Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.mft
File:                     84XzeRdwIPCIv3TaLANG2HnCKh0.mft (raw, json)
Hash identifier:          7xdbXA6oSvB2hkaPwnXLApFjl1IwuYo7MEko4H1eHoY=
Subject key identifier:   83:CC:31:44:5E:3E:85:5F:AC:68:82:31:F0:39:1D:1E:92:2C:54:74
Authority key identifier: F3:85:F3:79:17:70:20:F0:88:BF:74:DA:2C:03:46:D8:79:C2:2A:1D
Certificate issuer:       /CN=A9112AD5/serialNumber=F385F379177020F088BF74DA2C0346D879C22A1D
Certificate serial:       0473
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84XzeRdwIPCIv3TaLANG2HnCKh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.mft
Manifest number:          046F
Signing time:             Sun 19 Oct 2025 02:02:04 +0000
Manifest this update:     Sun 19 Oct 2025 02:02:03 +0000
Manifest next update:     Sun 26 Oct 2025 02:02:03 +0000
Files and hashes:         1: 84XzeRdwIPCIv3TaLANG2HnCKh0.crl (hash: oj8wwejq+hJN+za2hTxszSDwZpaCCHjZFIiecQSY9Uo=)
                          2: 3C09B1A2640F11ECBC536111C4F9AE02.roa (hash: x1o/7SXGT/4CedCgS5u41onm9GYNi5PSdU5ws280Sfc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.crl
                          rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84XzeRdwIPCIv3TaLANG2HnCKh0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 02:02:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1139 (0x473)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112AD5, serialNumber=F385F379177020F088BF74DA2C0346D879C22A1D
        Validity
            Not Before: Oct 19 02:02:03 2025 GMT
            Not After : Oct 26 02:02:03 2025 GMT
        Subject: CN=68f4469c-3fb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7c:3a:33:a2:3c:8e:4c:19:5d:d4:28:62:05:
                    58:e6:3d:a0:89:3c:b8:69:c7:02:6f:62:a1:1c:40:
                    db:d0:00:73:db:b3:c9:9e:e4:e7:2e:1c:7f:f3:4f:
                    b3:cb:0e:ee:da:46:81:05:3c:54:92:bc:cb:92:2d:
                    cf:2d:9b:56:98:3f:2b:15:cc:12:7c:4b:da:ee:94:
                    5f:44:c1:6a:ec:88:e8:d5:c9:e9:61:0b:6c:96:97:
                    60:22:99:df:6c:9a:ba:07:97:1b:8d:f8:6e:7d:a1:
                    4d:f1:62:98:ca:e8:f5:1a:4b:18:0d:ff:f4:a3:96:
                    8f:59:43:86:a1:3e:7e:9c:a3:01:db:02:c9:fe:d0:
                    47:1b:e6:88:18:fc:d1:73:ed:c8:60:69:10:d9:db:
                    12:4d:f4:53:44:30:00:e5:21:f5:43:34:26:2f:52:
                    eb:65:d2:a5:b3:0d:76:57:8e:7f:45:c0:fa:95:53:
                    2a:c0:86:39:e5:03:68:c0:78:d4:98:c2:93:09:cd:
                    e9:8b:ad:25:99:89:cd:eb:e1:4e:65:c8:de:15:25:
                    30:34:44:75:ab:a2:ab:8d:f3:69:c9:be:0e:54:6a:
                    bc:bd:a7:57:d3:37:6d:51:90:cc:fe:7d:d1:ce:11:
                    ac:bd:eb:b0:76:e7:9b:38:07:67:5f:57:c4:55:7b:
                    71:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:CC:31:44:5E:3E:85:5F:AC:68:82:31:F0:39:1D:1E:92:2C:54:74
            X509v3 Authority Key Identifier:
                keyid:F3:85:F3:79:17:70:20:F0:88:BF:74:DA:2C:03:46:D8:79:C2:2A:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84XzeRdwIPCIv3TaLANG2HnCKh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:e8:b3:f4:0d:e9:23:49:4f:24:2a:10:70:62:d0:b5:1e:cb:
         0f:02:de:d4:f9:42:42:d9:7f:d3:8a:11:b1:c9:b7:5e:c8:9d:
         46:a1:8e:f3:0c:d3:83:e4:50:c5:97:a9:63:7f:4d:1e:e4:1d:
         bd:15:2a:c3:e4:e9:b4:31:93:17:b5:91:0f:db:bb:0f:12:9a:
         61:36:e8:2c:1a:4b:76:e7:e8:73:eb:00:47:02:22:12:11:35:
         1c:d7:3f:84:40:f8:e8:4e:f7:9f:d9:53:af:d3:a4:f0:58:51:
         03:08:13:ba:65:d0:7a:64:88:fc:2f:2f:97:20:66:31:0d:3f:
         a2:20:90:ea:ed:b9:35:b3:01:1b:2e:9f:ed:dc:4d:e7:b2:12:
         88:aa:39:72:80:ed:ee:3d:f1:c7:5a:e5:21:bf:bc:52:7e:24:
         10:38:96:a7:e3:a6:84:f1:5e:88:6f:7a:29:7f:c7:ae:09:a9:
         e8:79:71:9e:66:60:c2:b4:ec:9e:ad:25:90:a6:ab:40:ed:dd:
         94:87:72:2e:71:28:75:a8:2a:bd:df:24:fa:be:d7:bf:ea:35:
         10:a6:42:2b:83:2b:7c:0e:02:0c:ad:5b:6a:7e:77:79:42:2a:
         6f:d9:1d:6d:cd:0c:b3:97:70:9e:a2:43:1d:a9:ac:b0:6a:07:
         b7:2c:f8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:54:35 2025 by rpki-client