Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft
File:                     u1uBVrA35dIiY-rH9qEcBS_fYz8.mft (raw, json)
Hash identifier:          faSNEQvEarMQ9GW819KMhJBJXpQCsiBpqThEcv78n6c=
Subject key identifier:   2D:E3:06:3B:4A:89:E9:82:B2:D1:50:0B:D5:2D:B1:2F:D7:54:76:26
Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
Certificate issuer:       /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Certificate serial:       355D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft
Manifest number:          3485
Signing time:             Tue 04 Nov 2025 15:23:39 +0000
Manifest this update:     Tue 04 Nov 2025 15:23:39 +0000
Manifest next update:     Tue 11 Nov 2025 15:23:39 +0000
Files and hashes:         1: u1uBVrA35dIiY-rH9qEcBS_fYz8.crl (hash: Li8APW6YqNGpzEqvCrIcGbOvFNi1OXJdOEXd53pf74Y=)
                          2: 47E1F234B45111EEA556091EC4F9AE02.roa (hash: MUgpGvnpkewn251zM5+9m0/+F8vMSfuS6+jNZpfHvgc=)
                          3: 6159E3148BEB11ED9A3CD825C4F9AE02.roa (hash: qzbXivpb0JIa597930ox0hSBuWQ7KjKDNIli1RBqDkg=)
                          4: A2239B14782011F0A1950D84C4F9AE02.roa (hash: uRH2cuGSTKJvgNoy+Zb1UaKolBxs7SYQUUNOq8LSf4M=)
                          5: 22C2A76E854811EFA776AC73C4F9AE02.roa (hash: sSX7DNQqfge4ejL0oQv0Vd+5TBaBgIDn0NKDxugYUZY=)
                          6: 9826D5EEB45011EE829AF51CC4F9AE02.roa (hash: xKsyGzAN2c32GCPMOdzL9UsUOFCUvwfUwAzlRCnyX9k=)
                          7: DD1805369A8311F0A54CE65CC4F9AE02.roa (hash: g1Jd3IDpPYg+NNjbiAV63UaTfld83t8qWBUIDkeII+w=)
                          8: B91BEB86943711F08A09E30CC4F9AE02.roa (hash: rqhFHdH1mwKgqSSyyXkH5ldhQsleRwxsMAJOjz75ruU=)
                          9: F180E2B24FD011EFBC17A55DC4F9AE02.roa (hash: GKPeCAs7yCzcTtRwWFCku8oUh6Rtkvw9ICbK+vHtQ5Y=)
                          10: A0E12EEC782011F0A1950D84C4F9AE02.roa (hash: P//Kkv1Cdx4PiGkjmnz6vPX7R+COjaveRQQO4LjPR0k=)
                          11: 9B6837A8AD6911EFA86BAA58C4F9AE02.roa (hash: pWg9J7cYk+HXhg4hXPdqT10Vpf+1vT1PV33YnS6AG6c=)
                          12: E9E37A28AD6911EFB6E53159C4F9AE02.roa (hash: z+Wb4gqIzNLeSAdA2Pq8enJbmWtWlhXLEadFxTzm+BI=)
                          13: AA5075824F1811EFB6ECD54CC4F9AE02.roa (hash: zl75vWdRPXnP/XOghAc53jzYLr8BLgxiVkpvltTQaAc=)
                          14: 0A5276E04BB611EE8F105367C4F9AE02.roa (hash: /CXIwsodeDV6hc0P1vlVjGHFyr0hi79zRbh9IHZPKLQ=)
                          15: 6B016F4EB6C911EF9370FA5AC4F9AE02.roa (hash: 70B3F87XSLKvXUF998Hdc/HoObUhGZVos2Z7tXO0ymU=)
                          16: 60DB91E48BEB11ED9A3CD825C4F9AE02.roa (hash: cHqxUZqTQHQkS9uClycnmDqyKizAF8Nm5ODi8+cgf8M=)
                          17: B06C3C12AD6911EF9690E658C4F9AE02.roa (hash: R80o79Cf/gewMorDyo1D6ic4qzsusUsJXg7M2vOiDxY=)
                          18: FFAD463CB6C811EFAE27D256C4F9AE02.roa (hash: HocrnYD4sH7ksGOE0tlJzfX5xEpSjRMS91r9PGL/s1E=)
