Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.mft
File:                     rmWOo3fqEYQLCOpsiNkJDotsUgQ.mft (raw, json)
Hash identifier:          Xg3XJEqvcD5p1Lwh4wbfNClO+6vW2D9meZQFIsoUi+4=
Subject key identifier:   80:84:C7:2D:A4:F0:17:37:94:11:75:1D:96:55:D2:D8:30:D2:C2:E9
Authority key identifier: AE:65:8E:A3:77:EA:11:84:0B:08:EA:6C:88:D9:09:0E:8B:6C:52:04
Certificate issuer:       /CN=A911A69A/serialNumber=AE658EA377EA11840B08EA6C88D9090E8B6C5204
Certificate serial:       E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rmWOo3fqEYQLCOpsiNkJDotsUgQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.mft
Manifest number:          E4
Signing time:             Sun 19 Oct 2025 08:26:54 +0000
Manifest this update:     Sun 19 Oct 2025 08:26:53 +0000
Manifest next update:     Sun 26 Oct 2025 08:26:53 +0000
Files and hashes:         1: rmWOo3fqEYQLCOpsiNkJDotsUgQ.crl (hash: rbf4h/cChpNPZkby/S17+8KyOyBhiboDBc83fDox378=)
                          2: 39E76DD0589311EF88BF4665C4F9AE02.roa (hash: t3nWUOarrxhEFD60ip2NaXslcMEcqGLVxqGfot6fF3I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.crl
                          rsync://rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rmWOo3fqEYQLCOpsiNkJDotsUgQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 08:26:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 232 (0xe8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A69A, serialNumber=AE658EA377EA11840B08EA6C88D9090E8B6C5204
        Validity
            Not Before: Oct 19 08:26:53 2025 GMT
            Not After : Oct 26 08:26:53 2025 GMT
        Subject: CN=68f4a0ce-eaa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8e:2f:55:05:85:0d:63:cb:fe:98:b0:d9:01:
                    51:a0:a2:48:bb:05:d9:9b:cb:a4:d6:f5:62:8c:92:
                    9b:a4:f6:d6:c8:9b:26:9f:88:7e:cd:a2:8b:e5:a1:
                    cb:a9:00:11:57:19:2a:e8:cc:f0:4d:55:2e:3e:38:
                    32:cb:54:ca:34:b9:0d:21:26:2d:a7:3a:63:72:e2:
                    ee:ff:eb:a0:6f:dd:95:36:c4:f1:50:b3:a2:37:98:
                    f1:15:25:df:3a:25:07:fc:be:8c:70:01:88:cb:71:
                    e3:73:5f:6e:fd:7d:52:87:07:e4:de:ae:83:86:8a:
                    95:ae:b4:7a:15:b7:1b:82:fa:37:62:f1:4d:4e:6c:
                    83:a4:66:50:1f:4f:b7:84:c9:f3:2d:7a:0e:4f:ef:
                    f8:43:75:a8:30:2c:dd:ae:19:6c:08:c9:d8:bc:60:
                    75:b5:8e:4e:30:a3:12:62:17:97:c5:39:7f:4b:d3:
                    58:22:05:a6:a2:d2:d6:c0:d3:e9:c6:c6:99:41:54:
                    99:9a:ad:6b:c0:10:36:4b:01:21:41:88:72:ab:82:
                    83:93:0b:fc:2b:9d:5e:37:34:ba:26:8c:2c:5a:ce:
                    4a:1b:50:be:3e:f2:d7:c5:4a:0f:42:3a:af:5c:82:
                    07:d8:99:b7:b5:b7:bf:a0:9c:de:83:df:4d:50:3c:
                    74:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:84:C7:2D:A4:F0:17:37:94:11:75:1D:96:55:D2:D8:30:D2:C2:E9
            X509v3 Authority Key Identifier:
                keyid:AE:65:8E:A3:77:EA:11:84:0B:08:EA:6C:88:D9:09:0E:8B:6C:52:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rmWOo3fqEYQLCOpsiNkJDotsUgQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:f0:b5:b0:bd:3a:89:11:e5:b5:3e:aa:d1:a6:bc:86:76:9a:
         c0:38:37:2f:b2:37:03:d0:64:ac:b8:60:b2:d1:5e:42:0f:cf:
         b7:00:88:d5:7d:c1:69:2e:8d:1e:29:23:e7:ec:05:f1:10:2d:
         32:2d:14:ed:c5:0d:7f:28:d8:57:7d:1e:66:24:df:e3:bf:52:
         55:24:15:3f:14:43:7f:b7:27:4a:68:82:fd:3c:94:86:8c:a1:
         a8:f9:68:f1:02:30:b1:2b:68:08:a8:61:9c:59:f0:94:d5:d5:
         da:90:b8:d4:40:4c:c4:50:6e:3f:9f:32:2b:a7:63:bf:88:21:
         cc:e6:80:46:63:76:17:7a:9f:ad:86:49:31:61:89:42:a1:c5:
         94:b4:e3:fe:1a:db:c9:44:a1:85:3c:ee:eb:12:d0:fd:21:99:
         8e:ff:4d:f0:e1:58:e2:5e:b5:37:d6:85:f4:69:66:68:93:00:
         9b:98:66:b6:3e:14:01:34:d4:ce:dd:83:d3:32:82:5d:6c:8e:
         dc:c5:4a:97:47:3d:29:bc:ed:21:c8:c6:b7:88:c8:48:17:4c:
         fa:45:e2:a0:d7:bd:d0:10:12:7e:d9:f2:bd:98:46:6a:3c:33:
         7f:90:79:f7:9d:f5:18:5c:3f:58:8f:a0:ab:52:5b:b3:ee:db:
         22:f6:55:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:32:24 2025 by rpki-client