Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.mft
File:                     cKRczAWTxHEjY1BaCmTdO3NXboo.mft (raw, json)
Hash identifier:          jAEY/IfLrwyInxZQUi9LgLedC/p54w16dOJ+l7+hHfg=
Subject key identifier:   22:83:E3:63:EE:57:3C:A9:BC:5C:B0:B8:47:D7:4C:75:95:ED:E4:93
Authority key identifier: 70:A4:5C:CC:05:93:C4:71:23:63:50:5A:0A:64:DD:3B:73:57:6E:8A
Certificate issuer:       /CN=A911807E/serialNumber=70A45CCC0593C4712363505A0A64DD3B73576E8A
Certificate serial:       07E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.mft
Manifest number:          07CF
Signing time:             Sat 18 Oct 2025 22:36:12 +0000
Manifest this update:     Sat 18 Oct 2025 22:36:11 +0000
Manifest next update:     Sat 25 Oct 2025 22:36:11 +0000
Files and hashes:         1: cKRczAWTxHEjY1BaCmTdO3NXboo.crl (hash: sQLwC2/SZQEkfH7zDxSxm9OABPICQ8UJka9L0pcWCGY=)
                          2: 99551366132E11F0B588DB49C4F9AE02.roa (hash: OTyt0H9z91P3bWTg6OaaUT+jY+dAsFXcfj0LUHtNJzE=)
                          3: 98657342132E11F0B588DB49C4F9AE02.roa (hash: Fg/6h/dDbLolGq+Xi5TtVe0Kn2HcE86oCxXe7cAfHc4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.crl
                          rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 22:36:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2024 (0x7e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911807E, serialNumber=70A45CCC0593C4712363505A0A64DD3B73576E8A
        Validity
            Not Before: Oct 18 22:36:11 2025 GMT
            Not After : Oct 25 22:36:11 2025 GMT
        Subject: CN=68f4165b-5810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6e:bc:d3:a0:2c:a3:76:6f:52:c5:d7:71:2c:
                    c2:dd:07:bf:89:42:03:23:aa:f3:a2:31:8b:a9:c4:
                    bd:c4:28:fb:2d:b8:1d:69:3a:b0:a9:a1:1d:4e:39:
                    ab:2e:15:c2:10:36:e3:27:03:39:99:86:1a:33:6d:
                    e5:d2:52:f6:15:30:ee:ab:41:18:e0:72:c1:17:a9:
                    60:53:07:c7:aa:9f:8b:78:a8:b2:5c:5e:4b:a3:6b:
                    b1:8b:b0:b5:05:e3:b6:ce:b9:2f:a6:f7:52:9e:b4:
                    81:bc:d3:a4:af:a1:63:2f:10:cc:c8:af:66:90:d4:
                    1f:5c:c4:04:41:69:13:e9:e5:36:3f:34:1e:16:81:
                    74:9e:cc:b5:70:ad:d6:3b:b5:7e:86:a9:ec:fa:37:
                    ac:26:4c:b0:e0:2f:15:bb:74:ea:c5:a5:fc:0d:e3:
                    b8:73:e0:38:1a:6a:15:ae:00:73:c0:cf:8e:36:c5:
                    59:c5:28:5c:d5:00:97:02:fe:93:63:df:83:11:25:
                    f3:2b:38:5e:1a:21:91:2b:59:80:7c:ce:8f:83:26:
                    78:56:9d:20:04:39:a5:7d:b4:81:15:6e:fa:60:a0:
                    13:e4:49:25:1d:9f:32:7d:9c:82:8f:2f:97:1e:a5:
                    5e:ea:a7:b9:a8:47:b7:84:fc:d4:90:d8:b8:2c:ed:
                    b8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:83:E3:63:EE:57:3C:A9:BC:5C:B0:B8:47:D7:4C:75:95:ED:E4:93
            X509v3 Authority Key Identifier:
                keyid:70:A4:5C:CC:05:93:C4:71:23:63:50:5A:0A:64:DD:3B:73:57:6E:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:fb:dd:f1:24:da:7c:11:f8:77:aa:e5:ae:a6:41:fa:a9:41:
         c4:87:d6:c7:6b:21:ff:26:1b:ef:e1:d5:c6:7e:30:e0:30:a2:
         38:41:5e:8e:b7:66:f6:53:ae:5b:45:d7:30:8d:35:af:1b:66:
         98:33:e9:ff:29:ac:2c:22:66:a9:b0:b1:0c:00:b0:6d:03:aa:
         f2:bd:25:b9:7d:07:21:0d:0e:0f:18:87:41:fd:e6:1b:eb:db:
         09:ff:53:f2:97:a7:24:91:6a:12:35:8f:19:46:ac:b1:cd:09:
         50:f3:c2:5b:d8:2c:d8:21:4c:5a:be:65:17:a4:4e:d0:5f:f1:
         59:85:89:00:b9:4a:cb:3e:43:6a:3b:5f:a1:50:f5:48:f6:36:
         38:b9:63:7c:53:03:74:d4:6c:3f:97:b4:dc:1a:08:4c:0b:92:
         57:60:fb:2e:4a:1a:39:71:61:e0:d1:8a:c8:c8:97:2b:82:1a:
         d4:a5:0d:e1:00:75:e6:f2:ae:c9:be:fa:98:98:82:6c:27:01:
         80:35:30:e5:e9:a6:05:da:37:54:3f:fa:e7:61:ad:10:df:fb:
         6e:8a:87:ae:33:ba:e9:83:3e:02:54:54:ad:b7:80:ce:c2:94:
         69:87:a9:d2:63:40:f7:57:db:07:6a:6c:20:2b:aa:c7:9a:0c:
         bf:a0:ea:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:13:55 2025 by rpki-client