                          19: 26E8E0566DF011F0B88F3F58C4F9AE02.roa (hash: 3byGRjTOjwf1xthbWEUAa+eHuN1uN4XXcTWnaRVW6NM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl
                          rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 15:23:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13661 (0x355d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915370F, serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
        Validity
            Not Before: Nov  4 15:23:39 2025 GMT
            Not After : Nov 11 15:23:39 2025 GMT
        Subject: CN=690a1a7b-e5f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c5:43:2a:e0:e7:93:70:7b:9c:8a:55:86:d9:
                    a0:a3:27:29:c9:1b:54:bc:2b:60:82:0e:ed:4d:4a:
                    49:34:3a:d9:b6:96:46:a5:80:03:97:84:29:f4:88:
                    02:1a:4f:c2:b5:34:8d:a0:c4:c1:c0:cc:2a:2f:e6:
                    59:cb:8f:de:79:e4:07:24:0a:80:72:b9:7f:fa:53:
                    24:87:87:80:10:1b:90:6b:05:70:7c:4b:be:c1:5c:
                    78:7c:a4:af:9c:d4:62:21:12:bc:f6:37:bc:ce:f0:
                    26:e7:62:78:0d:83:20:49:50:41:10:6c:cb:ce:22:
                    8a:e8:e0:5a:b3:5b:fd:4d:eb:9b:4b:40:44:1a:89:
                    67:99:a8:0a:f7:9a:86:9c:cb:80:b1:5b:bb:76:92:
                    49:c6:50:a6:4d:c7:8a:68:b3:3a:39:b0:65:ff:21:
                    e1:92:89:67:6b:1d:3c:76:05:ce:ec:f3:cf:7f:fc:
                    07:65:a8:ae:c1:ca:ca:74:00:c8:91:4d:74:58:99:
                    81:af:89:81:5a:0a:3c:e9:5c:78:cb:3e:06:0c:bf:
                    5e:ae:2e:55:41:66:6c:26:5e:83:f5:ea:c5:33:f6:
                    93:54:63:56:6c:1d:1e:57:a4:09:42:1a:3d:d4:3c:
                    83:8c:64:02:e7:e6:21:09:17:66:07:c9:2f:66:3c:
                    e7:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:E3:06:3B:4A:89:E9:82:B2:D1:50:0B:D5:2D:B1:2F:D7:54:76:26
            X509v3 Authority Key Identifier:
                keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:75:d4:c0:33:cd:37:ec:fa:6d:5c:6c:10:01:62:64:e6:34:
         53:f1:08:df:29:cf:b5:a4:15:f3:05:12:fa:03:4d:2f:06:56:
         62:87:12:70:6c:86:75:4b:71:b4:f9:be:a1:10:74:7a:3e:d8:
         cf:f1:7d:94:1d:e9:a9:cb:8c:23:45:0a:5f:fe:28:b4:f0:05:
         35:ec:d3:4f:0d:aa:a6:41:33:09:a1:c9:eb:d5:0a:9d:75:2f:
         65:9f:ca:03:36:ed:95:3d:d4:25:33:6a:43:ca:7b:18:78:c7:
         df:08:94:2d:15:82:2d:17:5b:d4:c1:13:d9:64:73:75:e0:62:
         55:d6:93:b6:a7:fe:1a:98:26:b1:67:01:ec:da:11:95:21:1a:
         b6:04:e8:2b:7d:0e:0f:8b:25:05:14:2e:cc:b5:6a:00:65:20:
         6c:76:c1:bf:d4:53:00:b5:40:a6:87:c7:97:bd:89:57:a2:1a:
         ae:87:67:96:41:07:79:6c:78:ee:eb:9e:55:5f:6d:0b:25:23:
         ab:7e:de:d4:aa:e6:1c:cb:20:c7:e4:5a:1c:12:07:b5:d9:49:
         bf:3e:e9:93:e8:1b:5c:a4:09:d9:57:6b:69:c3:e4:49:17:9a:
         f3:09:aa:01:aa:f0:03:40:a3:27:a4:59:cb:01:e1:28:b8:14:
         99:9c:61:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:34:24 2025 by rpki-client