Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft
File:                     AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft (raw, json)
Hash identifier:          bADq3jtlzRodBUkqDrymvBKzN9hHkET8KRhJP3viLG8=
Subject key identifier:   82:BA:BC:DE:3F:5D:B1:0F:7F:A2:75:B1:87:01:CB:85:77:4A:BE:76
Authority key identifier: 02:15:50:2A:A8:FF:DC:72:1D:7F:84:F7:4C:D0:70:B7:56:39:00:16
Certificate issuer:       /CN=A91147EF/serialNumber=0215502AA8FFDC721D7F84F74CD070B756390016
Certificate serial:       09A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft
Manifest number:          0997
Signing time:             Sat 18 Oct 2025 21:06:39 +0000
Manifest this update:     Sat 18 Oct 2025 21:06:38 +0000
Manifest next update:     Sat 25 Oct 2025 21:06:38 +0000
Files and hashes:         1: AhVQKqj_3HIdf4T3TNBwt1Y5ABY.crl (hash: WjL4PvfmjA5xUQaJNyFUraap3mlaFl7S1O3z4ET6zmk=)
                          2: 84D32F2AE32411EA800C6724C4F9AE02.roa (hash: DaSUtI7cCFZVDFGMxaMRlNVdC4PaCp9TfzAzL8z3Ug0=)
                          3: 38EC4D321F2711EB93A71042C4F9AE02.roa (hash: bvQWUn/Y7cckd5n8bfNYd/nHmrLV3J+fhc4s5WO5wQQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.crl
                          rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 21:06:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2470 (0x9a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91147EF, serialNumber=0215502AA8FFDC721D7F84F74CD070B756390016
        Validity
            Not Before: Oct 18 21:06:38 2025 GMT
            Not After : Oct 25 21:06:38 2025 GMT
        Subject: CN=68f4015f-2cff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:8a:14:fd:24:02:05:29:8e:01:af:3f:1c:a7:
                    e4:d2:16:a2:21:d1:a0:6d:05:82:1a:58:7b:2c:b5:
                    76:4d:68:83:33:4b:ae:04:88:26:15:21:82:85:3f:
                    50:6c:74:14:e8:68:85:11:7a:d7:c5:5a:f2:7b:c4:
                    73:99:55:42:0f:72:6e:46:58:0e:23:e6:fc:20:6f:
                    b4:8c:80:6d:78:cc:59:ac:3a:5c:bf:92:42:01:00:
                    64:3f:dc:71:7d:b7:ed:fc:10:f8:fa:4c:d6:fa:96:
                    e1:7c:bf:66:e8:b9:36:61:8e:73:db:28:79:88:e9:
                    39:5f:84:00:72:1b:d8:f0:a3:af:47:6b:24:7d:97:
                    f2:48:bb:05:ce:5d:54:74:ce:63:14:95:48:dd:ff:
                    83:49:b0:33:ba:96:bc:2c:43:a3:02:8e:2d:5d:8a:
                    bf:f2:0f:64:28:74:c5:fc:35:6a:e5:f0:f0:a1:1c:
                    54:60:1d:90:e4:45:4e:ed:f1:aa:f0:f0:1d:55:e8:
                    1c:5c:b8:a4:1a:0d:ae:cb:6c:94:98:0e:b0:0e:13:
                    69:4b:1c:75:57:82:25:f6:e2:f4:2c:cc:b9:c7:58:
                    95:d0:84:bd:80:03:b0:b8:94:2d:f6:c4:3f:14:c6:
                    a1:f3:b3:74:84:ef:e4:8a:9f:f5:a5:03:53:dd:a4:
                    a6:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:BA:BC:DE:3F:5D:B1:0F:7F:A2:75:B1:87:01:CB:85:77:4A:BE:76
            X509v3 Authority Key Identifier:
                keyid:02:15:50:2A:A8:FF:DC:72:1D:7F:84:F7:4C:D0:70:B7:56:39:00:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:af:9d:6e:93:fe:d3:23:2b:45:ac:4c:44:96:d9:b4:ed:91:
         07:eb:1d:be:88:23:fe:a8:48:33:1e:c7:07:2c:be:26:d7:e5:
         20:d9:8a:c1:a1:a5:ae:c9:a5:44:3f:06:25:cd:e5:09:d5:35:
         f3:61:5d:f1:d2:e7:e8:60:3c:5a:51:c3:86:b4:45:56:86:f8:
         50:ec:8f:d1:f6:3e:06:ec:61:3e:f6:a8:00:61:3d:f6:28:83:
         de:ee:a6:4a:77:ad:ff:a0:83:10:19:ba:51:f7:9b:f7:56:87:
         4f:ee:1b:f1:4d:25:ba:42:68:1d:ab:a4:90:f1:73:6c:2b:cf:
         90:ae:19:cb:00:e0:7c:59:c3:54:86:be:a2:51:66:b4:cb:d0:
         69:e9:39:a6:29:58:b3:47:77:42:99:03:ba:25:1e:51:3d:e3:
         46:e2:7c:e7:80:3f:0e:19:4c:2a:d6:3d:5a:8f:b4:b9:fb:51:
         51:0e:c0:f5:70:f0:23:b9:17:da:2a:23:58:22:c8:d8:bb:e1:
         47:33:29:41:68:6d:ea:a1:ea:d5:0c:5f:c6:f4:d3:33:25:8f:
         b7:69:08:99:a7:c1:34:99:63:94:49:c2:83:0d:c3:10:32:70:
         07:48:76:81:3a:f1:bf:9b:2a:91:fd:0d:45:73:5a:be:49:d9:
         6e:25:a6:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:44:12 2025 by rpki-client