Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.mft
File:                     ifWWEQAwvcmzutds_QXDEkYXyVI.mft (raw, json)
Hash identifier:          J8tEiPojZwZS/EzHAkWhvbbli3i94XJUXpMhqW7k+L4=
Subject key identifier:   A7:6B:9D:D5:9B:8D:BC:D6:0D:09:45:0F:7A:E5:45:21:8A:F1:F5:48
Authority key identifier: 89:F5:96:11:00:30:BD:C9:B3:BA:D7:6C:FD:05:C3:12:46:17:C9:52
Certificate issuer:       /CN=A911EA62/serialNumber=89F596110030BDC9B3BAD76CFD05C3124617C952
Certificate serial:       0443
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ifWWEQAwvcmzutds_QXDEkYXyVI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.mft
Manifest number:          0436
Signing time:             Sun 19 Oct 2025 02:13:55 +0000
Manifest this update:     Sun 19 Oct 2025 02:13:54 +0000
Manifest next update:     Sun 26 Oct 2025 02:13:54 +0000
Files and hashes:         1: ifWWEQAwvcmzutds_QXDEkYXyVI.crl (hash: IjvFy5NSF+AhTi0nFnogGsDdDBwvc255pvQQ3L6v60Y=)
                          2: 969AE080A14211EC8C49D660C4F9AE02.roa (hash: n7VFHzeUDeBuyUWNvkox2wNIAXMws0upgX8rIok/ab4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.crl
                          rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ifWWEQAwvcmzutds_QXDEkYXyVI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 02:13:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1091 (0x443)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911EA62, serialNumber=89F596110030BDC9B3BAD76CFD05C3124617C952
        Validity
            Not Before: Oct 19 02:13:54 2025 GMT
            Not After : Oct 26 02:13:54 2025 GMT
        Subject: CN=68f44962-4d4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3e:81:4a:2d:4c:cf:b5:63:a1:e0:31:e6:0b:
                    e4:35:77:07:90:cd:7b:f9:1f:e4:42:e1:6c:41:f7:
                    43:5e:7b:a3:79:0f:9d:af:7e:f3:66:0d:b6:06:cc:
                    25:f9:ac:dc:80:e5:80:f1:d1:51:eb:84:8f:1e:88:
                    94:d2:27:ff:e2:da:29:e6:1e:03:68:a7:cf:09:be:
                    4b:b4:49:71:40:7b:e8:d1:7f:d9:e9:c6:ac:77:63:
                    c3:42:c0:4e:ac:5e:49:2a:b4:97:d0:9b:69:68:e3:
                    1a:e6:17:37:f8:13:82:7d:e5:3d:91:12:8b:4f:e5:
                    3c:e7:94:0a:71:30:35:01:bb:16:4e:19:64:cb:88:
                    bb:cd:93:6a:73:c4:95:4a:cd:60:91:98:ae:c3:18:
                    3c:9b:ea:78:52:f7:6a:72:27:fe:69:be:01:42:9b:
                    f2:6a:5b:25:e0:74:29:0c:67:0b:a6:aa:b5:4c:78:
                    4b:ed:0c:71:98:a8:22:79:84:51:ed:7e:fc:7c:fa:
                    08:fa:cf:c7:6a:15:45:2e:01:fa:14:84:ab:0b:1d:
                    dd:45:d6:da:43:8d:10:86:21:9c:94:8b:5d:50:de:
                    23:b4:a9:22:5c:0a:0a:78:d0:3e:b2:bf:c6:3b:a2:
                    46:20:b6:72:fe:b2:de:9e:86:98:87:e1:59:85:bc:
                    13:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:6B:9D:D5:9B:8D:BC:D6:0D:09:45:0F:7A:E5:45:21:8A:F1:F5:48
            X509v3 Authority Key Identifier:
                keyid:89:F5:96:11:00:30:BD:C9:B3:BA:D7:6C:FD:05:C3:12:46:17:C9:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ifWWEQAwvcmzutds_QXDEkYXyVI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:b7:93:f7:a2:83:bd:0a:2b:0b:5e:2d:13:47:78:78:28:4e:
         5f:fc:57:a8:6e:e6:fd:b2:a7:8d:bc:93:8d:2e:ec:16:42:8d:
         88:d5:c7:32:3e:f7:54:32:df:70:ee:83:14:d3:58:cb:e3:11:
         9c:95:7c:c0:44:50:28:b0:d1:c1:ff:df:70:c2:b8:c1:b4:a5:
         55:6a:3b:16:52:95:2e:b3:20:8a:f2:20:59:1f:1f:2d:94:15:
         73:c6:a0:41:91:1f:bf:c5:47:5f:6c:cd:3c:0f:ee:6b:93:26:
         94:92:42:b7:a8:9d:ee:fe:3b:51:3b:38:b7:a1:78:f6:f8:44:
         c8:44:a0:44:b2:45:05:68:6d:58:f0:8f:52:7a:27:57:ae:43:
         ac:f9:81:56:e7:8f:26:c9:39:35:b9:74:0c:3e:15:15:ba:d2:
         e6:a0:98:31:aa:b4:7a:bc:60:28:0c:ee:5f:68:9a:10:03:cd:
         4d:e0:53:5b:5b:50:4a:11:1f:78:15:48:92:64:af:a4:4c:14:
         b7:e7:aa:55:75:26:ac:bb:98:a8:90:d2:8a:4a:21:63:8c:2f:
         87:e2:f8:5c:4e:19:a9:a2:25:2c:a0:e1:9e:1b:f3:41:6f:f1:
         e7:bb:b7:d2:b2:79:5f:27:61:5a:a2:6a:44:27:f9:4e:b0:4d:
         f3:b7:1f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:31:18 2025 by rpki-client