Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.mft
File:                     SrvXMBz_f7SstqBKFPCjbM6FYRw.mft (raw, json)
Hash identifier:          /4CrUJdYK80ISVZbb8Ar+iKe1MdFdBql9WkkE7N+N/I=
Subject key identifier:   D9:67:DC:89:B8:98:50:5B:11:6C:01:B6:72:08:B7:33:76:5A:59:B9
Authority key identifier: 4A:BB:D7:30:1C:FF:7F:B4:AC:B6:A0:4A:14:F0:A3:6C:CE:85:61:1C
Certificate issuer:       /CN=A91FA9BC/serialNumber=4ABBD7301CFF7FB4ACB6A04A14F0A36CCE85611C
Certificate serial:       022C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrvXMBz_f7SstqBKFPCjbM6FYRw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.mft
Manifest number:          0215
Signing time:             Wed 29 Oct 2025 02:12:53 +0000
Manifest this update:     Wed 29 Oct 2025 02:12:52 +0000
Manifest next update:     Wed 05 Nov 2025 02:12:52 +0000
Files and hashes:         1: SrvXMBz_f7SstqBKFPCjbM6FYRw.crl (hash: u4zc58JWXTn/U4urkBpwJfcGsvae5J2CX9oJCYKLNu4=)
                          2: 106F283CB74311EDB0C38030C4F9AE02.roa (hash: hw7fn2Uz56pW/An8KSiF7/ybzu4erny13VSakUkooRo=)
                          3: 688B6F18355811F0AF79910EC4F9AE02.roa (hash: TCN1AZgzVPw/0NzN3SuEMukcZY6yAiASu/ppodIE8PQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.crl
                          rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrvXMBz_f7SstqBKFPCjbM6FYRw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Nov 2025 02:12:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 556 (0x22c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA9BC, serialNumber=4ABBD7301CFF7FB4ACB6A04A14F0A36CCE85611C
        Validity
            Not Before: Oct 29 02:12:52 2025 GMT
            Not After : Nov  5 02:12:52 2025 GMT
        Subject: CN=69017825-4c51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f2:b9:7b:bd:a7:1d:ca:9f:fd:71:ce:c0:0d:
                    54:52:61:07:7d:6d:a5:fc:cd:d6:81:25:dc:0a:3c:
                    03:e4:68:14:45:2e:6c:04:cc:4a:44:f3:26:29:9a:
                    1d:53:06:3f:76:b2:d0:a0:f4:ea:98:f9:a4:7f:a3:
                    51:56:72:95:f4:8c:bc:27:df:16:15:79:bb:ea:de:
                    85:2e:19:fa:e7:bb:7c:59:80:29:1e:95:e7:81:c7:
                    e1:c9:e1:1a:a3:48:88:ac:71:fc:b8:af:86:89:77:
                    3a:65:26:7c:ec:f0:9f:18:b8:7a:b3:9c:a6:90:d7:
                    60:ac:41:05:d1:27:b8:59:3d:7d:cf:ae:ba:5d:9e:
                    38:2a:e7:7c:80:1e:42:51:eb:03:20:e9:65:d4:6e:
                    33:dd:58:b4:af:e0:82:6c:30:1b:06:f9:3f:7d:ed:
                    33:1c:2c:39:e8:cc:b4:39:4f:72:39:b6:5a:71:84:
                    11:77:71:35:6a:e2:a0:24:de:b6:72:ad:fa:06:29:
                    99:0e:86:25:26:e5:01:ce:34:22:17:68:b7:9f:9c:
                    e3:83:58:bb:da:33:cd:a6:28:91:2a:cc:c2:1f:33:
                    b9:99:d7:f2:42:ef:5b:55:d0:4d:42:6f:a5:4e:ed:
                    52:15:f3:e3:67:39:6c:01:06:58:8c:a9:05:c8:8f:
