Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B1BE/39995344E0FB11EE878F0D40C4F9AE02/yVj9Kr-NofSJFSzmUaQIlFfNF2o.mft
File:                     yVj9Kr-NofSJFSzmUaQIlFfNF2o.mft (raw, json)
Hash identifier:          Jcla6IHiCvsM8FMob5Ev0o31YbIT7B8LYfQazDLk18M=
Subject key identifier:   5F:52:E0:99:37:D7:F4:0E:CC:90:EF:CC:62:F0:E7:5B:60:E2:E5:A5
Authority key identifier: C9:58:FD:2A:BF:8D:A1:F4:89:15:2C:E6:51:A4:08:94:57:CD:17:6A
Certificate issuer:       /CN=A915B1BE/serialNumber=C958FD2ABF8DA1F489152CE651A4089457CD176A
Certificate serial:       0144
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVj9Kr-NofSJFSzmUaQIlFfNF2o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B1BE/39995344E0FB11EE878F0D40C4F9AE02/yVj9Kr-NofSJFSzmUaQIlFfNF2o.mft
Manifest number:          013C
Signing time:             Wed 05 Nov 2025 04:39:30 +0000
Manifest this update:     Wed 05 Nov 2025 04:39:30 +0000
Manifest next update:     Wed 12 Nov 2025 04:39:30 +0000
Files and hashes:         1: yVj9Kr-NofSJFSzmUaQIlFfNF2o.crl (hash: 1B8reiLJJTpC7JJNrkVHBTxpgwe79K7y7VRI/ATDPvo=)
                          2: F16DD2B0E0FB11EE8552F941C4F9AE02.roa (hash: kMQ7gbSHaFXFpsfqJqpqWdRVLvMmMimNITBNMHfZtwY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B1BE/39995344E0FB11EE878F0D40C4F9AE02/yVj9Kr-NofSJFSzmUaQIlFfNF2o.crl
                          rsync://rpki.apnic.net/member_repository/A915B1BE/39995344E0FB11EE878F0D40C4F9AE02/yVj9Kr-NofSJFSzmUaQIlFfNF2o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVj9Kr-NofSJFSzmUaQIlFfNF2o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 04:39:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 324 (0x144)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B1BE, serialNumber=C958FD2ABF8DA1F489152CE651A4089457CD176A
        Validity
            Not Before: Nov  5 04:39:30 2025 GMT
            Not After : Nov 12 04:39:30 2025 GMT
        Subject: CN=690ad502-7dfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:08:9e:3c:37:ba:1e:e3:c4:cd:83:85:9d:3d:
                    c3:a7:28:c4:14:1d:2b:d1:fa:e7:fd:bc:95:0e:3b:
                    9b:39:e6:68:ae:2c:25:07:ae:b5:5a:fe:a8:ae:dd:
                    8a:f7:50:fd:5f:40:53:5f:15:8f:2a:ca:b6:c7:25:
                    09:4f:e5:d9:fe:cd:00:be:b4:9f:64:2e:03:15:df:
                    cf:e9:76:cd:ed:bb:f5:f4:d2:4a:10:21:1d:a4:ae:
                    6d:1a:14:b4:d9:0c:8f:97:b2:f6:9a:7c:99:51:47:
                    9c:5b:15:af:a4:73:7a:09:c0:73:cc:da:68:4c:08:
                    9d:80:66:5f:a5:5e:e4:69:48:f6:9e:6e:05:4c:ef:
                    14:01:6a:67:bd:00:09:b7:4c:77:54:97:21:83:44:
                    e0:f5:d3:e2:6c:4a:02:0b:b3:3f:03:db:34:fb:84:
                    c3:e5:9d:f2:73:e5:71:da:2f:7b:eb:08:3f:58:f6:
                    73:7d:5e:a3:31:95:7d:0a:52:4b:e2:15:df:14:20:
                    cc:0e:08:a2:5d:1b:95:fd:3c:1a:57:22:5f:fe:d7:
                    7d:34:18:c6:ca:95:4a:4d:82:f0:48:5a:c3:79:87:
                    1b:cb:aa:c8:ed:24:04:25:1c:a3:dc:72:40:2e:cb:
                    ca:a8:3b:21:66:99:ff:87:49:06:48:90:eb:cf:b3:
                    e6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:52:E0:99:37:D7:F4:0E:CC:90:EF:CC:62:F0:E7:5B:60:E2:E5:A5
            X509v3 Authority Key Identifier:
                keyid:C9:58:FD:2A:BF:8D:A1:F4:89:15:2C:E6:51:A4:08:94:57:CD:17:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B1BE/39995344E0FB11EE878F0D40C4F9AE02/yVj9Kr-NofSJFSzmUaQIlFfNF2o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVj9Kr-NofSJFSzmUaQIlFfNF2o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B1BE/39995344E0FB11EE878F0D40C4F9AE02/yVj9Kr-NofSJFSzmUaQIlFfNF2o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:8e:7a:fa:74:c8:7b:50:ff:fc:49:18:b2:25:21:56:e8:cc:
         56:2a:1d:fc:99:4d:53:85:98:9f:d4:e0:c8:6d:b2:a4:48:69:
         ce:61:00:cc:b4:80:ea:62:de:57:bc:70:0a:f4:09:ac:a7:a5:
         36:14:05:43:58:3f:a2:ff:ec:e1:8e:8b:a8:0d:c0:d5:a6:d2:
         d8:0e:e6:33:10:bd:e1:b3:39:dc:10:fc:53:68:d3:95:a1:1d:
         7d:55:ab:c4:31:7c:21:f4:e3:71:d6:f4:cc:26:6e:43:4e:8f:
         d0:01:2b:e0:9f:d0:d8:eb:42:4a:55:33:82:f1:1c:54:2b:3c:
         6c:66:5c:ec:c9:1e:04:8d:a9:73:be:10:7b:6a:37:31:98:8d:
         aa:9d:15:09:92:89:87:a7:c7:34:cd:fe:a5:4d:ed:44:2b:a7:
         44:02:ec:26:81:ef:c1:8d:c8:3b:99:b9:0e:a7:f6:61:39:eb:
         fa:8f:c7:45:5b:e8:36:0c:8d:42:00:0f:bb:4f:46:0f:56:47:
         0b:ce:98:4d:9f:49:75:bf:8f:65:1c:22:d0:86:ee:48:49:bf:
         ce:bf:8b:33:79:3e:d3:75:91:e0:2a:13:f0:68:2a:d8:fe:f3:
         90:21:e7:e2:37:fd:3e:4e:dc:07:12:6c:d0:d4:e1:80:c1:6f:
         ce:bc:6d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:10:56 2025 by rpki-client