Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft
File:                     h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft (raw, json)
Hash identifier:          OxwGm+HLPMK275jqTEIDiXRBl0AG1eTZYrw518aR6S0=
Subject key identifier:   00:F6:1A:99:34:A5:FE:B1:E8:F7:43:C0:E8:AC:A9:78:FC:5B:ED:52
Authority key identifier: 87:95:4C:02:31:CA:AC:B2:BE:2D:FD:B5:67:C7:4A:F5:EC:B7:5B:0C
Certificate issuer:       /CN=A916BCDF/serialNumber=87954C0231CAACB2BE2DFDB567C74AF5ECB75B0C
Certificate serial:       1273
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h5VMAjHKrLK-Lf21Z8dK9ey3Www.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft
Manifest number:          1263
Signing time:             Sun 02 Nov 2025 17:35:32 +0000
Manifest this update:     Sun 02 Nov 2025 17:35:31 +0000
Manifest next update:     Sun 09 Nov 2025 17:35:31 +0000
Files and hashes:         1: h5VMAjHKrLK-Lf21Z8dK9ey3Www.crl (hash: /vKW8WXw+o07Hwefp9rNLH34X8vx28Mv9SkEPzImZ+4=)
                          2: 698B3FA6986011EE969A225FC4F9AE02.roa (hash: uCuRtLaJqPZT1V5liTXsYaVKYmSfpzuCPzU/U+ZmSyI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.crl
                          rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h5VMAjHKrLK-Lf21Z8dK9ey3Www.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 17:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4723 (0x1273)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916BCDF, serialNumber=87954C0231CAACB2BE2DFDB567C74AF5ECB75B0C
        Validity
            Not Before: Nov  2 17:35:31 2025 GMT
            Not After : Nov  9 17:35:31 2025 GMT
        Subject: CN=69079664-10fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d4:03:3c:65:8a:b1:37:26:68:a3:69:86:eb:
                    b7:18:67:d2:62:00:db:e1:e8:5e:79:26:50:88:d5:
                    c0:a2:6e:4d:aa:cf:bc:d5:39:d8:55:5d:69:14:97:
                    a4:54:43:c0:a2:bd:bc:3f:c5:69:46:de:13:98:8a:
                    5b:41:20:44:1a:55:15:64:51:13:df:2a:83:14:3a:
                    3c:6e:f0:d7:65:56:9e:06:d4:b2:dd:07:ba:c5:55:
                    6d:e1:9d:5e:4d:01:da:dd:71:b6:3d:dc:7f:1a:48:
                    51:25:f8:d1:64:a6:80:33:d5:bb:95:9b:5e:fe:6f:
                    a4:f9:30:f2:6d:6c:d0:36:7e:30:b8:59:9d:06:26:
                    59:b5:b0:7c:83:dd:a0:3c:e4:99:11:de:04:22:51:
                    06:81:b9:e0:e1:67:e4:9f:7b:78:92:65:65:d3:db:
                    9a:f0:06:a6:11:be:05:73:5c:ce:eb:5b:ce:28:72:
                    3d:59:69:0a:c8:55:42:c7:b3:0c:b4:86:5b:91:82:
                    5f:9e:12:74:2f:4a:6f:09:8a:b0:06:b4:82:bc:1b:
                    ff:5b:f2:85:39:97:a6:16:f2:a1:f2:47:7d:b1:7a:
                    d5:49:03:0a:b3:27:8e:8d:28:2b:2a:35:6d:eb:2e:
                    e7:25:60:f7:c7:f8:02:42:07:32:e3:5f:3c:2b:ac:
                    51:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:F6:1A:99:34:A5:FE:B1:E8:F7:43:C0:E8:AC:A9:78:FC:5B:ED:52
