Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft
File:                     4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft (raw, json)
Hash identifier:          YaDFR5yMP4HMmLnFVgCr9IwsAgmYllJ/BE5Y+Pan7a0=
Subject key identifier:   DE:A9:47:63:15:A7:AD:1C:F4:8B:D6:2B:C7:48:CA:98:B1:EA:20:BF
Authority key identifier: E3:E1:CC:CF:83:D5:2C:B8:A3:C9:87:A8:11:E1:F8:07:F3:39:3E:7F
Certificate issuer:       /CN=A911BDDF/serialNumber=E3E1CCCF83D52CB8A3C987A811E1F807F3393E7F
Certificate serial:       0232
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft
Manifest number:          0226
Signing time:             Sun 19 Oct 2025 04:26:26 +0000
Manifest this update:     Sun 19 Oct 2025 04:26:25 +0000
Manifest next update:     Sun 26 Oct 2025 04:26:25 +0000
Files and hashes:         1: 4-HMz4PVLLijyYeoEeH4B_M5Pn8.crl (hash: 8RdXv0+nI7FKT8jJlLw2CE42jTuAJdWV2KMlTDsU2gI=)
                          2: 13BC244C61A311F0A6E3910CC4F9AE02.roa (hash: PZ/Rcq3UjWrVkjq/myGAfI/HR3kWEFWwoh0XtDhdPhA=)
                          3: E8F2B1C224E911F0B5C26715C4F9AE02.roa (hash: G8jsJ+mpJjx+P09daIjyz9j+xHd4TGz4K0la+7J5BHY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.crl
                          rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 04:26:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 562 (0x232)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BDDF, serialNumber=E3E1CCCF83D52CB8A3C987A811E1F807F3393E7F
        Validity
            Not Before: Oct 19 04:26:25 2025 GMT
            Not After : Oct 26 04:26:25 2025 GMT
        Subject: CN=68f46872-c831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:b4:bf:5d:14:52:ae:db:03:82:78:22:bc:58:
                    72:71:a6:0b:46:fa:1b:1a:bf:ae:47:5c:75:e6:06:
                    b2:f1:ad:03:00:00:cd:12:aa:79:1e:6e:10:88:ae:
                    36:62:d7:c3:73:85:e8:f4:f0:60:c7:f9:56:da:38:
                    75:72:b7:b6:69:41:cc:4c:d7:34:6a:51:72:db:98:
                    51:0d:1d:d7:17:95:a7:4b:d3:7e:3b:c5:a5:dc:00:
                    63:de:60:8d:ce:31:97:04:4c:47:ec:fc:cb:94:51:
                    70:6a:c4:c5:ca:53:48:08:99:cc:91:de:7a:55:66:
                    90:8b:75:1c:80:c9:6c:47:a8:46:18:84:fe:1f:d2:
                    ca:8b:a2:00:b5:7d:12:dc:1a:a9:3e:0f:11:46:5a:
                    24:b2:46:8f:f4:68:5f:6b:51:4c:6c:10:ca:ec:83:
                    d7:c0:69:79:42:74:b9:d5:a6:15:be:f3:4e:50:e8:
                    c1:0e:4d:e2:f8:b5:de:24:bd:d4:06:82:9c:b6:e8:
                    f5:21:37:16:b0:63:1a:72:83:ff:25:e1:97:63:c4:
                    8a:e9:27:f1:ca:de:76:e4:6d:22:e4:59:cd:05:5f:
                    f2:e8:6f:56:75:80:f0:3c:2b:ff:a3:11:e5:48:b7:
                    c4:9e:58:47:60:98:fe:f6:b0:2a:43:c6:d6:69:35:
                    a6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:A9:47:63:15:A7:AD:1C:F4:8B:D6:2B:C7:48:CA:98:B1:EA:20:BF
            X509v3 Authority Key Identifier:
                keyid:E3:E1:CC:CF:83:D5:2C:B8:A3:C9:87:A8:11:E1:F8:07:F3:39:3E:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:42:67:55:dc:60:9e:a8:1b:eb:55:2d:be:34:2c:03:79:30:
         6a:8d:ef:5a:4b:da:b7:09:99:a7:ce:7e:7f:17:46:bc:32:27:
         ed:26:d2:9a:44:da:82:f6:69:21:5c:bd:87:34:51:cd:4a:20:
         d3:c5:a9:5e:91:bb:1c:b6:c1:ee:3d:5e:b4:7c:00:da:78:8e:
         60:4f:84:61:da:d6:ea:49:fe:65:20:b7:19:0e:a0:b7:dd:4d:
         03:89:4f:b7:cc:3d:9f:4a:6a:96:93:80:22:ac:0f:6e:c1:97:
         a0:f8:9d:1e:43:19:49:d5:ba:f6:db:33:c3:fd:f9:4c:f4:fc:
         db:9b:61:95:63:6e:4e:b0:f5:39:93:c5:0c:8d:e4:d3:2f:f7:
         5b:85:28:3d:d4:42:8d:be:37:e7:93:22:4b:61:81:b4:81:4e:
         f2:88:48:e2:37:5b:41:32:81:6e:a1:4b:b4:63:67:0c:d2:ed:
         a3:99:73:be:f3:f0:d1:51:74:cc:51:dd:bc:ea:9f:97:38:ed:
         d2:f9:7b:bb:d9:a5:3f:35:fe:14:ea:35:ec:b4:13:b7:e3:44:
         cd:86:61:41:aa:66:46:18:bb:3b:4b:25:64:4f:f1:de:ba:fb:
         69:f7:d7:87:05:19:2c:b6:7c:5f:e0:d2:b5:fe:af:f6:31:f8:
         82:9e:e6:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:49:39 2025 by rpki-client