Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.mft
File:                     05oQ5hqMqVBO2xVIaTazd0OiTc4.mft (raw, json)
Hash identifier:          Ni5qZUq3iSrQDzINO08MxbuVKdoWAiD84QwoyXJOHgI=
Subject key identifier:   BA:F3:3A:07:13:CD:06:D4:75:9E:FA:7F:89:F7:39:0D:33:82:16:78
Authority key identifier: D3:9A:10:E6:1A:8C:A9:50:4E:DB:15:48:69:36:B3:77:43:A2:4D:CE
Certificate issuer:       /CN=A9110BE2/serialNumber=D39A10E61A8CA9504EDB15486936B37743A24DCE
Certificate serial:       018F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05oQ5hqMqVBO2xVIaTazd0OiTc4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.mft
Manifest number:          018B
Signing time:             Sun 19 Oct 2025 06:07:43 +0000
Manifest this update:     Sun 19 Oct 2025 06:07:42 +0000
Manifest next update:     Sun 26 Oct 2025 06:07:42 +0000
Files and hashes:         1: 05oQ5hqMqVBO2xVIaTazd0OiTc4.crl (hash: pSl0LA1i8uRQr8h8mdN4XVzqfaBos6ccijL3SUVcOvA=)
                          2: A4FC1E34519311EE85CE2811C4F9AE02.roa (hash: FZUjzlxQzgZF6JDMRzeJhcRgNYq3dhICyuyYGYZj5hs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.crl
                          rsync://rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05oQ5hqMqVBO2xVIaTazd0OiTc4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 06:07:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 399 (0x18f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110BE2, serialNumber=D39A10E61A8CA9504EDB15486936B37743A24DCE
        Validity
            Not Before: Oct 19 06:07:42 2025 GMT
            Not After : Oct 26 06:07:42 2025 GMT
        Subject: CN=68f4802e-6f4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:11:84:8c:ae:ec:d7:43:ba:8e:9b:f7:a2:ae:
                    ee:e5:09:9a:c1:f3:29:b7:2f:5f:9d:04:3c:c0:76:
                    93:50:4f:6a:7f:d3:12:d5:4f:4b:c6:37:73:31:d0:
                    be:4f:d1:ed:29:9f:61:7e:57:b7:05:11:39:20:08:
                    ec:72:bb:72:7f:e1:40:b3:a7:d4:fa:d8:cf:ab:2f:
                    75:d8:04:52:e3:c8:af:72:a2:99:09:0b:7d:ce:6a:
                    a9:cc:12:08:07:f9:5a:c8:8f:b1:5c:6f:da:1c:2b:
                    4e:a2:06:85:e1:21:2f:b2:f0:68:9e:2c:1d:b6:f4:
                    90:f6:81:9a:5c:ca:a0:38:3d:75:9c:54:3e:21:f0:
                    2f:ba:71:8c:71:24:81:15:71:92:46:4b:57:0a:58:
                    e4:eb:fc:44:e9:01:d1:1a:fe:67:e3:75:14:5a:34:
                    f5:b5:ea:89:c9:67:87:06:2f:0a:75:e0:d4:8f:75:
                    40:c0:2b:0d:58:51:17:84:98:31:d6:8f:58:3c:b3:
                    90:68:53:83:9c:91:79:33:b6:29:26:a1:72:96:7d:
                    94:d0:25:2f:2a:a2:1b:12:eb:8f:14:a9:2d:c9:33:
                    b2:eb:5e:76:a0:a8:b4:0d:98:94:5f:37:82:e4:da:
                    96:cc:6a:d6:af:d7:ad:d3:b9:27:09:8d:27:32:3f:
                    91:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:F3:3A:07:13:CD:06:D4:75:9E:FA:7F:89:F7:39:0D:33:82:16:78
            X509v3 Authority Key Identifier:
                keyid:D3:9A:10:E6:1A:8C:A9:50:4E:DB:15:48:69:36:B3:77:43:A2:4D:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05oQ5hqMqVBO2xVIaTazd0OiTc4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:30:50:84:cb:f5:43:5d:9e:c5:ba:38:41:3c:03:63:19:fe:
         86:25:91:11:e4:ee:ea:a8:ce:5c:a0:c8:48:97:3a:99:32:c6:
         ac:f5:2a:b0:d6:2f:0e:31:10:7f:ae:1e:ff:f0:dd:0e:5a:f5:
         ad:d7:7d:d1:d0:48:73:10:0d:c6:2b:44:f2:73:ad:97:86:ea:
         db:4b:f4:1c:7d:44:0e:fe:49:87:59:fe:89:e5:e9:37:b1:32:
         d0:cd:2a:41:58:93:4c:c6:46:be:d9:63:25:64:13:90:6e:c0:
         7d:a1:7b:0b:c8:5d:a7:7a:55:4a:c7:45:3e:27:0d:d4:39:65:
         06:41:ba:21:34:a6:e7:19:22:ad:55:3d:f8:f7:70:6d:0b:5e:
         f1:72:bd:f6:66:ed:fe:d0:e0:a3:23:51:9e:d6:dc:0b:77:ca:
         7b:07:c5:4a:a1:8e:ea:8d:ac:22:31:77:48:6e:05:de:92:42:
         20:0c:76:62:f7:db:79:74:f8:34:d1:c3:a1:8e:c4:32:d3:f6:
         df:b0:ce:a5:9c:fa:2e:58:cb:b4:f2:cd:cd:2c:db:b2:c7:17:
         47:bd:6f:f1:58:06:25:7e:ee:cc:e7:c4:3d:c1:66:e2:67:9f:
         9d:ee:98:04:f7:49:9a:dd:59:a5:a9:a3:cc:5a:93:06:e7:4c:
         0b:26:0a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:59:41 2025 by rpki-client