Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B3AE/C2D054F6CA9311EEA726CC09C4F9AE02/g6pYiXoVH0rLc4TwtV8R7Z164X8.mft
File:                     g6pYiXoVH0rLc4TwtV8R7Z164X8.mft (raw, json)
Hash identifier:          epSsWZnNWW1seuGs1X29iM6Ug+C3WZb8UBdXJ00PZvI=
Subject key identifier:   4C:99:A6:42:50:98:A5:20:FE:B2:6C:9C:29:61:FD:E2:4A:5F:CA:0C
Authority key identifier: 83:AA:58:89:7A:15:1F:4A:CB:73:84:F0:B5:5F:11:ED:9D:7A:E1:7F
Certificate issuer:       /CN=A915B3AE/serialNumber=83AA58897A151F4ACB7384F0B55F11ED9D7AE17F
Certificate serial:       013F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g6pYiXoVH0rLc4TwtV8R7Z164X8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B3AE/C2D054F6CA9311EEA726CC09C4F9AE02/g6pYiXoVH0rLc4TwtV8R7Z164X8.mft
Manifest number:          013C
Signing time:             Fri 17 Oct 2025 07:26:50 +0000
Manifest this update:     Fri 17 Oct 2025 07:26:49 +0000
Manifest next update:     Fri 24 Oct 2025 07:26:49 +0000
Files and hashes:         1: g6pYiXoVH0rLc4TwtV8R7Z164X8.crl (hash: dpRYuYfoq5Hb0+sa3YIdMvc3BU7duAJTSp36WRiroWU=)
                          2: 1AD9E28ECA9411EE9062590AC4F9AE02.roa (hash: ReL28hF+/x2h0RKcTZEQ3GcIbkXQcDw6s6esZ8caJwY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B3AE/C2D054F6CA9311EEA726CC09C4F9AE02/g6pYiXoVH0rLc4TwtV8R7Z164X8.crl
                          rsync://rpki.apnic.net/member_repository/A915B3AE/C2D054F6CA9311EEA726CC09C4F9AE02/g6pYiXoVH0rLc4TwtV8R7Z164X8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g6pYiXoVH0rLc4TwtV8R7Z164X8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Oct 2025 07:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 319 (0x13f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B3AE, serialNumber=83AA58897A151F4ACB7384F0B55F11ED9D7AE17F
        Validity
            Not Before: Oct 17 07:26:49 2025 GMT
            Not After : Oct 24 07:26:49 2025 GMT
        Subject: CN=68f1efba-1604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:45:32:aa:29:c3:6d:98:ed:83:c9:73:7e:81:
                    98:01:10:1a:ed:78:96:bd:2e:b3:6d:e2:9f:7d:55:
                    ff:ae:f9:7a:77:cc:91:82:ec:0c:b9:5e:8a:3f:50:
                    33:13:d3:d1:b9:d2:3b:b4:28:dc:2c:cc:3d:40:a2:
                    57:df:d2:44:5c:42:8d:82:7f:64:2d:96:89:ab:57:
                    fd:e9:b8:20:28:b4:e0:df:72:c6:63:dc:f4:41:8d:
                    65:47:99:25:5e:c1:93:5a:27:bf:5e:42:96:d4:47:
                    57:5c:63:0d:2a:97:b9:fe:d4:1b:a6:93:b2:9e:70:
                    be:ee:f9:49:f8:d3:9d:02:28:9e:61:c1:46:83:36:
                    45:9b:72:1c:2d:b5:51:a7:fd:90:4f:ac:00:04:f4:
                    10:c7:ee:54:d7:8e:4f:56:5b:e9:fd:65:b2:54:51:
                    98:d2:59:81:70:36:e8:13:f5:13:60:d4:e7:8d:53:
                    2b:16:d9:45:a3:43:f1:f6:c4:9b:3d:dc:f9:24:14:
                    98:a4:b0:0c:d0:90:7a:12:88:7e:07:46:0a:8b:b0:
                    30:42:b2:eb:17:32:26:df:62:20:31:20:5f:07:c1:
                    c9:78:87:02:25:06:1a:e0:a1:37:a5:1c:d7:18:b8:
                    2d:b4:28:6c:30:f7:48:d5:48:a7:6f:1b:ce:7b:f6:
                    82:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:99:A6:42:50:98:A5:20:FE:B2:6C:9C:29:61:FD:E2:4A:5F:CA:0C
            X509v3 Authority Key Identifier:
                keyid:83:AA:58:89:7A:15:1F:4A:CB:73:84:F0:B5:5F:11:ED:9D:7A:E1:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B3AE/C2D054F6CA9311EEA726CC09C4F9AE02/g6pYiXoVH0rLc4TwtV8R7Z164X8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g6pYiXoVH0rLc4TwtV8R7Z164X8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B3AE/C2D054F6CA9311EEA726CC09C4F9AE02/g6pYiXoVH0rLc4TwtV8R7Z164X8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:3a:9b:14:11:68:d4:e1:cd:af:81:63:cd:5c:bc:b7:27:c1:
         d7:ca:04:c2:c3:13:48:cf:97:55:be:39:29:b8:91:65:9b:9a:
         2f:ba:ca:52:df:1f:bd:95:6a:20:72:f3:cf:ea:e8:9a:25:34:
         8e:46:27:27:03:85:79:8f:23:f7:b2:d4:ba:12:41:4e:ca:a4:
         de:8f:e1:eb:a3:89:d4:7c:81:4b:c6:60:c7:d6:56:a9:98:e1:
         a3:54:35:ea:e5:7e:05:f8:f4:73:6d:1d:98:26:4b:e2:26:d9:
         86:2f:94:cf:60:24:7b:33:e6:0f:d5:25:c3:19:b4:27:94:d9:
         27:38:5a:f1:b4:89:1a:3f:a7:ca:96:0b:52:04:60:5a:34:0d:
         4e:15:90:a0:b8:17:88:26:15:17:55:95:4e:b3:37:33:d1:eb:
         cb:33:91:3a:16:0c:b7:62:a2:8d:72:11:f9:66:ff:d7:78:77:
         aa:87:a3:c8:b4:7d:33:61:06:eb:74:c9:26:6e:6e:7f:9e:ee:
         f5:46:68:3a:c3:2d:eb:79:62:ff:58:95:7e:c2:1a:69:2a:6f:
         c9:b6:d1:d3:d2:9c:aa:a1:31:3c:8d:76:72:40:a9:0d:ca:b0:
         de:7d:5b:49:4f:c1:54:6b:4f:9d:30:e4:d8:33:bb:e7:46:2e:
         15:75:ad:95
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUIzQUUxMTAvBgNVBAUTKDgzQUE1ODg5N0ExNTFGNEFDQjczODRGMEI1NUYxMUVE
OUQ3QUUxN0YwHhcNMjUxMDE3MDcyNjQ5WhcNMjUxMDI0MDcyNjQ5WjAYMRYwFAYD
VQQDEw02OGYxZWZiYS0xNjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA20UyqinDbZjtg8lzfoGYARAa7XiWvS6zbeKffVX/rvl6d8yRguwMuV6KP1Az
E9PRudI7tCjcLMw9QKJX39JEXEKNgn9kLZaJq1f96bggKLTg33LGY9z0QY1lR5kl
XsGTWie/XkKW1EdXXGMNKpe5/tQbppOynnC+7vlJ+NOdAiieYcFGgzZFm3IcLbVR
p/2QT6wABPQQx+5U145PVlvp/WWyVFGY0lmBcDboE/UTYNTnjVMrFtlFo0Px9sSb
Pdz5JBSYpLAM0JB6Eoh+B0YKi7AwQrLrFzIm32IgMSBfB8HJeIcCJQYa4KE3pRzX
GLgttChsMPdI1UinbxvOe/aCQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEyZpkJQ
mKUg/rJsnClh/eJKX8oMMB8GA1UdIwQYMBaAFIOqWIl6FR9Ky3OE8LVfEe2deuF/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjNBRS9DMkQwNTRGNkNB
OTMxMUVFQTcyNkNDMDlDNEY5QUUwMi9nNnBZaVhvVkgwckxjNFR3dFY4UjdaMTY0
WDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2c2cFlpWG9WSDByTGM0VHd0VjhSN1oxNjRYOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QjNBRS9DMkQwNTRGNkNBOTMxMUVFQTcyNkNDMDlDNEY5QUUwMi9nNnBZaVhvVkgw
ckxjNFR3dFY4UjdaMTY0WDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCOOpsUEWjU4c2vgWPNXLy3J8HXygTCwxNIz5dVvjkpuJFlm5ovuspS
3x+9lWogcvPP6uiaJTSORicnA4V5jyP3stS6EkFOyqTej+Hro4nUfIFLxmDH1lap
mOGjVDXq5X4F+PRzbR2YJkviJtmGL5TPYCR7M+YP1SXDGbQnlNknOFrxtIkaP6fK
lgtSBGBaNA1OFZCguBeIJhUXVZVOszcz0evLM5E6Fgy3YqKNchH5Zv/XeHeqh6PI
tH0zYQbrdMkmbm5/nu71Rmg6wy3reWL/WJV+whppKm/JttHT0pyqoTE8jXZyQKkN
yrDefVtJT8FUa0+dMOTYM7vnRi4Vda2V
-----END CERTIFICATE-----
Generated at Sat Oct 18 23:38:46 2025 by rpki-client