Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/5QaTyhhbtl2Syvsw43b1G5Wa0tg.mft
File:                     5QaTyhhbtl2Syvsw43b1G5Wa0tg.mft (raw, json)
Hash identifier:          yQLO8zJt5Fgl8fzAjPfclOsRFebEKDSN1FJwNprbF3Q=
Subject key identifier:   4E:95:77:CC:6B:DE:3C:43:82:50:22:59:15:4F:7B:68:BB:2E:76:84
Authority key identifier: E5:06:93:CA:18:5B:B6:5D:92:CA:FB:30:E3:76:F5:1B:95:9A:D2:D8
Certificate issuer:       /CN=A9115122/serialNumber=E50693CA185BB65D92CAFB30E376F51B959AD2D8
Certificate serial:       01D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QaTyhhbtl2Syvsw43b1G5Wa0tg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/5QaTyhhbtl2Syvsw43b1G5Wa0tg.mft
Manifest number:          01CC
Signing time:             Sun 19 Oct 2025 05:19:32 +0000
Manifest this update:     Sun 19 Oct 2025 05:19:32 +0000
Manifest next update:     Sun 26 Oct 2025 05:19:32 +0000
Files and hashes:         1: 5QaTyhhbtl2Syvsw43b1G5Wa0tg.crl (hash: DroNaiUUjW296zNcHFP2XGmetxW6PANZN2nFHWPvqag=)
                          2: D4B97082EF2211EDB7EFE882C4F9AE02.roa (hash: HWnaY2EEm6u/FMZ1I67pi/PyglY7//JccNuuPPpBYpw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/5QaTyhhbtl2Syvsw43b1G5Wa0tg.crl
                          rsync://rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/5QaTyhhbtl2Syvsw43b1G5Wa0tg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QaTyhhbtl2Syvsw43b1G5Wa0tg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 05:19:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 464 (0x1d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9115122, serialNumber=E50693CA185BB65D92CAFB30E376F51B959AD2D8
        Validity
            Not Before: Oct 19 05:19:32 2025 GMT
            Not After : Oct 26 05:19:32 2025 GMT
        Subject: CN=68f474e4-3339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9a:a7:89:30:39:89:b0:6f:b0:5e:38:3a:a0:
                    00:58:f4:55:26:ba:03:a5:cc:4a:d5:d6:9e:99:fa:
                    d5:c7:a3:65:66:de:d8:df:43:08:3c:f9:16:fb:35:
                    d8:45:61:e0:46:06:2f:7a:50:b2:2b:7c:37:54:3b:
                    a6:83:54:59:f8:2d:e9:45:72:33:b3:35:78:9a:af:
                    b7:ed:f5:2c:45:b7:11:46:e5:8e:e5:3b:63:fd:e3:
                    2c:20:27:a6:79:30:a0:98:40:cf:4e:65:c9:30:58:
                    00:67:89:4e:a4:73:92:73:57:94:d8:e3:bc:ec:44:
                    8d:f9:f9:42:b2:97:2b:1f:f5:45:23:c2:7f:5c:90:
                    f6:86:4f:a0:d7:04:99:a8:43:c5:62:d8:0a:93:dd:
                    1a:e8:21:46:95:02:0c:72:29:6d:2d:a1:47:4c:30:
                    a2:ad:89:6e:8a:93:b3:2a:87:f7:a3:b4:a3:30:7f:
                    80:3d:9b:7b:a3:6a:87:44:f2:ce:7c:6d:d1:2f:ee:
                    44:55:56:ba:f9:62:ba:7a:1d:af:dc:c4:07:62:d1:
                    db:0f:cc:32:70:7a:68:49:0c:d1:6e:a6:24:b4:27:
                    3e:37:a9:73:8a:dc:63:df:00:45:5e:05:03:ec:6b:
                    ea:73:8b:eb:f9:78:fc:96:f3:48:5d:1d:74:b7:65:
                    2c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:95:77:CC:6B:DE:3C:43:82:50:22:59:15:4F:7B:68:BB:2E:76:84
            X509v3 Authority Key Identifier:
                keyid:E5:06:93:CA:18:5B:B6:5D:92:CA:FB:30:E3:76:F5:1B:95:9A:D2:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/5QaTyhhbtl2Syvsw43b1G5Wa0tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QaTyhhbtl2Syvsw43b1G5Wa0tg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/5QaTyhhbtl2Syvsw43b1G5Wa0tg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:d5:0b:d3:ab:ad:09:2a:9c:2c:30:5d:37:e7:ff:fa:95:91:
         49:fb:e8:56:5e:88:af:46:51:c5:3d:69:ed:f3:1a:d2:06:a4:
         84:93:f5:c3:3c:c3:f7:40:5a:3d:5d:50:72:be:e1:bc:67:52:
         af:71:2b:6c:6c:ec:6a:18:20:4d:be:c6:c5:2b:70:fe:16:a3:
         67:26:f9:36:1b:6e:bd:fc:fb:8e:50:fb:ad:57:97:1a:48:47:
         54:16:c5:58:01:ec:be:91:f6:fa:2b:13:5d:bb:d0:f0:69:65:
         93:64:4c:c9:ae:40:a8:5e:dd:8f:ee:ab:a3:b3:30:c2:98:40:
         63:66:72:65:0f:a9:28:60:84:2d:94:e4:74:ce:c3:ab:8e:4e:
         57:e4:9e:40:72:03:59:35:a3:cd:ee:02:89:95:72:96:e8:1b:
         1d:a5:ae:11:bf:29:9d:de:3f:95:7f:2e:f2:0f:95:fc:e1:ad:
         00:5b:7a:d1:60:71:e9:71:1f:55:bb:78:b8:68:03:3b:a6:26:
         44:dc:d0:27:2c:48:b3:8e:38:6c:97:b3:86:ca:7a:00:e0:83:
         2a:f7:60:3e:bf:79:25:11:a2:2a:9e:30:71:b5:21:69:c7:18:
         e7:16:81:be:50:9f:85:12:25:f5:2d:f4:51:98:73:6c:5a:52:
         50:ab:09:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:48:03 2025 by rpki-client