Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.mft
File:                     DfYzARXsRfUx_1YTHrhFWq-3dsw.mft (raw, json)
Hash identifier:          r14TpYjLrvT+SimvaIP5sRNrHTjfVfr0YMvkYjcWFpk=
Subject key identifier:   26:CD:F2:A9:98:F0:EF:8E:F3:C7:67:7A:93:8C:CB:3A:97:49:4D:0A
Authority key identifier: 0D:F6:33:01:15:EC:45:F5:31:FF:56:13:1E:B8:45:5A:AF:B7:76:CC
Certificate issuer:       /CN=A91192A0/serialNumber=0DF6330115EC45F531FF56131EB8455AAFB776CC
Certificate serial:       0C55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfYzARXsRfUx_1YTHrhFWq-3dsw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.mft
Manifest number:          0C49
Signing time:             Sat 18 Oct 2025 19:25:12 +0000
Manifest this update:     Sat 18 Oct 2025 19:25:11 +0000
Manifest next update:     Sat 25 Oct 2025 19:25:11 +0000
Files and hashes:         1: DfYzARXsRfUx_1YTHrhFWq-3dsw.crl (hash: MMtx0T/+CXWUdadaGOzpVDjmlOqQ1psBamTHYaDaoyA=)
                          2: 38FA1FDE135711EAACF3565BC4F9AE02.roa (hash: OPjG40JnviQSdGzeh3MzikJWn6EFssAQI18BDij86Aw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.crl
                          rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfYzARXsRfUx_1YTHrhFWq-3dsw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 19:25:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3157 (0xc55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91192A0, serialNumber=0DF6330115EC45F531FF56131EB8455AAFB776CC
        Validity
            Not Before: Oct 18 19:25:11 2025 GMT
            Not After : Oct 25 19:25:11 2025 GMT
        Subject: CN=68f3e998-9601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d6:c9:8e:db:21:da:45:00:50:8e:78:91:14:
                    21:9f:32:3a:49:95:71:20:85:ca:5d:3a:e9:ea:85:
                    7f:bd:0c:57:ec:de:bb:e2:29:08:f7:c7:6c:3c:31:
                    87:21:c6:e4:ee:d8:9c:c1:45:f9:bb:92:38:30:e6:
                    b9:47:48:77:9f:56:1a:6e:f4:73:5b:e6:c9:89:a3:
                    a7:19:1f:4d:0e:5b:da:2c:24:91:d1:38:f8:19:33:
                    f7:1e:6e:7d:72:d4:b4:85:45:3c:fb:e3:4c:8f:b2:
                    1c:05:9e:a2:5c:f9:a9:c8:cd:1e:08:ed:a2:26:03:
                    82:8a:94:a2:45:d8:da:1b:90:42:52:44:20:ed:8f:
                    ad:96:27:11:31:36:3b:2a:97:eb:5f:57:81:00:de:
                    51:b0:da:c7:d3:d3:36:b3:c7:54:bf:15:cd:96:f5:
                    62:5b:25:48:51:7a:a4:f9:b9:c8:be:e7:3b:a2:2e:
                    8a:30:05:aa:36:ca:d4:ca:f0:8f:cc:98:af:9d:f3:
                    9a:21:44:c8:df:1d:df:57:19:5e:d6:61:9c:37:a9:
                    b6:c6:4b:58:69:bc:ec:5a:2f:4a:7c:9b:bd:72:19:
                    e8:d5:5f:d6:3f:16:3f:36:51:aa:2d:1f:b0:f9:ff:
                    aa:17:ea:1c:12:0a:13:60:7a:b4:63:95:4b:b6:7a:
                    24:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:CD:F2:A9:98:F0:EF:8E:F3:C7:67:7A:93:8C:CB:3A:97:49:4D:0A
            X509v3 Authority Key Identifier:
                keyid:0D:F6:33:01:15:EC:45:F5:31:FF:56:13:1E:B8:45:5A:AF:B7:76:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfYzARXsRfUx_1YTHrhFWq-3dsw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:f2:59:3f:b0:77:9b:11:48:55:73:9e:81:a7:13:2a:44:7a:
         0a:81:3c:3e:78:3e:ed:52:91:1e:44:56:13:2f:88:d8:fc:22:
         f5:0d:26:a4:8e:94:c1:7b:30:f1:c2:23:54:82:95:c3:d0:25:
         59:51:d2:b0:bc:85:ae:d0:97:21:c7:f6:1e:bc:51:45:86:9d:
         24:73:af:d8:81:bf:14:63:98:a5:ca:b4:3b:1c:7a:7a:40:d5:
         99:dc:c9:cd:53:ac:93:a5:c6:25:c6:c3:49:ed:e4:de:ed:3a:
         fe:b2:75:3f:c9:32:9e:f2:f1:a2:68:e9:a4:93:16:7e:3c:9f:
         0e:44:19:a6:f5:f8:5f:b6:f2:0f:bc:db:35:94:4f:8b:4a:7c:
         d9:07:5d:cd:a7:57:73:3a:30:80:40:aa:9c:ab:57:40:0b:2d:
         07:23:2b:af:12:d0:ce:7d:0a:b5:54:8e:de:41:f1:86:7e:3a:
         ef:28:9a:db:e0:6f:7c:5a:dd:58:23:d5:0a:32:0c:01:44:8a:
         14:ed:fb:a5:a6:4d:87:98:63:d8:80:7f:58:3b:77:58:53:8c:
         09:13:c1:0e:1c:5b:c2:cd:f8:33:df:56:69:08:04:45:27:8e:
         b3:e3:47:fb:f1:30:08:14:f0:f3:50:b7:31:87:0a:96:56:ad:
         0b:39:ea:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:44:40 2025 by rpki-client