Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft
File:                     pObuKivUtt87NTuua8SJKm047yk.mft (raw, json)
Hash identifier:          sOc4bCOtrQcdL4Eb3ZIBuMFezePgB+7AmpPP7GLR4aM=
Subject key identifier:   23:83:62:AB:25:96:CC:D6:4C:74:C9:DE:93:76:85:AD:33:15:95:9D
Authority key identifier: A4:E6:EE:2A:2B:D4:B6:DF:3B:35:3B:AE:6B:C4:89:2A:6D:38:EF:29
Certificate issuer:       /CN=A9116BB8/serialNumber=A4E6EE2A2BD4B6DF3B353BAE6BC4892A6D38EF29
Certificate serial:       FA
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pObuKivUtt87NTuua8SJKm047yk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft
Manifest number:          F7
Signing time:             Sat 18 Oct 2025 23:05:49 +0000
Manifest this update:     Sat 18 Oct 2025 23:05:48 +0000
Manifest next update:     Sat 25 Oct 2025 23:05:48 +0000
Files and hashes:         1: pObuKivUtt87NTuua8SJKm047yk.crl (hash: XFjE6oIgsmL/+HxeqDXzKn1HTBdm2fc4C8X01msYxCM=)
                          2: 5B3369383DC911EFAFD59635C4F9AE02.roa (hash: 7FmlPjs6RdFVVzx2SBNvcWPo4zfkd0/gp7rPFjcGA8U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.crl
                          rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pObuKivUtt87NTuua8SJKm047yk.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 23:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 250 (0xfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116BB8, serialNumber=A4E6EE2A2BD4B6DF3B353BAE6BC4892A6D38EF29
        Validity
            Not Before: Oct 18 23:05:48 2025 GMT
            Not After : Oct 25 23:05:48 2025 GMT
        Subject: CN=68f41d4d-f525
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:db:f4:e3:8f:91:88:bb:12:0d:58:40:92:89:
                    8f:0f:66:7a:68:92:46:ee:0f:34:72:fc:9f:e0:11:
                    b6:8a:2b:ab:10:9f:95:86:d8:04:42:4c:82:4f:e4:
                    51:50:d2:36:3e:44:53:69:f5:1c:7b:0a:e0:49:6e:
                    aa:2c:93:20:4d:93:49:93:d2:af:eb:80:ce:db:d5:
                    8c:89:09:c6:ed:a3:e6:7d:a8:50:43:5a:7d:79:ef:
                    c2:31:1b:fb:32:43:c6:0e:4d:2b:9b:3e:fd:ed:51:
                    b3:91:28:29:58:43:d7:10:f7:a6:3d:c1:9f:33:8c:
                    79:77:9a:ba:fd:0a:5a:ea:fd:61:a7:fe:58:b0:43:
                    99:8f:58:c9:9b:df:74:74:d2:49:41:dd:89:21:8f:
                    78:4b:22:8b:be:3f:98:3d:c8:b6:a9:74:47:db:92:
                    c4:e0:98:99:37:a6:91:52:8c:24:43:74:cc:22:49:
                    1b:b4:09:c9:5c:69:9d:11:0b:4a:4b:a1:02:73:68:
                    55:01:0e:8f:73:2f:61:eb:50:3f:40:2b:d2:e3:be:
                    0d:22:5d:86:8e:31:7f:e1:37:96:ba:ea:39:a3:7b:
                    78:df:1f:b2:73:f0:ed:3b:eb:89:b1:37:47:cc:50:
                    88:0f:dd:15:22:68:3a:49:8b:01:5e:04:56:90:2e:
                    d6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:83:62:AB:25:96:CC:D6:4C:74:C9:DE:93:76:85:AD:33:15:95:9D
            X509v3 Authority Key Identifier:
                keyid:A4:E6:EE:2A:2B:D4:B6:DF:3B:35:3B:AE:6B:C4:89:2A:6D:38:EF:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pObuKivUtt87NTuua8SJKm047yk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:a0:ab:af:8e:20:ea:9b:2a:f7:cc:9c:84:51:40:81:e7:7f:
         be:09:10:18:0c:74:88:1b:cd:15:25:ad:3c:17:45:eb:b0:89:
         0d:b6:ed:e7:71:64:ba:fe:ff:ac:4d:9f:f5:98:c0:ef:f5:5d:
         79:3f:bf:40:80:39:7e:3a:e3:97:a6:9e:ad:97:c2:0d:48:74:
         5e:87:35:cd:03:1f:08:86:cf:6d:35:a9:47:29:c0:6e:3f:38:
         8e:2c:f2:45:83:f7:c2:e1:2d:f6:a9:6c:9b:df:0c:11:fe:c5:
         06:b7:a8:d4:89:59:c8:3c:e8:55:dc:33:25:5b:ca:b1:3f:94:
         7f:e3:b9:12:b3:fc:1e:fc:ad:17:ef:67:60:27:40:fb:af:99:
         fc:2f:86:71:ca:43:ce:07:f7:51:cd:b2:ae:bc:96:36:73:2e:
         0b:56:c4:86:72:f0:00:fa:eb:4d:6d:5b:3c:dc:3b:d5:91:c3:
         ed:60:60:b8:ae:83:51:92:62:41:7b:df:a6:97:c8:18:ea:0e:
         32:04:20:b6:78:a1:6c:46:06:b6:3f:23:c8:21:6e:09:f0:bb:
         37:7a:4e:bf:b5:d9:71:15:43:bc:8d:dc:cb:4c:ff:f0:60:6b:
         67:c8:97:10:28:a1:7e:28:7a:76:7e:4f:03:35:bf:6f:fa:60:
         ab:03:a1:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:25:23 2025 by rpki-client