Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.mft
File:                     iNHJlOgQj8ClM99LuOLOjRxLnxc.mft (raw, json)
Hash identifier:          dy0cRSrQPJQ6akl1j7erRsbvknlnHQNWnkAwa3kvoBk=
Subject key identifier:   C1:E5:83:B1:C7:90:6D:5E:36:11:F4:E5:9D:9F:73:CF:FD:AF:EB:29
Authority key identifier: 88:D1:C9:94:E8:10:8F:C0:A5:33:DF:4B:B8:E2:CE:8D:1C:4B:9F:17
Certificate issuer:       /CN=A911A702/serialNumber=88D1C994E8108FC0A533DF4BB8E2CE8D1C4B9F17
Certificate serial:       069C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNHJlOgQj8ClM99LuOLOjRxLnxc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.mft
Manifest number:          0693
Signing time:             Sat 18 Oct 2025 23:53:50 +0000
Manifest this update:     Sat 18 Oct 2025 23:53:50 +0000
Manifest next update:     Sat 25 Oct 2025 23:53:50 +0000
Files and hashes:         1: iNHJlOgQj8ClM99LuOLOjRxLnxc.crl (hash: 0RnTYnsXTsKIADw/4l8tanJJEQpFoUEHxMFymhJ6JIk=)
                          2: 6339493A516311ED90F04711C4F9AE02.roa (hash: UZVHz0fvOssKPNLwiZ35IeL2xHQA6a7FTosxanmpoZw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.crl
                          rsync://rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNHJlOgQj8ClM99LuOLOjRxLnxc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 23:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1692 (0x69c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A702, serialNumber=88D1C994E8108FC0A533DF4BB8E2CE8D1C4B9F17
        Validity
            Not Before: Oct 18 23:53:50 2025 GMT
            Not After : Oct 25 23:53:50 2025 GMT
        Subject: CN=68f4288e-e787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:06:a6:8c:8c:ce:33:55:b7:b4:53:6c:bf:fd:
                    fc:81:aa:9d:9d:e2:ee:1e:df:fd:90:25:29:50:6e:
                    e5:05:a5:32:58:87:36:30:66:29:d5:9c:6f:9f:25:
                    5c:1c:5f:0d:e4:2e:d6:25:78:ea:70:76:b2:9e:6d:
                    42:88:98:35:26:42:5f:78:09:44:50:b5:cf:b8:84:
                    d0:38:d0:97:bf:96:ef:3d:b3:89:16:9e:0e:56:5c:
                    63:3a:f7:db:3c:bf:25:2e:f9:eb:ef:25:13:81:fc:
                    8f:c1:3c:a7:1b:b6:c4:2c:a0:18:22:8d:81:c9:97:
                    12:50:4f:ff:d1:f6:61:8a:a4:a6:df:fc:13:84:8c:
                    43:54:c5:82:b7:ff:d6:74:9b:3a:37:06:cd:43:9f:
                    1b:2a:07:9d:d2:99:45:b3:fe:11:5e:12:9b:71:20:
                    a5:cc:0f:8e:c0:8c:b8:43:ad:1a:32:1e:b1:1c:90:
                    f3:c4:9c:6a:42:e5:fc:15:be:4b:19:ed:c3:1c:b7:
                    79:39:34:ec:6d:f3:bc:46:69:2b:19:c1:df:c6:69:
                    04:cb:8d:51:37:eb:42:08:5c:b3:7b:5d:77:8e:8f:
                    7f:6a:14:d3:ec:14:26:11:f6:71:b6:8d:2b:ee:b7:
                    d6:f0:d3:9a:e7:bd:b5:b1:b3:09:be:31:29:64:54:
                    a9:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:E5:83:B1:C7:90:6D:5E:36:11:F4:E5:9D:9F:73:CF:FD:AF:EB:29
            X509v3 Authority Key Identifier:
                keyid:88:D1:C9:94:E8:10:8F:C0:A5:33:DF:4B:B8:E2:CE:8D:1C:4B:9F:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNHJlOgQj8ClM99LuOLOjRxLnxc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:cf:dd:9b:0d:b9:57:f4:67:9a:95:f9:00:33:f2:16:46:27:
         b8:0b:0b:54:35:3b:ca:87:13:e0:27:e4:a8:b6:47:17:9e:46:
         f0:c4:27:6c:93:24:ca:b9:78:ae:d5:09:c9:25:a4:9a:c3:85:
         e4:33:0c:b5:1f:ed:6a:76:23:2d:34:93:39:e8:19:19:1e:da:
         70:32:b1:aa:2a:bd:3a:90:38:63:d2:6f:75:90:83:cd:6d:4a:
         08:47:26:71:58:b8:f4:5f:f4:02:86:5a:e7:fa:35:fa:f7:32:
         f2:34:0d:5f:39:14:a2:f5:8c:93:50:93:6a:d6:66:eb:20:b0:
         a4:23:f1:b3:22:4b:7b:c2:2a:a5:69:30:ed:d6:9b:ab:ca:90:
         7e:c3:b7:77:f5:1f:8a:16:20:cd:8d:f4:5d:58:80:e0:ac:96:
         d2:1b:d5:c8:57:15:54:49:c2:09:0d:f1:37:cf:fc:4d:c9:f3:
         83:ee:41:bf:49:76:b2:9e:84:63:8c:c0:0f:2c:a2:04:c7:90:
         64:19:67:31:05:3f:bf:53:ea:ef:f7:f4:57:8e:05:d4:0a:61:
         6e:b5:90:de:ee:53:5b:8f:78:2f:63:8e:3e:5f:53:08:fe:10:
         e8:25:dc:b6:16:7f:ee:66:40:ad:df:e1:98:33:8c:67:22:54:
         5b:1b:8e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:32:05 2025 by rpki-client