Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft
File:                     aIUqt_JxT89U118KrjBorcOLNcw.mft (raw, json)
Hash identifier:          IDoa/Jw1Y4uMGPaZlICH/mInkxhB5gL+ay84w72VKXw=
Subject key identifier:   3A:1C:3D:6A:45:97:C0:28:16:FB:E6:46:04:BE:EC:2E:2D:41:D9:E4
Authority key identifier: 68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC
Certificate issuer:       /CN=A91187FD/serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC
Certificate serial:       0220
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft
Manifest number:          01F1
Signing time:             Sun 19 Oct 2025 05:36:25 +0000
Manifest this update:     Sun 19 Oct 2025 05:36:25 +0000
Manifest next update:     Sun 26 Oct 2025 05:36:25 +0000
Files and hashes:         1: aIUqt_JxT89U118KrjBorcOLNcw.crl (hash: yKL58TQpOnsyYEbv0SAX9wz26eJXZaYLAJQjOjgC6wU=)
                          2: AF2D50BE562B11F0A2095579C4F9AE02.roa (hash: 8RemKyfJQtXvAOB/Ei52MDI9KMaFn3vaXMJC+OL2BTo=)
                          3: 0EE376F8BF7111EEA53E4981C4F9AE02.roa (hash: jgvNZRe9TtRr8CjiSGyPeDv21uzfhNhZZ8tu5qtOBO0=)
                          4: F8D5DC60BF7111EE806CB182C4F9AE02.roa (hash: 6GO7eV9ptg4bEhjgmfPj3OiDNEEWB+tcYPU19G/hzs4=)
                          5: A6888CA8562B11F0A9D71979C4F9AE02.roa (hash: iDmp89Xpkp1Fll7WvZDCHcwidt+lSLGg3Xgb3jX5mHY=)
                          6: F9CB1E5ABF7111EE806CB182C4F9AE02.roa (hash: xJf9OjyZ9tl22O94Y+hCu+z+3Ka7jvHkbMt39lHsOuw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.crl
                          rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 05:36:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 544 (0x220)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91187FD, serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC
        Validity
            Not Before: Oct 19 05:36:25 2025 GMT
            Not After : Oct 26 05:36:25 2025 GMT
        Subject: CN=68f478d9-f663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:96:a2:f5:00:85:55:17:40:05:35:53:c9:75:
                    e0:7b:78:0c:82:84:fb:f5:5f:db:ec:e1:1a:df:c2:
                    c5:95:f3:d1:a0:04:2f:e5:d8:5a:cb:53:3e:89:6c:
                    e0:f0:8a:ff:df:30:66:a6:f9:49:8b:35:69:55:db:
                    f5:a9:ed:ef:24:1c:d2:f7:d1:7b:b9:19:a7:56:ec:
                    72:ab:92:8a:4d:be:67:f3:02:58:78:88:6e:e7:0e:
                    2c:14:08:2c:79:a8:a5:79:26:74:2f:0e:ca:d6:c6:
                    78:bd:19:de:03:23:f5:c6:ed:99:16:b2:0d:fc:56:
                    a3:04:f1:e3:1c:8c:48:39:4d:a4:23:4a:7f:99:90:
                    af:b8:1b:a5:32:65:8c:cc:f0:b9:46:cc:e6:0a:ab:
                    09:82:ea:02:90:9d:7a:f6:ee:f2:b3:32:cf:d9:60:
                    c2:27:25:63:42:10:83:fb:03:41:8f:dc:22:74:ba:
                    94:08:9a:c2:17:79:c2:c4:3c:71:66:e9:95:94:ad:
                    01:0e:45:8d:af:40:82:50:b9:3b:5a:fd:55:a9:aa:
                    d2:15:ed:b1:f2:6a:be:8b:17:2c:7f:75:26:72:38:
                    78:b8:3d:6b:90:72:ac:33:6d:4d:47:76:10:53:84:
                    e4:22:fe:a4:2b:e1:bc:5a:42:4f:0f:50:15:dc:73:
                    cc:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:1C:3D:6A:45:97:C0:28:16:FB:E6:46:04:BE:EC:2E:2D:41:D9:E4
            X509v3 Authority Key Identifier:
                keyid:68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:57:aa:e0:42:ac:ed:2d:ea:90:30:00:2a:65:b6:c4:78:7e:
         f3:4b:f7:3c:2b:64:d3:84:6e:e0:c0:ad:80:d5:24:d8:31:f8:
         0a:ae:6d:74:e3:b7:5f:3b:1e:f6:a8:94:ee:93:f9:ad:f0:de:
         36:c2:67:ea:1a:63:af:32:e1:06:b6:39:fa:ce:e6:40:21:49:
         fa:a2:4d:5c:a8:4c:c5:88:a4:04:8d:01:bb:6b:9d:13:b2:f2:
         23:72:40:3f:1d:16:cf:74:bc:bf:42:ec:22:fb:9f:f4:4d:4a:
         5b:df:a5:82:9b:0d:c4:0f:ad:3e:71:2a:cf:f9:e0:7b:68:3f:
         85:ff:e4:59:7b:8d:63:52:42:9d:fa:e0:28:50:14:e3:84:b7:
         a0:f4:6b:b3:be:98:de:5c:81:6b:43:9a:86:85:45:44:5d:da:
         4a:67:4d:90:46:3a:f2:bf:0b:ea:e9:16:66:6b:97:4b:46:8b:
         d1:29:28:cf:66:20:da:ec:53:eb:81:91:b7:cb:ad:0e:9b:63:
         23:99:e5:79:46:9e:16:1f:08:c9:4c:7f:a5:fc:64:b1:ad:b9:
         af:c8:06:88:15:ee:1c:23:23:e6:89:0d:26:2f:85:da:5b:db:
         a1:69:3c:5e:28:7c:2b:1f:4b:e4:c1:3c:d9:29:41:72:0b:3e:
         70:ff:d5:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:12:14 2025 by rpki-client