Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.mft
File:                     UPIOqel1rkxMhmfLV_e89XAhXJY.mft (raw, json)
Hash identifier:          lgHWfWY3qvEwtc6QlVkjU8QnW4g/sSGF012KDoC6XnA=
Subject key identifier:   2F:B8:29:A3:CA:FB:C9:71:71:ED:9B:C4:3F:5B:28:04:36:C6:A1:78
Authority key identifier: 50:F2:0E:A9:E9:75:AE:4C:4C:86:67:CB:57:F7:BC:F5:70:21:5C:96
Certificate issuer:       /CN=A915C62B/serialNumber=50F20EA9E975AE4C4C8667CB57F7BCF570215C96
Certificate serial:       250E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.mft
Manifest number:          248C
Signing time:             Wed 22 Oct 2025 03:49:34 +0000
Manifest this update:     Wed 22 Oct 2025 03:49:30 +0000
Manifest next update:     Wed 29 Oct 2025 03:49:30 +0000
Files and hashes:         1: UPIOqel1rkxMhmfLV_e89XAhXJY.crl (hash: CE0Rz8GZmwNSEQ+I97bnpXLfNQaCAeV31uAqqbA3F7s=)
                          2: 773D7A96B0DC11ECAEC09469C4F9AE02.roa (hash: +WC2UXiXRAqIzHn7ONEYWXHBgmbJbPnjPVSGS0s7/Ek=)
                          3: D327C18CDFEC11ED9AB6E147C4F9AE02.roa (hash: 3InFcZXcKxf33f9FWszWBOSOPJdwVMTqcXaCFEAtgos=)
                          4: B8951CDCD23611EA8D9E515BC4F9AE02.roa (hash: wpRpc+8U0njhNHbGwBjOo+RuZgkwEeZa9Pqu3yMunD4=)
                          5: E706A8B2BBF111EE8697E433C4F9AE02.roa (hash: FnsiPBdxFnP5LQukQVG3d42mA5484m2AVmj3oV2t2KA=)
                          6: 1A2298A2D23811EABDECA85FC4F9AE02.roa (hash: 1/+DL1PoqH8yBHyNvZhkg16rUz6sOO89hqHUzOVSkA4=)
                          7: 491B85B2E58911ED94960F39C4F9AE02.roa (hash: RyOHGCTj0hywUpSfB0LbQFD/WnXHLiXqG6hMldKxBrM=)
                          8: 06239EBADFEA11ED835B4D0EC4F9AE02.roa (hash: P7O96Yfngs36i1Yso6tRUdR0UTcCnWvkqMzJTMS0hUc=)
                          9: 59B3485028C111E7A885571AC4F9AE02.roa (hash: MyX6SM4sHZHxsdiUbFwM+v8VFzTqS7OCLLsMP0uCrow=)
                          10: 554E53D4B0B811EC9BE93E24C4F9AE02.roa (hash: VUsFSPTS+fH+FbOaolmzdGMNrxq1DeJRsMnTavDc/kM=)
                          11: 5A2BB4DE28C111E7A885571AC4F9AE02.roa (hash: T2OA6la6kiD43UxKezGsuNIwVX4A5ubar9PjrFa2VdE=)
                          12: D451FBE0DFEC11ED9AB6E147C4F9AE02.roa (hash: 36bNWyq826on2XLU7og/PScQxw0sLluCdj62sCimk1k=)
                          13: D50024D6DFEC11ED9AB6E147C4F9AE02.roa (hash: hn226uuDr+Sb6ocn2sePSMCB9luhKNckDxMjXkyTZ+s=)
                          14: AFF73BD2BA0811EAB2479081C4F9AE02.roa (hash: uGRoaBEpGo4yAmtbgi1VOwtzxczgF1r1S032AP+3DGc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.crl
                          rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Oct 2025 03:49:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9486 (0x250e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C62B, serialNumber=50F20EA9E975AE4C4C8667CB57F7BCF570215C96
