Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B232/94D4C7403F0D11EBAF1FCE22C4F9AE02/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.mft
File:                     bhhL4UYS1aK1PEmHaERQhQ2wLHQ.mft (raw, json)
Hash identifier:          qjoSyYZ4ej92+4DYou635dYn0ID5Wj1zDsVr9V30L+E=
Subject key identifier:   63:FB:5A:8E:54:B6:04:7A:9D:31:4E:F7:AA:70:EB:74:B4:26:97:BC
Authority key identifier: 6E:18:4B:E1:46:12:D5:A2:B5:3C:49:87:68:44:50:85:0D:B0:2C:74
Certificate issuer:       /CN=A916B232/serialNumber=6E184BE14612D5A2B53C4987684450850DB02C74
Certificate serial:       0766
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B232/94D4C7403F0D11EBAF1FCE22C4F9AE02/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.mft
Manifest number:          075E
Signing time:             Sun 02 Nov 2025 21:38:50 +0000
Manifest this update:     Sun 02 Nov 2025 21:38:49 +0000
Manifest next update:     Sun 09 Nov 2025 21:38:49 +0000
Files and hashes:         1: bhhL4UYS1aK1PEmHaERQhQ2wLHQ.crl (hash: sEjhbrJ8UrA2sOAXOuGH5agAqKO6NyCdET+mHS8NzBc=)
                          2: A2C94D9C3F0F11EB80256B25C4F9AE02.roa (hash: VsARmmeViDsi1FVlV4Qtd1FMCrKISqOnhPnZTXsK7F8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B232/94D4C7403F0D11EBAF1FCE22C4F9AE02/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.crl
                          rsync://rpki.apnic.net/member_repository/A916B232/94D4C7403F0D11EBAF1FCE22C4F9AE02/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 21:38:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1894 (0x766)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B232, serialNumber=6E184BE14612D5A2B53C4987684450850DB02C74
        Validity
            Not Before: Nov  2 21:38:49 2025 GMT
            Not After : Nov  9 21:38:49 2025 GMT
        Subject: CN=6907cf69-a867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:95:e4:1e:20:94:e7:51:e1:4d:79:10:bb:0b:
                    10:cb:b3:ae:77:b6:59:f5:6a:13:89:00:e3:1a:a4:
                    d9:cb:59:68:2c:c4:e0:fb:74:29:c4:f9:34:55:46:
                    36:62:5f:1f:b4:0b:0f:41:79:9b:ac:a9:e0:8d:42:
                    de:4f:64:2f:ff:db:9b:57:3f:64:18:fa:7a:6d:0b:
                    34:a9:9f:e8:12:74:24:47:8a:22:b0:29:b8:19:e8:
                    07:36:ee:de:46:61:ff:a9:61:3e:2d:b9:5b:31:ff:
                    a3:aa:6a:28:05:95:92:db:70:9c:22:f9:8e:be:3e:
                    d7:56:43:79:32:ce:42:56:a3:8c:bf:42:74:12:28:
                    16:78:55:ad:57:59:f4:97:5c:b2:f1:be:c7:51:d5:
                    db:93:a7:fc:e1:63:94:b8:dc:b4:cc:68:94:dc:39:
                    cb:a8:74:99:c7:2c:1b:b7:9f:1a:f0:74:8a:56:b7:
                    cf:81:0f:f4:d8:34:51:8e:8d:70:d6:92:54:2c:9a:
                    f6:ed:3a:22:e0:63:2f:82:d1:75:51:46:76:f6:2f:
                    9f:5a:96:e8:05:10:40:02:54:df:14:ed:93:28:a9:
                    1d:58:50:da:fe:b6:c8:15:ba:6b:0b:c8:f6:b5:88:
                    a8:d9:03:c1:99:ce:3c:46:69:67:3f:e5:f7:29:16:
                    9e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:FB:5A:8E:54:B6:04:7A:9D:31:4E:F7:AA:70:EB:74:B4:26:97:BC
            X509v3 Authority Key Identifier:
                keyid:6E:18:4B:E1:46:12:D5:A2:B5:3C:49:87:68:44:50:85:0D:B0:2C:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B232/94D4C7403F0D11EBAF1FCE22C4F9AE02/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B232/94D4C7403F0D11EBAF1FCE22C4F9AE02/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:85:da:e3:79:c0:ef:a1:e7:3d:31:de:04:5b:0c:a1:99:86:
         65:c5:de:19:65:0d:68:1d:4b:46:7f:22:fc:47:3f:e8:24:7e:
         4e:ce:c2:90:99:31:30:aa:74:6f:3b:47:57:b6:ff:40:0a:79:
         76:0a:04:0e:d5:4a:d7:2f:4d:5a:23:c6:77:d6:37:8c:ca:8c:
         80:ab:6d:7a:e9:41:f7:b0:fd:89:69:af:9d:9d:40:7a:f2:68:
         29:62:a2:99:7c:ee:21:53:65:39:ad:57:18:ef:4b:c7:8d:58:
         23:b6:65:fe:34:e0:cc:09:dc:1c:14:c5:ee:38:ed:0d:51:2b:
         92:0c:6c:47:31:fa:ad:0b:3b:4f:b4:4c:f3:55:d9:70:ec:93:
         e7:b6:8e:26:88:11:62:bf:e8:f9:b7:1f:0b:90:83:ae:4f:df:
         40:c0:21:1f:be:ec:e3:5e:fd:c9:22:99:a8:61:0c:e9:98:6b:
         b5:cc:20:86:10:a4:2b:43:a3:7c:4e:ed:b1:38:f1:b1:83:15:
         73:5a:81:cd:2b:26:f4:53:b1:92:8f:62:64:18:32:44:e0:46:
         a6:b7:87:86:54:74:d7:90:25:e7:f8:20:88:73:d2:dd:c0:48:
         aa:e3:d8:a6:d1:2b:d8:50:a1:8d:20:8b:2d:0d:ce:47:42:ff:
         c7:46:62:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 01:10:05 2025 by rpki-client