                    a8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:67:DC:89:B8:98:50:5B:11:6C:01:B6:72:08:B7:33:76:5A:59:B9
            X509v3 Authority Key Identifier:
                keyid:4A:BB:D7:30:1C:FF:7F:B4:AC:B6:A0:4A:14:F0:A3:6C:CE:85:61:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrvXMBz_f7SstqBKFPCjbM6FYRw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:30:5e:88:ca:44:71:b4:f3:90:8e:b7:d6:d9:d9:cb:b6:cc:
         dd:51:db:60:cb:b3:bf:ed:9f:68:17:79:af:2f:b7:1b:ae:9f:
         be:92:65:80:f1:64:53:33:18:9c:af:47:cd:be:4a:57:51:32:
         b5:41:4f:87:c7:4e:58:a2:00:1c:c5:6d:90:4a:8e:84:3d:75:
         a8:6c:fc:27:92:65:90:33:3a:58:f8:72:24:6c:ce:fd:67:86:
         7b:78:1e:94:66:e3:8d:67:30:d8:ee:e7:17:bf:ed:4f:d2:18:
         89:fd:02:cf:80:8d:81:5a:6a:ca:68:5a:c2:c5:48:b0:47:f6:
         71:27:97:d9:d6:a2:fa:37:18:6f:35:c7:5a:25:87:9a:bd:dc:
         f2:09:fd:57:bd:3b:5c:03:97:1d:17:75:3f:82:6b:6c:22:d3:
         92:86:f0:e1:51:0f:5e:00:1d:e2:31:18:27:ff:55:4d:65:49:
         0f:61:22:dd:e3:a0:7f:81:f3:5b:f5:ed:70:a4:fb:73:ad:f0:
         90:cd:83:7e:4c:5c:76:c3:96:04:fc:ce:01:47:1c:a0:19:63:
         68:f1:8b:6c:43:0d:a9:1a:78:ba:e1:da:aa:5b:0f:6f:53:29:
         3f:9e:30:95:80:21:66:24:5d:ce:36:6c:c7:96:e0:3f:b0:be:
         ba:c3:5b:0c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkE5QkMxMTAvBgNVBAUTKDRBQkJENzMwMUNGRjdGQjRBQ0I2QTA0QTE0RjBBMzZD
Q0U4NTYxMUMwHhcNMjUxMDI5MDIxMjUyWhcNMjUxMTA1MDIxMjUyWjAYMRYwFAYD
VQQDEw02OTAxNzgyNS00YzUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvvK5e72nHcqf/XHOwA1UUmEHfW2l/M3WgSXcCjwD5GgURS5sBMxKRPMmKZod
UwY/drLQoPTqmPmkf6NRVnKV9Iy8J98WFXm76t6FLhn657t8WYApHpXngcfhyeEa
o0iIrHH8uK+GiXc6ZSZ87PCfGLh6s5ymkNdgrEEF0Se4WT19z666XZ44Kud8gB5C
UesDIOll1G4z3Vi0r+CCbDAbBvk/fe0zHCw56My0OU9yObZacYQRd3E1auKgJN62
cq36BimZDoYlJuUBzjQiF2i3n5zjg1i72jPNpiiRKszCHzO5mdfyQu9bVdBNQm+l
Tu1SFfPjZzlsAQZYjKkFyI+oSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNln3Im4
mFBbEWwBtnIItzN2Wlm5MB8GA1UdIwQYMBaAFEq71zAc/3+0rLagShTwo2zOhWEc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTlCQy9CRTJDRUZGMEIz
QUExMUVEQUYzMTYyM0ZDNEY5QUUwMi9TcnZYTUJ6X2Y3U3N0cUJLRlBDamJNNkZZ
UncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NydlhNQnpfZjdTc3RxQktGUENqYk02RllSdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QTlCQy9CRTJDRUZGMEIzQUExMUVEQUYzMTYyM0ZDNEY5QUUwMi9TcnZYTUJ6X2Y3
U3N0cUJLRlBDamJNNkZZUncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAyMF6IykRxtPOQjrfW2dnLtszdUdtgy7O/7Z9oF3mvL7cbrp++kmWA
8WRTMxicr0fNvkpXUTK1QU+Hx05YogAcxW2QSo6EPXWobPwnkmWQMzpY+HIkbM79
Z4Z7eB6UZuONZzDY7ucXv+1P0hiJ/QLPgI2BWmrKaFrCxUiwR/ZxJ5fZ1qL6Nxhv
NcdaJYeavdzyCf1XvTtcA5cdF3U/gmtsItOShvDhUQ9eAB3iMRgn/1VNZUkPYSLd
46B/gfNb9e1wpPtzrfCQzYN+TFx2w5YE/M4BRxygGWNo8YtsQw2pGni64dqqWw9v
Uyk/njCVgCFmJF3ONmzHluA/sL66w1sM
-----END CERTIFICATE-----
Generated at Thu Oct 30 05:25:28 2025 by rpki-client