Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/poz6MR67HxAyDqIHdTAw5_Oij3I.mft
File:                     poz6MR67HxAyDqIHdTAw5_Oij3I.mft (raw, json)
Hash identifier:          KZHBuIcc0uszBrPzIjdWNJxKynF/K1I5wrtrn8QawrU=
Subject key identifier:   31:0F:1B:E0:C9:37:5D:5A:8B:00:40:7B:E2:B0:77:5B:42:0E:E2:21
Authority key identifier: A6:8C:FA:31:1E:BB:1F:10:32:0E:A2:07:75:30:30:E7:F3:A2:8F:72
Certificate issuer:       /CN=A913258C/serialNumber=A68CFA311EBB1F10320EA207753030E7F3A28F72
Certificate serial:       0B1C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poz6MR67HxAyDqIHdTAw5_Oij3I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/poz6MR67HxAyDqIHdTAw5_Oij3I.mft
Manifest number:          0B02
Signing time:             Sun 02 Nov 2025 19:20:56 +0000
Manifest this update:     Sun 02 Nov 2025 19:20:56 +0000
Manifest next update:     Sun 09 Nov 2025 19:20:55 +0000
Files and hashes:         1: poz6MR67HxAyDqIHdTAw5_Oij3I.crl (hash: KXrWeNUA2NG5/Hae4BeItkb2n89ZDXP3hVhYZrZz1bs=)
                          2: E3D288CA6BC311EDB9791958C4F9AE02.roa (hash: xfCVW/hkWWtb6veFD5avvPcY4Mz5aIouTpiWuzaIDT0=)
                          3: F4E06C32804911EDABB05C09C4F9AE02.roa (hash: ESJChcbSeTzsfPRjHjsX6geMHbvNO7hjmHXws1871ls=)
                          4: D353090841F711ECB1465157C4F9AE02.roa (hash: hyTgYf3yNb3P1osKlb2mkzCC43nsvagjPiYm8g/bHPk=)
                          5: 110731BE329D11EFB45DDA57C4F9AE02.roa (hash: wHUnMKyUsP+z0ZGxOO5ssZzuISHdGqM1+8ZYBh44vj4=)
                          6: 1E95063A21E611EEB4824339C4F9AE02.roa (hash: zTEEFeYyenG7e2iJRNTQNMi/VEI/2vKOaAjTvCstuBc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/poz6MR67HxAyDqIHdTAw5_Oij3I.crl
                          rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/poz6MR67HxAyDqIHdTAw5_Oij3I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poz6MR67HxAyDqIHdTAw5_Oij3I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 19:20:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2844 (0xb1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913258C, serialNumber=A68CFA311EBB1F10320EA207753030E7F3A28F72
        Validity
            Not Before: Nov  2 19:20:56 2025 GMT
            Not After : Nov  9 19:20:55 2025 GMT
        Subject: CN=6907af18-fcaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:84:8a:86:4f:4b:b5:c1:a7:c0:d7:fd:c8:b6:
                    c2:db:83:c6:b5:88:5d:78:71:6e:d3:5d:a0:c3:a9:
                    e9:99:8f:0a:64:77:e2:6f:0c:03:67:e9:0b:75:f9:
                    3f:8e:ef:1e:7e:ce:d1:aa:8f:bc:51:b2:ce:03:37:
                    3b:7b:08:66:ea:83:25:06:96:02:2d:1f:78:91:d9:
                    60:4f:85:88:37:80:c3:9a:eb:f8:cd:22:db:b0:f2:
                    af:c2:40:78:a5:a8:4b:bb:a7:87:6a:f6:d0:17:0c:
                    58:f2:df:df:9d:a5:33:b9:43:37:65:07:c2:d5:56:
                    2b:a7:3c:ff:17:53:73:00:65:5a:cd:1f:f2:96:bd:
                    56:b4:9c:47:36:a7:16:d1:b9:ec:2a:15:20:8e:19:
                    6d:e5:8f:7d:fa:92:db:fe:87:dc:b8:58:51:d4:e8:
                    f8:74:20:89:f3:9a:b5:fd:79:26:5f:89:82:31:83:
                    d9:37:a7:56:4f:40:81:f9:7b:67:77:f4:19:cc:c2:
                    01:5b:5b:f5:e7:bc:94:ba:da:59:5d:e8:b0:63:b3:
                    78:f7:71:0a:18:22:3d:f7:45:1e:ea:4c:ee:a6:5f:
                    91:e2:29:72:9a:63:04:b4:65:fa:2e:4e:58:63:76:
                    a5:f7:25:60:aa:60:0d:ed:b9:a7:2c:51:4d:24:84:
                    3e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:0F:1B:E0:C9:37:5D:5A:8B:00:40:7B:E2:B0:77:5B:42:0E:E2:21
            X509v3 Authority Key Identifier:
                keyid:A6:8C:FA:31:1E:BB:1F:10:32:0E:A2:07:75:30:30:E7:F3:A2:8F:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/poz6MR67HxAyDqIHdTAw5_Oij3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poz6MR67HxAyDqIHdTAw5_Oij3I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/poz6MR67HxAyDqIHdTAw5_Oij3I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:67:3b:62:2d:cf:a5:ae:21:b1:4f:01:e8:63:6b:c8:12:85:
         53:5b:4f:bf:8c:ba:d3:04:9d:be:96:ee:da:c7:d2:60:56:b4:
         9f:40:a3:1b:73:f5:66:47:a6:2f:8c:19:0a:33:2f:92:82:48:
         6a:82:2e:0b:44:87:01:da:8f:5c:01:0f:66:57:10:a2:21:a3:
         97:07:c6:c8:aa:15:09:50:64:89:4e:82:02:4f:1e:f1:c9:d1:
         ad:e8:76:3f:33:85:d5:cf:bc:76:69:b7:84:7a:7d:43:c0:9f:
         c5:0c:5d:88:3d:98:c3:82:a8:6e:dc:39:95:a2:11:54:d9:09:
         9f:4e:92:c2:c2:8f:16:63:e3:a3:d4:e3:ab:21:25:e0:27:e9:
         ad:66:fa:6b:d2:9a:0d:3e:57:2d:91:43:5a:3f:00:97:f5:f0:
         19:2e:9a:a2:50:80:2f:fe:f1:21:fb:51:83:fe:74:32:43:6c:
         5f:5a:8b:f6:74:60:61:69:53:56:80:31:f4:ef:31:38:08:46:
         9a:56:e7:61:8e:6f:80:c6:69:dc:5f:36:ad:c7:a2:c5:a4:be:
         2f:dc:6a:2b:a5:5f:87:28:18:0e:71:08:c1:2d:bc:7a:4f:25:
         d4:9f:04:9e:aa:b3:c7:9c:8e:f3:95:ed:23:67:76:ae:24:71:
         58:25:0a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:57:42 2025 by rpki-client