        Validity
            Not Before: Oct 22 03:49:30 2025 GMT
            Not After : Oct 29 03:49:30 2025 GMT
        Subject: CN=68f8544b-3f65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:60:e2:94:c9:3f:e9:cb:4f:2d:79:e4:44:b8:
                    fd:cc:72:42:3f:a4:d6:b3:ea:00:07:af:45:4c:17:
                    1f:2b:bb:9c:97:83:d2:a1:a4:35:80:98:61:9a:7b:
                    ac:c0:e4:43:8c:d4:43:2a:cb:36:1f:5e:b5:28:5c:
                    56:b2:5f:2f:6b:ec:93:fb:d6:ca:48:d5:4c:7e:d8:
                    25:ca:57:dc:46:c0:0a:63:59:a2:61:6b:d5:45:34:
                    c3:19:58:46:a5:07:01:73:e3:c6:a2:f9:f9:b6:ac:
                    72:b7:ba:38:e3:94:bf:9b:c9:56:8f:50:43:c0:af:
                    f8:3d:f9:ca:cf:af:4e:54:24:78:b9:c1:ae:a6:19:
                    09:10:49:3c:66:ac:2c:20:f3:77:65:f0:53:f6:1f:
                    3b:9d:34:77:26:52:3d:4f:62:b7:2a:31:22:16:79:
                    ec:6c:12:27:c6:e2:5b:5d:b1:04:dc:d2:71:75:8e:
                    7a:80:db:b2:45:4a:f2:ab:0d:46:d9:15:01:a1:36:
                    bc:8b:60:d9:2b:ac:61:83:4c:08:99:54:d0:60:d5:
                    60:95:64:9d:39:d5:77:a8:35:7c:0f:fa:98:57:9a:
                    01:64:f8:2b:4f:d1:cc:42:6e:bc:73:79:80:ac:c9:
                    33:91:42:43:91:34:8c:71:20:de:5e:a5:86:7c:2d:
                    dc:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:B8:29:A3:CA:FB:C9:71:71:ED:9B:C4:3F:5B:28:04:36:C6:A1:78
            X509v3 Authority Key Identifier:
                keyid:50:F2:0E:A9:E9:75:AE:4C:4C:86:67:CB:57:F7:BC:F5:70:21:5C:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:f6:52:17:02:46:e1:14:80:50:0d:19:6a:e2:a5:dc:07:5d:
         01:48:5a:0d:e2:c3:0e:52:5b:d7:f9:63:cf:50:43:6e:55:b7:
         20:fb:1b:f8:08:27:48:9e:0c:23:fe:d5:c0:c4:e7:62:32:9d:
         9c:10:2d:c4:a1:e7:89:17:40:1b:ea:05:62:6b:40:90:f6:e0:
         8d:25:71:6f:e2:83:4d:95:60:21:27:ec:1c:70:09:2b:26:d5:
         74:a1:f4:aa:a1:2a:e7:7a:fe:aa:d1:b9:75:6e:e9:d9:ae:ef:
         c3:2a:61:cc:09:dd:75:ba:59:a0:ae:17:91:3f:e0:e3:fd:c0:
         0c:5c:48:c4:d9:2a:cf:cb:68:77:5d:dc:63:7e:14:7b:a5:4b:
         45:8d:0f:02:3a:e2:08:41:1f:bf:7d:67:6a:4c:90:31:db:fb:
         83:1b:25:72:42:b1:e1:fb:e8:d4:40:63:39:1c:1e:03:52:75:
         d7:f5:ed:76:19:80:04:fe:61:7f:6e:4f:1d:18:7c:6c:bf:65:
         c4:3b:e9:2f:69:98:89:8d:8e:b3:dd:bb:9d:68:37:e9:d7:a6:
         b3:38:20:4a:83:53:68:44:b8:94:71:c9:01:2e:c5:af:b4:9f:
         59:2d:98:8e:1e:84:37:53:ae:be:4e:12:87:f9:8d:cc:ef:48:
         d7:6f:78:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 10:34:59 2025 by rpki-client