Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.mft
File:                     -wGX2AKmYYboQL1i6I7kDtlelSk.mft (raw, json)
Hash identifier:          kyxk2PITNcO4zbBglfncTH4ePgo0bndJMO70W5vf6ok=
Subject key identifier:   E7:DC:0E:C5:20:C8:DF:4A:CE:89:01:77:9E:5C:B3:1F:FC:FA:50:1C
Authority key identifier: FB:01:97:D8:02:A6:61:86:E8:40:BD:62:E8:8E:E4:0E:D9:5E:95:29
Certificate issuer:       /CN=A911CC1D/serialNumber=FB0197D802A66186E840BD62E88EE40ED95E9529
Certificate serial:       01F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wGX2AKmYYboQL1i6I7kDtlelSk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.mft
Manifest number:          01E5
Signing time:             Sun 19 Oct 2025 05:08:26 +0000
Manifest this update:     Sun 19 Oct 2025 05:08:25 +0000
Manifest next update:     Sun 26 Oct 2025 05:08:25 +0000
Files and hashes:         1: -wGX2AKmYYboQL1i6I7kDtlelSk.crl (hash: gRy3BG4VmoWB2axAe6CFozx48aLKW5vzEO7/7m8j5R0=)
                          2: 60377A8C695311EEB599BD23C4F9AE02.roa (hash: QINk3E1nw1E0SQ1IAaOysVdywjs2/haOG/J5DYDItzc=)
                          3: 8FF4E2E2EFAE11EDBD96F26BC4F9AE02.roa (hash: ftIkLDDMGwCQRtXIOQIkbcVqJAF5OWBHQPg/Mtm9NhM=)
                          4: 359322B2D1E711EDB90DBF27C4F9AE02.roa (hash: AD9qVo/dM6pGPhLPe3MxIhjrlZM+iJ6Ior0TsYh1fCs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.crl
                          rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wGX2AKmYYboQL1i6I7kDtlelSk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 05:08:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 498 (0x1f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911CC1D, serialNumber=FB0197D802A66186E840BD62E88EE40ED95E9529
        Validity
            Not Before: Oct 19 05:08:25 2025 GMT
            Not After : Oct 26 05:08:25 2025 GMT
        Subject: CN=68f4724a-44a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d9:f8:29:33:dc:7f:58:2e:df:a0:4c:2f:b7:
                    66:35:27:50:b2:11:b0:f8:47:29:df:40:fc:4b:f1:
                    12:7b:b2:f6:38:3f:f7:99:72:e6:13:19:c5:aa:59:
                    7d:fd:08:47:8b:5d:21:c1:57:63:22:78:53:ab:09:
                    6e:f3:38:49:84:46:4b:8d:60:d7:67:18:70:7f:ae:
                    78:db:93:92:f2:24:35:58:0c:56:b9:a4:53:31:5e:
                    f1:e7:20:c0:e7:d8:01:1c:7b:09:a4:13:56:21:13:
                    09:5e:dd:24:a0:7b:17:6c:a5:c2:a5:18:6e:78:60:
                    74:fd:16:0b:0c:41:8f:fc:e0:0d:8d:cb:48:57:19:
                    68:fd:a7:d1:5e:40:87:0b:35:40:01:98:16:6f:ed:
                    43:09:83:60:ae:52:20:97:76:92:b6:ba:d0:99:70:
                    f8:aa:20:d5:1b:19:8d:15:63:e9:38:99:47:06:0b:
                    c2:f8:c4:98:84:cd:a7:ee:24:25:9f:fc:36:2b:1a:
                    6d:98:41:a2:11:57:09:4e:92:4a:df:fb:79:b1:ec:
                    fc:95:58:2b:9e:a7:4f:4f:9c:f8:bf:26:9e:14:dd:
                    78:a1:aa:21:bb:98:25:04:77:00:36:26:56:f5:6b:
                    86:06:5c:57:a0:34:94:1d:4b:66:f0:aa:c9:2c:60:
                    9e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:DC:0E:C5:20:C8:DF:4A:CE:89:01:77:9E:5C:B3:1F:FC:FA:50:1C
            X509v3 Authority Key Identifier:
                keyid:FB:01:97:D8:02:A6:61:86:E8:40:BD:62:E8:8E:E4:0E:D9:5E:95:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wGX2AKmYYboQL1i6I7kDtlelSk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:b2:8d:c5:22:a6:3b:27:6d:3a:93:de:23:de:6d:b1:ef:f4:
         25:d5:17:62:06:24:3f:fe:7d:b2:2c:a1:3e:06:64:46:0a:d2:
         ae:e2:7f:b1:24:46:40:b6:f6:ea:90:df:8d:d3:b8:06:96:1e:
         3f:53:cf:52:2c:98:44:bd:38:9f:a5:46:12:20:e0:2e:8c:18:
         ac:9c:0f:31:fe:6b:c6:56:39:d3:e6:66:1f:ca:94:9e:e6:0e:
         9e:92:5c:46:56:dc:c7:09:b7:61:4d:a0:90:59:58:58:7c:e6:
         c4:75:d9:08:17:35:1d:2f:f3:fe:a0:fc:a4:f2:06:95:8a:5c:
         ea:96:92:32:28:ca:01:3b:89:c4:fb:18:39:cd:4b:97:db:86:
         6e:d9:cc:d2:16:5c:e5:aa:89:4f:b1:41:27:93:77:0a:23:17:
         41:5b:6a:f3:a9:1d:cf:4b:d7:2c:11:44:b5:46:d3:62:14:9e:
         11:23:bc:6f:fa:ab:a8:70:db:de:28:08:20:94:03:d8:f9:7c:
         d5:f5:d1:de:11:27:98:63:84:07:0c:29:36:d3:de:25:a1:e6:
         db:a5:8f:71:bb:15:be:ed:6e:3f:1e:a3:ad:ac:86:1d:89:ea:
         ec:45:4b:ea:d6:cd:bb:38:c6:d2:f3:79:f6:5c:3b:c1:56:fa:
         ae:43:9e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:49:41 2025 by rpki-client