76Pn0=
Subject key identifier:   F7:5C:82:9D:83:9A:BA:8E:97:1C:A3:D9:D1:15:92:BE:04:DA:A7:48
Authority key identifier: DB:1B:96:E0:5A:98:D8:28:BF:57:EA:0A:71:55:AF:1D:33:22:3E:2C
Certificate issuer:       /CN=A915201D/serialNumber=DB1B96E05A98D828BF57EA0A7155AF1D33223E2C
Certificate serial:       72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft
Manifest number:          70
Signing time:             Sun 19 Oct 2025 10:15:18 +0000
Manifest this update:     Sun 19 Oct 2025 10:15:18 +0000
Manifest next update:     Sun 26 Oct 2025 10:15:18 +0000
Files and hashes:         1: 2xuW4FqY2Ci_V-oKcVWvHTMiPiw.crl (hash: sJ+eTXDFC+gzVtBLgXWyH0iscewPU+y98lv4sdAQk4g=)
                          2: 69AF571603F211F09BC45354C4F9AE02.roa (hash: nN3j+w7rACDpnsAZEw+b0JxCXf8pA/ucgK4YVC62zqE=)
                          3: C0FB557E03F211F08D0A9566C4F9AE02.roa (hash: Dlt7c62t0hDVUYoo7gZi00Rxaa3RUeJ2v+Dxv4EEGtE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.crl
                          rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 10:15:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114 (0x72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915201D, serialNumber=DB1B96E05A98D828BF57EA0A7155AF1D33223E2C
        Validity
            Not Before: Oct 19 10:15:18 2025 GMT
            Not After : Oct 26 10:15:18 2025 GMT
        Subject: CN=68f4ba36-57b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:18:74:68:77:bd:c1:e3:3e:7a:e5:6c:08:bb:
                    42:2c:c9:1f:83:d6:fb:fb:63:50:1c:be:a9:d5:40:
                    b1:bf:40:10:7a:97:ab:0e:f3:f5:30:e9:a0:71:c2:
                    d1:46:42:ad:50:60:2f:6b:4d:c1:06:16:50:57:0e:
                    08:07:1e:94:3e:37:c7:75:49:2d:2a:2a:12:8f:18:
                    7d:b4:b3:ac:5b:4c:0b:2c:be:04:02:80:4d:84:52:
                    bc:f6:41:9c:c6:36:40:2a:7c:2a:68:98:4d:3b:ad:
                    0b:ac:80:cb:ca:9d:9f:a8:97:3c:67:f1:14:d3:0e:
                    a9:1d:74:6f:36:d9:ae:fd:18:06:b8:d9:17:ae:b0:
                    9a:53:4a:fb:99:f2:bb:ac:90:28:9e:3d:e5:fd:bf:
                    6d:40:34:e4:14:99:51:5c:46:30:49:5d:f0:66:e6:
                    cb:6c:88:04:71:0a:d5:2a:4c:95:0b:ca:59:9d:5b:
                    18:73:fe:ae:fc:d0:6d:cd:73:30:c1:13:c4:0d:bf:
                    4a:e6:8c:e9:cc:52:a9:48:1c:c8:3b:0e:d7:ae:9f:
                    37:ee:78:5a:2d:fe:80:9f:1e:a8:ba:65:bc:de:de:
                    ee:52:3b:e3:47:95:99:03:97:bc:79:21:69:bc:4d:
                    97:98:97:4d:e8:c7:05:ec:cb:68:b3:fe:57:bc:f8:
                    7e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:5C:82:9D:83:9A:BA:8E:97:1C:A3:D9:D1:15:92:BE:04:DA:A7:48
            X509v3 Authority Key Identifier:
                keyid:DB:1B:96:E0:5A:98:D8:28:BF:57:EA:0A:71:55:AF:1D:33:22:3E:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:b4:4b:1d:17:9c:45:0c:4a:9f:e8:05:81:8b:ed:0f:89:87:
         8c:ce:30:c7:0c:a6:1d:7b:e9:1a:70:27:2f:35:40:c3:91:89:
         68:ae:c7:30:fa:4f:f4:03:3f:96:02:e9:8a:62:15:5a:00:a8:
         ca:37:07:6b:01:97:5d:43:cd:71:0e:dc:ce:e8:dc:92:09:dd:
         53:11:2e:de:46:46:e3:07:ee:86:0e:8e:c7:6f:6c:87:ec:9e:
         7f:1f:22:76:c1:78:41:74:bb:46:e0:b8:98:67:62:f1:90:98:
         18:04:e8:a2:38:e9:28:ea:07:d4:5e:ef:09:1c:59:2e:5f:cb:
         0c:06:4c:82:f3:fc:cf:e8:c8:a6:c0:a1:c2:c5:5a:37:83:f0:
         ed:41:31:67:1c:68:af:c6:f8:8a:6b:28:68:34:b5:e2:27:13:
         3c:c6:21:99:c9:c4:a6:20:03:b5:15:6c:87:11:36:b8:d7:73:
         c2:52:3b:7b:d3:22:6c:3c:3a:05:72:11:cf:e4:a1:7a:1f:93:
         75:a2:0d:ae:08:92:fd:f3:d8:d4:d8:55:10:11:0c:59:d3:50:
         39:a2:57:09:a4:ab:a2:cb:f2:b8:1e:9f:6a:cc:b3:f5:5d:59:
         bb:32:6e:b9:6d:e7:2c:e5:25:17:79:b1:f0:17:18:88:e9:3c:
         63:34:3d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:10:31 2025 by rpki-client