Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.mft
File:                     39w62zPKqFke-vJ3bDsMVWwIorY.mft (raw, json)
Hash identifier:          agX084R9TJENLkLIpBSWdPvlIAWM3U09/FIKlS5y71w=
Subject key identifier:   7B:38:77:FF:01:E7:95:11:CB:4C:D2:5C:8C:EA:DF:DB:93:BD:53:9A
Authority key identifier: DF:DC:3A:DB:33:CA:A8:59:1E:FA:F2:77:6C:3B:0C:55:6C:08:A2:B6
Certificate issuer:       /CN=A915B5B1/serialNumber=DFDC3ADB33CAA8591EFAF2776C3B0C556C08A2B6
Certificate serial:       03AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.mft
Manifest number:          0380
Signing time:             Mon 03 Nov 2025 00:56:14 +0000
Manifest this update:     Mon 03 Nov 2025 00:56:13 +0000
Manifest next update:     Mon 10 Nov 2025 00:56:13 +0000
Files and hashes:         1: 39w62zPKqFke-vJ3bDsMVWwIorY.crl (hash: pNb430gTxULuGavPQeyaI4brD8bhuE2rbRxYnk3blK8=)
                          2: C05125CC678F11EFA63C404CC4F9AE02.roa (hash: ZYAh/gwuXCu7E/Q2FaIlQuRJqUbt0BTDxqZaA+sc86E=)
                          3: 3CDB97F6B03911F09A54BE60C4F9AE02.roa (hash: 6SWqHXnqIzuEPf5esMyFHKpdKbE+6wQV4YrBSsNPMq0=)
                          4: A07DBC62B03911F083346261C4F9AE02.roa (hash: EDobCAZFBGKOU5DazXWApk+QjAwkkGRuH0JD5kFy8s4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.crl
                          rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 00:56:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 939 (0x3ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B5B1, serialNumber=DFDC3ADB33CAA8591EFAF2776C3B0C556C08A2B6
        Validity
            Not Before: Nov  3 00:56:13 2025 GMT
            Not After : Nov 10 00:56:13 2025 GMT
        Subject: CN=6907fdae-9213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:35:a2:3f:0f:a5:d8:f5:63:ab:7d:8f:00:34:
                    22:7e:9d:82:53:65:93:f1:99:d7:f5:39:06:a1:31:
                    3b:5b:95:ce:43:fb:24:01:13:0d:43:0d:c9:a3:6c:
                    3b:09:29:88:10:16:59:b3:94:37:ac:e8:ba:06:f9:
                    e4:e8:ed:f8:f1:76:e2:77:3c:07:bd:13:ea:98:5e:
                    a0:8e:00:35:11:06:21:67:fa:4b:13:38:17:b2:d6:
                    df:07:ac:e4:92:f1:32:7d:c5:ca:34:a0:fe:03:c1:
                    d4:e4:0a:5a:ea:9b:bd:58:30:0b:f6:53:f0:d7:5b:
                    e2:8a:ea:3a:b8:05:8a:26:b4:e3:f3:dc:4e:27:74:
                    23:33:a8:98:87:c9:1c:dd:8e:36:16:3b:36:b2:83:
                    c3:c5:e4:99:28:71:e3:a8:d9:50:c2:5d:bb:ae:5a:
                    ee:ed:da:82:9c:3c:4b:67:9b:d3:38:06:48:00:b8:
                    16:09:f4:ed:69:56:c6:0e:17:94:00:ae:0e:ae:66:
                    5b:94:59:92:4d:73:6c:f4:c0:2f:11:82:93:d0:c3:
                    f3:d3:e3:31:1a:39:09:06:6d:95:31:dc:78:20:22:
                    01:8d:7a:af:ba:92:f2:44:45:6a:15:22:39:83:7f:
                    dc:4a:c9:3f:e0:c6:7e:1f:f6:16:75:30:95:6a:ca:
                    ce:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:38:77:FF:01:E7:95:11:CB:4C:D2:5C:8C:EA:DF:DB:93:BD:53:9A
            X509v3 Authority Key Identifier:
                keyid:DF:DC:3A:DB:33:CA:A8:59:1E:FA:F2:77:6C:3B:0C:55:6C:08:A2:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:de:c5:a6:49:ba:c9:f4:ef:e5:30:8c:f1:55:6b:fa:48:e5:
         96:7a:f7:05:34:40:b2:cf:1d:ed:41:03:7e:5a:13:1d:7f:ba:
         07:f7:23:cb:b8:e0:cf:00:c4:00:c0:64:b1:31:c7:89:6e:9c:
         5a:d3:b6:76:64:a2:06:d5:7a:eb:99:bd:ae:2a:a7:c3:aa:91:
         06:63:75:cd:f2:a4:61:0c:e1:8d:ad:a1:50:5f:38:2b:1c:7a:
         fe:ee:fd:77:5f:67:c5:05:ec:16:34:16:aa:cd:64:0e:d0:0b:
         1a:57:50:49:8f:1b:72:a5:54:82:f8:ee:96:41:73:81:e3:07:
         43:2c:ff:e3:c9:31:38:88:e3:9e:09:60:dd:f5:ae:93:d5:62:
         7a:18:93:3b:f1:3a:6b:b0:49:d9:22:ef:60:53:f3:44:93:fb:
         48:3a:95:a7:0e:b9:72:ea:46:de:50:2a:54:2e:dd:87:4a:df:
         c1:6e:98:61:f0:f3:1f:82:bc:24:76:09:1c:f2:ea:39:e8:2d:
         28:b0:88:7f:3c:5c:86:16:fa:64:10:db:84:85:f6:54:82:9e:
         93:aa:1b:de:72:c3:b3:40:ed:9a:a0:b0:14:a0:59:18:a1:00:
         3c:7d:e3:00:ca:1a:41:b7:94:39:5b:75:65:8f:fa:91:a2:71:
         58:41:b1:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 08:33:12 2025 by rpki-client