Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/Teu44SIr4OPyOu23UkXg-XuHx00.mft
File:                     Teu44SIr4OPyOu23UkXg-XuHx00.mft (raw, json)
Hash identifier:          AXxjwdd4ErcJiEQ2u0CGxjcN2xBj/an59L+hz9ECpwk=
Subject key identifier:   26:E7:D7:D5:89:E2:DE:10:75:37:1C:C1:3B:54:A9:E4:83:20:B1:20
Authority key identifier: 4D:EB:B8:E1:22:2B:E0:E3:F2:3A:ED:B7:52:45:E0:F9:7B:87:C7:4D
Certificate issuer:       /CN=A915DA76/serialNumber=4DEBB8E1222BE0E3F23AEDB75245E0F97B87C74D
Certificate serial:       34E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Teu44SIr4OPyOu23UkXg-XuHx00.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/Teu44SIr4OPyOu23UkXg-XuHx00.mft
Manifest number:          34DE
Signing time:             Tue 04 Nov 2025 14:38:56 +0000
Manifest this update:     Tue 04 Nov 2025 14:38:56 +0000
Manifest next update:     Tue 11 Nov 2025 14:38:56 +0000
Files and hashes:         1: Teu44SIr4OPyOu23UkXg-XuHx00.crl (hash: Uf05GbQvtJ1USXvJgADAqsSpiDtGNCWFkhUEQxGlVGM=)
                          2: 673E7D66F73911EE8BEC0A76C4F9AE02.roa (hash: yf+DtpQHK15DsIR7hfI9Gbc6iXm71Iwwp13I2Suk7Rw=)
                          3: 66BD8F9EF73911EE8BEC0A76C4F9AE02.roa (hash: 69INgpKoMOy/gwg7BVvVMfejSm+vv8+6md6SESKON5E=)
                          4: A2E40A5C3AA511EFA73B8885C4F9AE02.roa (hash: QLCxOEmWgCa369miIkbLMZGjORq6IjjCOA26AQZ1+A8=)
                          5: 67AFCD36F73911EE8BEC0A76C4F9AE02.roa (hash: VVrcitZ2B7U6+APe/mOfl0d7tYYMkpvIARKDnYAu3Cs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/Teu44SIr4OPyOu23UkXg-XuHx00.crl
                          rsync://rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/Teu44SIr4OPyOu23UkXg-XuHx00.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Teu44SIr4OPyOu23UkXg-XuHx00.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 14:36:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13544 (0x34e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915DA76, serialNumber=4DEBB8E1222BE0E3F23AEDB75245E0F97B87C74D
        Validity
            Not Before: Nov  4 14:38:56 2025 GMT
            Not After : Nov 11 14:38:56 2025 GMT
        Subject: CN=690a1000-d7d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:25:cf:83:3e:1f:db:4a:12:a0:fc:4f:d6:ee:
                    3d:ba:b0:5e:ef:e9:c1:5f:a1:f4:d8:82:f2:58:b2:
                    09:40:7d:20:72:09:d7:00:bb:19:e1:e6:61:bf:11:
                    be:12:6f:d8:1f:19:cd:e1:33:98:03:e4:81:4d:cf:
                    29:2e:85:7a:ff:e8:6a:e8:69:95:ed:1b:b0:23:88:
                    8e:f2:71:04:f2:94:1b:95:5f:92:56:de:bf:8a:b7:
                    a4:67:3c:9b:bd:68:06:b3:fb:a5:31:15:51:be:79:
                    5a:da:91:99:66:de:4b:33:20:c4:be:f6:34:c3:e1:
                    a8:0a:82:bd:e9:d2:26:3d:4b:c1:a4:81:d2:62:53:
                    11:b5:5d:2a:1b:f5:04:32:76:a5:3b:26:fc:b9:88:
                    ee:60:a8:1e:be:6d:e4:8b:de:3f:96:04:95:fc:71:
                    e4:ff:2c:f2:bb:b2:49:c1:61:22:93:b7:de:3a:4c:
                    43:89:96:17:23:00:41:17:d4:58:ef:0b:2b:39:65:
                    62:c8:8e:dd:97:c8:fc:c6:d1:be:0e:05:34:eb:18:
                    e1:5f:a8:76:c6:b9:6d:aa:9e:11:df:3f:93:5a:c4:
                    64:6b:67:63:71:fa:d7:1c:4a:a0:cf:cb:62:ee:e7:
                    cd:d0:9a:13:83:0e:71:6b:6b:42:9e:75:fe:dd:88:
                    87:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E7:D7:D5:89:E2:DE:10:75:37:1C:C1:3B:54:A9:E4:83:20:B1:20
            X509v3 Authority Key Identifier:
                keyid:4D:EB:B8:E1:22:2B:E0:E3:F2:3A:ED:B7:52:45:E0:F9:7B:87:C7:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/Teu44SIr4OPyOu23UkXg-XuHx00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Teu44SIr4OPyOu23UkXg-XuHx00.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/Teu44SIr4OPyOu23UkXg-XuHx00.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:aa:bf:70:8e:d2:b7:b5:60:21:92:c1:64:59:ad:21:a3:ec:
         b3:76:ce:1b:b2:fb:bb:be:a5:6a:47:08:05:b9:4f:11:2b:c0:
         fc:b4:ce:c5:8f:69:07:fb:14:87:04:41:0d:fa:df:d3:88:4c:
         9e:f9:e6:17:31:08:af:ce:41:f8:ff:78:a5:2c:bb:b8:b1:63:
         ee:09:62:c5:44:f4:71:33:c2:80:e5:89:bd:38:13:b9:09:d2:
         c1:aa:b8:c9:11:15:7b:59:94:d9:6c:de:94:1c:75:47:dd:4c:
         1e:24:20:72:e7:f1:65:5d:76:02:0e:9c:4c:cf:37:a5:e1:d2:
         7f:57:fb:16:59:6e:47:4e:a5:e3:ea:b0:a8:f2:3d:54:70:bf:
         bd:87:9d:4c:cd:60:b3:e0:78:c7:b6:cf:c3:f6:f5:16:78:dd:
         4d:a0:3d:c3:fd:8f:90:6e:6f:7e:40:ae:aa:08:91:49:84:bb:
         9a:42:78:9c:e3:45:47:25:5f:9d:55:34:50:b8:7e:a5:d3:2c:
         9e:ca:be:ab:80:14:95:ef:cc:29:51:8c:2b:42:34:a6:aa:a1:
         64:90:81:c3:4b:4f:6f:cf:2b:17:c9:e4:e8:1f:9f:e7:65:5e:
         f7:db:91:86:3c:4a:24:d0:77:1c:2c:4f:f8:33:37:a0:c5:c0:
         6f:1e:0b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 16:04:59 2025 by rpki-client