Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.mft
File:                     lYVHVzXi7hA6iDV3aeF2MG0ZdHM.mft (raw, json)
Hash identifier:          R18/osRYm+Nk11rqHh/zETojfPfrBQT8LRRV43Fwe5g=
Subject key identifier:   32:52:63:8A:C3:B5:8C:9C:70:83:4B:F8:98:4A:92:F4:76:37:C9:F7
Authority key identifier: 95:85:47:57:35:E2:EE:10:3A:88:35:77:69:E1:76:30:6D:19:74:73
Certificate issuer:       /CN=A919B180/serialNumber=9585475735E2EE103A88357769E176306D197473
Certificate serial:       03E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.mft
Manifest number:          03E0
Signing time:             Wed 29 Oct 2025 00:20:04 +0000
Manifest this update:     Wed 29 Oct 2025 00:20:04 +0000
Manifest next update:     Wed 05 Nov 2025 00:20:04 +0000
Files and hashes:         1: lYVHVzXi7hA6iDV3aeF2MG0ZdHM.crl (hash: VIkI4Gbhl5wZeFCjeGujfQnDulRtgC6EPb5u7Hk1iBg=)
                          2: 886907F8EE9911EDB02DA367C4F9AE02.roa (hash: Wvz4cNe0OC8IhG60u+77ZZqG7jnCfkJuPUgGit+D/Bg=)
                          3: EAAACB14A46111ECA6D7AC4AC4F9AE02.roa (hash: G0VAwKVz22dJplsZ8JCisNdr5V+Bm42xeQ9XdjBCqhU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.crl
                          rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Nov 2025 00:20:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 999 (0x3e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B180, serialNumber=9585475735E2EE103A88357769E176306D197473
        Validity
            Not Before: Oct 29 00:20:04 2025 GMT
            Not After : Nov  5 00:20:04 2025 GMT
        Subject: CN=69015db4-47bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:75:d0:f3:d3:42:b0:79:b9:52:ba:0d:c9:f1:
                    de:55:58:27:76:e9:99:39:15:e7:b5:61:7d:04:6c:
                    37:2e:ee:1b:d2:ec:34:be:89:ed:9a:6f:ff:ce:8a:
                    84:37:7c:e9:58:86:61:90:dc:74:9a:b7:ac:6f:c9:
                    61:07:b2:d3:1c:e6:71:bc:f3:b4:a9:d9:55:6b:31:
                    09:53:c3:60:d5:e4:7d:6a:df:6d:29:82:13:ad:5e:
                    58:46:32:fb:4c:a4:fc:76:e5:e3:0a:d0:f3:97:0e:
                    b9:bb:1b:b2:e9:c1:95:e6:d7:32:a6:3d:e1:c3:19:
                    00:bd:0c:6e:f0:34:38:b7:2b:5e:e4:fc:ab:f9:8e:
                    99:42:6f:03:0c:c6:00:d4:f2:f5:cf:b6:4e:d4:75:
                    bb:63:b2:3e:c1:c8:09:24:4e:b4:46:94:94:8e:c0:
                    e8:7f:c9:64:47:74:08:7e:1f:f3:bc:01:f2:73:25:
                    00:72:8f:0d:8d:ff:45:5a:a3:01:c2:fb:52:ac:99:
                    b2:f7:56:2f:d4:a8:3b:21:b6:05:98:79:46:eb:a0:
                    54:17:99:6a:b6:13:71:4e:87:70:80:50:62:10:44:
                    e4:51:6e:4e:9a:fa:60:79:ec:93:08:dd:da:36:80:
                    7c:85:63:6a:fe:de:62:f9:fe:a2:c3:2e:bd:2e:82:
                    e1:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:52:63:8A:C3:B5:8C:9C:70:83:4B:F8:98:4A:92:F4:76:37:C9:F7
            X509v3 Authority Key Identifier:
                keyid:95:85:47:57:35:E2:EE:10:3A:88:35:77:69:E1:76:30:6D:19:74:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:d9:97:88:24:a9:41:6b:5f:0c:39:d9:fd:78:25:5b:de:11:
         2e:37:d7:9f:72:da:4b:a7:fb:31:f8:a5:a9:7e:7d:2b:c9:ed:
         4b:a1:9a:c5:65:3e:47:f7:53:d3:ec:8e:c2:fc:dc:38:3e:52:
         96:dc:2b:59:45:57:79:0a:86:a5:20:17:46:b7:91:cf:a1:e4:
         d8:03:80:b2:f5:8d:c3:ce:a8:0d:ac:78:ae:2f:b3:09:77:7e:
         73:c4:f2:b3:fe:ca:a4:89:86:4c:80:42:1e:fd:12:46:b7:fe:
         a7:a7:37:a4:c2:49:69:a4:d9:73:fa:bb:28:30:c6:d1:da:a9:
         d3:a6:31:e0:ef:f5:95:f9:52:43:d2:28:fb:3c:5e:21:ab:8c:
         09:b8:01:bc:cb:58:07:22:a4:40:cd:f6:6d:e0:d9:44:f5:70:
         5c:6c:04:e0:0c:b2:86:d8:03:9f:00:66:7f:bb:66:e1:cb:a8:
         ef:f4:e6:a4:7a:06:10:ec:bc:6f:e9:11:d1:61:50:00:d1:34:
         1a:6c:b8:8a:cc:82:e2:20:0b:a1:a8:25:b6:51:c3:13:a6:ca:
         89:c9:41:cc:14:ff:8f:f1:bc:a5:d3:4b:44:ad:27:6c:95:5d:
         7f:1d:8f:f3:10:23:b9:42:c7:cd:5f:2e:e1:17:94:f3:c9:df:
         61:24:be:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 22:07:17 2025 by rpki-client