Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9163415/107209483DFD11EA9F3DB470C4F9AE02/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.mft
File:                     8Ms18UXmGxwgQ6_Ruk41QUfEtV4.mft (raw, json)
Hash identifier:          wfAJp2XVTpTtFvpqMm1VKZ50lFJqScSz62utGA86gQY=
Subject key identifier:   2A:05:87:AB:4D:31:3E:DF:44:BE:40:5D:C5:59:8B:D1:35:4F:6C:43
Authority key identifier: F0:CB:35:F1:45:E6:1B:1C:20:43:AF:D1:BA:4E:35:41:47:C4:B5:5E
Certificate issuer:       /CN=A9163415/serialNumber=F0CB35F145E61B1C2043AFD1BA4E354147C4B55E
Certificate serial:       0B63
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9163415/107209483DFD11EA9F3DB470C4F9AE02/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.mft
Manifest number:          0B5B
Signing time:             Thu 18 Sep 2025 19:20:14 +0000
Manifest this update:     Thu 18 Sep 2025 19:20:13 +0000
Manifest next update:     Thu 25 Sep 2025 19:20:13 +0000
Files and hashes:         1: 8Ms18UXmGxwgQ6_Ruk41QUfEtV4.crl (hash: OuKaX/cT3/AkYdtmmJkMyGal2/rM1bijBrgQTcDMjks=)
                          2: 24C647DC3DFE11EAA52A0572C4F9AE02.roa (hash: P0bYmStiB4oa4LekcidIgrNs8onI2ttf+z7KOz4RThU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9163415/107209483DFD11EA9F3DB470C4F9AE02/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.crl
                          rsync://rpki.apnic.net/member_repository/A9163415/107209483DFD11EA9F3DB470C4F9AE02/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Sep 2025 19:20:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2915 (0xb63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9163415, serialNumber=F0CB35F145E61B1C2043AFD1BA4E354147C4B55E
        Validity
            Not Before: Sep 18 19:20:13 2025 GMT
            Not After : Sep 25 19:20:13 2025 GMT
        Subject: CN=68cc5b6d-8fd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c5:77:81:28:e5:30:01:7d:b1:47:3e:86:8c:
                    01:e7:62:1e:b1:d7:42:2f:cb:12:64:f1:8f:8d:ee:
                    9d:98:af:11:f9:b0:3f:f9:a7:2b:04:14:f6:c1:1b:
                    82:ed:66:9a:1b:4c:6b:87:7a:01:bb:81:a6:0a:5f:
                    ce:89:c3:58:66:61:d3:40:c8:93:5e:2a:e6:ec:99:
                    fa:fb:f8:c0:11:68:d7:c3:6e:f2:01:9f:3c:3b:be:
                    98:b8:db:b0:38:b5:6e:e0:f3:d3:df:b0:9b:02:14:
                    e3:0b:6d:46:5c:f1:ac:4e:1f:11:bf:dd:5a:7f:ed:
                    c8:10:7f:20:d7:df:f6:0c:a5:33:6f:c1:b9:e4:61:
                    27:2a:a6:aa:aa:92:05:8e:d8:b9:b9:9e:4a:1d:bb:
                    39:c5:0c:bf:8a:66:82:f1:4f:6f:2c:b7:f1:9d:3c:
                    9a:9a:b1:72:48:58:a2:cd:36:e1:1d:b5:31:9a:5f:
                    d9:e1:ae:13:e0:4a:67:ad:73:a3:c6:27:ab:21:1d:
                    bb:de:b4:4b:45:2e:5b:f5:f3:42:2f:3c:91:eb:c5:
                    a6:74:5f:36:6f:e9:be:2d:09:66:78:4d:a2:17:5d:
                    03:7d:62:a6:bd:24:e0:8e:44:f7:84:37:76:6e:24:
                    cd:62:63:7c:4a:f9:9d:a4:03:9f:96:a5:e7:97:f3:
                    f4:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:05:87:AB:4D:31:3E:DF:44:BE:40:5D:C5:59:8B:D1:35:4F:6C:43
            X509v3 Authority Key Identifier:
                keyid:F0:CB:35:F1:45:E6:1B:1C:20:43:AF:D1:BA:4E:35:41:47:C4:B5:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9163415/107209483DFD11EA9F3DB470C4F9AE02/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163415/107209483DFD11EA9F3DB470C4F9AE02/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:77:bc:02:3e:02:6d:ff:96:b7:b9:99:40:4f:e6:c0:62:01:
         4f:2a:e5:cf:71:eb:27:ed:d1:a1:eb:96:97:c5:0d:e9:6d:4d:
         64:f4:07:2f:3e:34:6c:e5:8b:0e:56:21:40:bb:0a:b8:15:f8:
         a4:2d:bd:dc:87:9c:85:2a:c3:5f:27:d4:6f:91:d5:1b:01:6c:
         2a:19:43:3f:4f:0d:0e:85:0a:94:41:77:09:c5:b9:c9:73:d0:
         4a:7a:48:4c:45:04:a0:01:a7:1d:18:e4:5d:5f:87:bb:f4:57:
         9e:ad:d6:3a:00:3d:dc:45:cf:0e:c4:1b:59:eb:ef:fd:55:28:
         6c:d4:c2:86:2a:2d:1f:c4:4b:dd:2f:df:bb:8b:52:26:b1:8a:
         35:fa:1d:92:71:19:0a:ee:ec:98:eb:72:86:a3:77:54:86:62:
         eb:66:8d:24:d3:23:e8:00:2e:1e:77:1f:77:32:33:db:ec:68:
         1e:65:3d:9d:44:7c:36:a2:9c:1f:55:08:26:de:55:cd:54:0a:
         d5:ae:6a:64:38:fc:67:73:ec:5b:53:dc:18:b1:35:0a:3d:55:
         78:da:57:7b:cf:cc:fc:07:73:39:6a:f5:2e:88:3a:61:54:e8:
         76:2d:91:34:b2:d4:03:30:1d:55:b4:2e:84:da:d1:78:6a:8b:
         9f:26:f6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 00:40:28 2025 by rpki-client