Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft
File:                     Rm8RJELF0C5g8kaZGTriFRlbO6k.mft (raw, json)
Hash identifier:          MDHbnlrc8xvGdh9Lf6CBS/prsQyjhyryvaZjplNyXiI=
Subject key identifier:   1E:10:7A:4C:A2:60:E1:56:88:39:EC:48:B8:35:91:D4:3E:59:96:CF
Authority key identifier: 46:6F:11:24:42:C5:D0:2E:60:F2:46:99:19:3A:E2:15:19:5B:3B:A9
Certificate issuer:       /CN=A915F89C/serialNumber=466F112442C5D02E60F24699193AE215195B3BA9
Certificate serial:       0DE7
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft
Manifest number:          0DC5
Signing time:             Mon 20 Oct 2025 14:23:50 +0000
Manifest this update:     Mon 20 Oct 2025 14:23:49 +0000
Manifest next update:     Mon 27 Oct 2025 14:23:49 +0000
Files and hashes:         1: Rm8RJELF0C5g8kaZGTriFRlbO6k.crl (hash: uPQ1eK2r4UThKPgc1OBr2GkmaxRb8xjBq4uBTcs8LVQ=)
                          2: 266ABA161E5811EF89038F3BC4F9AE02.roa (hash: z3Q0XwSryFlf5ykqdN5Y1TdhtSCfR2jxPCzlYL9e1mQ=)
                          3: 1D3D0DC21E5811EFAC23683BC4F9AE02.roa (hash: VRtnd9Tj1mWAfM/JLgDB4PLLpcyhK2ei01M7Ec3zpI8=)
                          4: 91CA6CBC740111EFB5E97021C4F9AE02.roa (hash: YgDfwoJsux34uSaM5jXKcO0HoCC5yHWaw8GBRqOn1lo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.crl
                          rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 14:23:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3559 (0xde7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F89C, serialNumber=466F112442C5D02E60F24699193AE215195B3BA9
        Validity
            Not Before: Oct 20 14:23:49 2025 GMT
            Not After : Oct 27 14:23:49 2025 GMT
        Subject: CN=68f645f5-38b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f1:3e:e3:95:a6:b2:d5:5a:1d:65:37:cc:3b:
                    9c:bc:ae:df:78:1d:f0:a7:9e:3a:3d:3b:ac:fe:37:
                    6e:d8:9d:55:a6:89:20:cc:88:84:62:57:e5:e8:74:
                    6f:44:80:d0:4d:ee:c5:ca:38:12:f9:ae:b8:05:cc:
                    47:e7:92:92:e0:ce:a4:1a:1f:10:3d:75:e6:74:ea:
                    f1:89:50:ab:89:25:0b:29:f1:2e:0d:5d:81:0d:af:
                    6f:ea:26:47:c2:83:d1:09:7a:3f:89:84:1d:51:6e:
                    3f:0b:42:72:0a:d9:e1:0a:0a:a5:da:ef:af:3a:e9:
                    86:6f:c0:d7:b5:17:b4:ce:d6:78:c7:58:a3:99:9c:
                    74:ff:56:68:46:cb:ee:2d:fc:57:23:e4:4f:a3:8f:
                    f9:94:b9:ca:e3:7f:13:40:28:03:1b:ab:c6:a6:3f:
                    b1:ed:31:72:df:17:aa:32:71:e0:7d:9c:32:01:f6:
                    dd:9f:14:35:b0:fb:3d:33:76:cd:b3:ea:06:09:87:
                    60:0e:f1:5d:ad:85:1b:59:0a:1f:6b:fe:b2:d1:20:
                    61:e3:b7:e5:6f:81:d3:d7:18:9d:4a:4d:59:c2:9e:
                    42:e9:d2:65:8f:5d:3e:51:61:05:f6:56:c7:fd:b9:
                    1f:f7:a5:e6:46:bf:25:2d:1d:8a:64:89:65:11:7a:
                    e7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:10:7A:4C:A2:60:E1:56:88:39:EC:48:B8:35:91:D4:3E:59:96:CF
            X509v3 Authority Key Identifier:
                keyid:46:6F:11:24:42:C5:D0:2E:60:F2:46:99:19:3A:E2:15:19:5B:3B:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:5f:63:17:ae:09:17:1d:58:ab:f0:93:9e:52:5f:6c:23:28:
         67:68:eb:30:47:1c:5d:2e:e0:1d:90:eb:c7:2a:21:18:97:e2:
         7a:96:82:4e:62:3a:88:bf:10:dc:98:0a:ed:3f:c9:e2:3d:89:
         3b:68:be:5e:10:64:d3:9d:9f:8b:4a:20:04:ab:b2:e6:d2:c1:
         59:68:94:8c:69:2f:77:16:2e:2d:e0:0d:52:a9:e8:76:b6:b5:
         b6:0d:c6:4d:82:5b:fe:cb:ed:47:90:eb:21:8d:11:f3:4b:82:
         15:80:30:55:fe:9f:0d:a5:eb:ad:65:68:88:0b:5c:45:a9:bd:
         b1:12:b4:7a:59:65:ed:87:1a:80:2d:b7:9c:82:c3:13:19:a2:
         89:dc:0b:ba:28:0d:58:e1:64:a3:ba:69:a2:c2:83:53:45:53:
         72:14:28:53:c4:76:9b:51:7d:c4:54:3f:fe:01:b3:4c:0a:45:
         2e:31:fa:80:e6:19:74:54:62:c5:9a:56:74:16:6b:9b:8c:27:
         04:67:ca:c3:50:80:e1:bc:d6:14:33:e4:06:d4:65:ca:df:19:
         fe:94:1a:09:5e:1d:51:f9:e8:53:57:80:27:6f:52:68:3b:a8:
         b5:fa:92:45:81:ea:2e:20:78:6c:24:15:c3:64:09:ec:f5:e1:
         4f:32:90:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 02:50:28 2025 by rpki-client