            X509v3 Authority Key Identifier:
                keyid:87:95:4C:02:31:CA:AC:B2:BE:2D:FD:B5:67:C7:4A:F5:EC:B7:5B:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h5VMAjHKrLK-Lf21Z8dK9ey3Www.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:a6:7b:b3:49:50:9f:4d:9a:59:bc:49:d1:6b:3b:b3:d8:c2:
         9c:fe:78:2d:46:fa:72:84:7f:5e:9f:bc:b4:b7:af:de:0e:cc:
         bd:d2:13:31:56:d2:ef:fa:f2:5b:ff:6e:bf:ee:9e:b3:99:88:
         6b:6f:e1:b6:e4:b1:4f:20:b5:75:b4:31:e4:c0:69:93:1e:65:
         f8:fe:63:dc:d5:22:70:21:ba:43:23:fa:3c:77:96:82:60:44:
         6e:cc:bd:60:9f:af:60:3c:6a:c8:b2:4a:a8:e9:8b:b4:13:75:
         b7:35:53:94:b0:81:84:27:06:80:7d:0e:37:20:c0:3a:1f:27:
         38:d4:cc:27:42:13:e5:31:9e:cf:6e:53:49:70:9d:1b:bb:27:
         f8:84:58:53:c7:79:81:73:61:5d:35:a6:34:5d:80:11:31:b5:
         8a:63:dc:55:5e:e4:17:c2:af:66:b6:44:48:4b:ca:4e:8b:1d:
         1f:86:5c:5a:23:a5:c2:c4:c6:22:98:34:16:91:f6:d8:00:03:
         dd:c8:a9:30:49:1d:22:77:da:39:ec:dc:d2:d6:eb:5c:78:42:
         78:04:fc:d4:7d:d5:e1:df:a5:15:b8:ec:47:47:86:49:3b:3f:
         5f:6c:f9:f6:ad:26:28:6c:25:f0:fc:0a:e8:00:86:24:51:9f:
         3e:50:56:64
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEnMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkJDREYxMTAvBgNVBAUTKDg3OTU0QzAyMzFDQUFDQjJCRTJERkRCNTY3Qzc0QUY1
RUNCNzVCMEMwHhcNMjUxMTAyMTczNTMxWhcNMjUxMTA5MTczNTMxWjAYMRYwFAYD
VQQDEw02OTA3OTY2NC0xMGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAk9QDPGWKsTcmaKNphuu3GGfSYgDb4eheeSZQiNXAom5Nqs+81TnYVV1pFJek
VEPAor28P8VpRt4TmIpbQSBEGlUVZFET3yqDFDo8bvDXZVaeBtSy3Qe6xVVt4Z1e
TQHa3XG2Pdx/GkhRJfjRZKaAM9W7lZte/m+k+TDybWzQNn4wuFmdBiZZtbB8g92g
POSZEd4EIlEGgbng4Wfkn3t4kmVl09ua8AamEb4Fc1zO61vOKHI9WWkKyFVCx7MM
tIZbkYJfnhJ0L0pvCYqwBrSCvBv/W/KFOZemFvKh8kd9sXrVSQMKsyeOjSgrKjVt
6y7nJWD3x/gCQgcy4188K6xR8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAD2Gpk0
pf6x6PdDwOisqXj8W+1SMB8GA1UdIwQYMBaAFIeVTAIxyqyyvi39tWfHSvXst1sM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkNERi9FQ0UwRkJFNkUz
NkQxMUU4OTU2RjM1MTZDNEY5QUUwMi9oNVZNQWpIS3JMSy1MZjIxWjhkSzlleTNX
d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2g1Vk1BakhLckxLLUxmMjFaOGRLOWV5M1d3dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QkNERi9FQ0UwRkJFNkUzNkQxMUU4OTU2RjM1MTZDNEY5QUUwMi9oNVZNQWpIS3JM
Sy1MZjIxWjhkSzlleTNXd3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBKpnuzSVCfTZpZvEnRazuz2MKc/ngtRvpyhH9en7y0t6/eDsy90hMx
VtLv+vJb/26/7p6zmYhrb+G25LFPILV1tDHkwGmTHmX4/mPc1SJwIbpDI/o8d5aC
YERuzL1gn69gPGrIskqo6Yu0E3W3NVOUsIGEJwaAfQ43IMA6Hyc41MwnQhPlMZ7P
blNJcJ0buyf4hFhTx3mBc2FdNaY0XYARMbWKY9xVXuQXwq9mtkRIS8pOix0fhlxa
I6XCxMYimDQWkfbYAAPdyKkwSR0id9o57NzS1utceEJ4BPzUfdXh36UVuOxHR4ZJ
Oz9fbPn2rSYobCXw/AroAIYkUZ8+UFZk
-----END CERTIFICATE-----
Generated at Mon Nov 3 06:18:18 2025 by rpki-client