Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.mft
File:                     L904BNZFjq8cs5F7XjMvulxxX5E.mft (raw, json)
Hash identifier:          Gej62Lvi8eM3VNGsXimMsdDNbbkcbA+PM+xACBtLWhU=
Subject key identifier:   CB:CD:43:EA:BF:58:99:ED:A4:FE:3B:C5:6D:BA:66:93:A8:74:0F:D4
Authority key identifier: 2F:DD:38:04:D6:45:8E:AF:1C:B3:91:7B:5E:33:2F:BA:5C:71:5F:91
Certificate issuer:       /CN=A915B551/serialNumber=2FDD3804D6458EAF1CB3917B5E332FBA5C715F91
Certificate serial:       52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L904BNZFjq8cs5F7XjMvulxxX5E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.mft
Manifest number:          51
Signing time:             Wed 17 Sep 2025 08:00:07 +0000
Manifest this update:     Wed 17 Sep 2025 08:00:06 +0000
Manifest next update:     Wed 24 Sep 2025 08:00:06 +0000
Files and hashes:         1: L904BNZFjq8cs5F7XjMvulxxX5E.crl (hash: mE93ffztmcLXUZGxVTTaEA3VuIJlGlt/FVejI8x+4ko=)
                          2: DE917E7016C511F085B4FF6FC4F9AE02.roa (hash: gTUMCdfGUWrs1q6ayMOBwf36vGkRjWbK2xqTfFcnmzw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.crl
                          rsync://rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L904BNZFjq8cs5F7XjMvulxxX5E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Sep 2025 08:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82 (0x52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B551, serialNumber=2FDD3804D6458EAF1CB3917B5E332FBA5C715F91
        Validity
            Not Before: Sep 17 08:00:06 2025 GMT
            Not After : Sep 24 08:00:06 2025 GMT
        Subject: CN=68ca6a86-ae9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:49:8a:b2:8e:4d:b9:c0:49:cf:80:17:44:2f:
                    e9:93:b2:d8:65:60:28:4a:6a:94:be:6e:fe:47:ad:
                    85:b6:34:1b:21:17:fc:cf:87:5b:a2:1d:f3:2d:38:
                    43:ea:b0:7d:73:27:24:76:c3:4f:c9:b6:44:fb:e8:
                    28:37:1a:1d:47:be:9c:9e:fb:2d:0d:2a:56:70:bf:
                    19:b9:9e:ef:9e:bb:e3:8f:02:fe:98:fb:95:a2:2f:
                    be:e4:e4:b7:78:fd:b6:64:89:92:7f:cb:7a:65:bb:
                    ef:dc:79:12:f1:34:41:30:a4:71:a0:08:5c:0a:9b:
                    a8:1c:52:77:36:07:21:29:dd:eb:60:26:80:9d:6e:
                    fa:db:14:01:0a:6b:0d:93:b0:e5:57:ab:fa:ee:9e:
                    5d:57:9e:f6:86:c2:00:11:57:24:fa:4e:53:53:8a:
                    b4:27:a1:cb:02:54:fa:82:b6:c2:93:a9:9f:f2:f5:
                    58:78:f5:31:d6:04:ad:1e:b9:5e:ee:e2:c4:5f:ca:
                    cb:1c:8e:ef:0a:54:8c:93:86:11:30:02:67:98:aa:
                    75:52:63:95:bc:a7:37:56:cc:a2:f6:41:38:12:04:
                    1e:84:f0:6c:b6:01:f4:3b:75:df:d7:ea:c9:74:a0:
                    3a:b9:b0:de:67:a3:9d:55:e1:12:fb:6e:b6:f3:33:
                    f3:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:CD:43:EA:BF:58:99:ED:A4:FE:3B:C5:6D:BA:66:93:A8:74:0F:D4
            X509v3 Authority Key Identifier:
                keyid:2F:DD:38:04:D6:45:8E:AF:1C:B3:91:7B:5E:33:2F:BA:5C:71:5F:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L904BNZFjq8cs5F7XjMvulxxX5E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:ae:49:fd:f5:81:63:f5:7a:65:33:89:75:72:8e:be:de:f3:
         2d:8b:f1:91:6b:0a:bf:53:3a:a6:3a:e6:31:d9:d6:2b:65:11:
         1a:a7:03:5a:05:e7:a8:91:97:d0:48:e4:5e:b3:5d:db:80:13:
         b9:c7:ff:72:23:5b:de:3b:c2:70:a0:98:ff:ec:e7:06:70:db:
         d5:b3:6d:d0:fb:af:62:1e:2d:f4:0a:f9:c1:58:77:3a:c3:68:
         29:15:78:5c:73:02:bc:8d:73:56:0b:6f:57:dd:89:19:b0:cc:
         c6:1d:5f:04:70:f6:d3:68:cc:bd:77:71:f8:fa:ea:e1:f3:15:
         41:37:f6:5f:26:c7:17:8a:16:0e:ca:8c:ee:47:f8:0a:28:14:
         f3:4b:8b:64:85:47:b1:71:15:c6:ce:5d:9a:f7:ed:e0:d7:06:
         c7:40:c7:ee:a8:17:29:4f:f1:b0:5c:a1:6d:b9:e2:91:60:81:
         9b:7b:5a:c5:42:5d:c1:86:27:e0:96:af:ac:c8:e0:9d:0a:e0:
         53:9c:ba:a7:24:4d:64:c0:33:f7:32:3c:96:f8:b4:db:4d:a7:
         c0:cc:95:0e:74:2a:85:0f:6f:80:19:bb:ec:32:90:64:eb:a6:
         6e:8b:5c:10:21:d3:22:0b:bd:d6:dc:ca:b1:5f:0f:b7:9d:27:
         35:9d:f9:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 20:32:35 2025 by rpki-client