Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912127A/9EB009B666E111ED8552471BC4F9AE02/51IOJIn_YDiw2HmwRxcPnFGs984.mft
File:                     51IOJIn_YDiw2HmwRxcPnFGs984.mft (raw, json)
Hash identifier:          DXFhGuAGHKOxG1hsyrkxaf72Vc1udpe0ldDwDQhCuoo=
Subject key identifier:   B8:60:48:5D:8D:6C:EE:64:E3:3B:83:3B:71:E6:A2:F5:FA:EB:D3:22
Authority key identifier: E7:52:0E:24:89:FF:60:38:B0:D8:79:B0:47:17:0F:9C:51:AC:F7:CE
Certificate issuer:       /CN=A912127A/serialNumber=E7520E2489FF6038B0D879B047170F9C51ACF7CE
Certificate serial:       0233
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/51IOJIn_YDiw2HmwRxcPnFGs984.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912127A/9EB009B666E111ED8552471BC4F9AE02/51IOJIn_YDiw2HmwRxcPnFGs984.mft
Manifest number:          022B
Signing time:             Sun 19 Oct 2025 04:17:04 +0000
Manifest this update:     Sun 19 Oct 2025 04:17:04 +0000
Manifest next update:     Sun 26 Oct 2025 04:17:04 +0000
Files and hashes:         1: 51IOJIn_YDiw2HmwRxcPnFGs984.crl (hash: HLI23U6u8RRj3tF3MKrPpdYpcN5Luim3TYFJ5/E37Ho=)
                          2: 27C38AF4C0C111EE84A55128C4F9AE02.roa (hash: wIZlMBid+1P+5GWXEfhaHDavI2pP5RgKD6YPhcbCvPc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912127A/9EB009B666E111ED8552471BC4F9AE02/51IOJIn_YDiw2HmwRxcPnFGs984.crl
                          rsync://rpki.apnic.net/member_repository/A912127A/9EB009B666E111ED8552471BC4F9AE02/51IOJIn_YDiw2HmwRxcPnFGs984.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/51IOJIn_YDiw2HmwRxcPnFGs984.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 04:17:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 563 (0x233)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912127A, serialNumber=E7520E2489FF6038B0D879B047170F9C51ACF7CE
        Validity
            Not Before: Oct 19 04:17:04 2025 GMT
            Not After : Oct 26 04:17:04 2025 GMT
        Subject: CN=68f46640-4794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:81:8d:87:2e:51:c7:d5:c8:04:69:2a:01:5e:
                    42:a3:8f:4d:3d:87:ba:1b:3e:b1:63:ac:be:ca:a2:
                    5f:a0:7f:5f:02:95:65:fa:8c:82:07:56:48:56:31:
                    81:8c:94:87:39:52:5a:13:04:da:dd:98:6f:ba:a9:
                    14:fb:b4:41:0a:ff:65:8b:96:bf:3b:36:b2:14:74:
                    41:e3:cb:44:fd:d0:52:89:db:e5:56:8d:39:3c:be:
                    28:79:94:c7:32:cb:04:5c:39:f4:bc:ba:5c:41:f0:
                    e4:a3:9b:c9:ff:7b:9a:97:31:cf:cd:1f:23:e9:3e:
                    1c:ce:b0:37:65:70:56:aa:5c:1b:d7:ea:7c:70:6b:
                    6f:75:60:b9:f1:3a:ca:5d:9d:d2:b1:d2:3e:32:a3:
                    bd:89:3d:7c:54:14:11:a3:49:01:51:a7:06:a9:85:
                    69:2f:18:30:ac:c3:bd:c4:bc:66:4e:a3:ad:6f:b6:
                    61:77:32:06:a8:4b:d3:5a:1a:8d:98:06:89:01:fa:
                    9b:b6:5b:d4:43:f2:55:74:7b:a8:cf:c3:7b:f6:52:
                    94:3d:f3:e8:b2:0a:16:3b:43:f3:3e:fa:de:b3:ec:
                    94:5d:c2:e5:54:89:f5:f4:5a:9b:e9:b8:4b:df:e4:
                    42:34:d4:42:15:4b:91:13:e5:71:7a:c4:7f:98:bc:
                    3e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:60:48:5D:8D:6C:EE:64:E3:3B:83:3B:71:E6:A2:F5:FA:EB:D3:22
            X509v3 Authority Key Identifier:
                keyid:E7:52:0E:24:89:FF:60:38:B0:D8:79:B0:47:17:0F:9C:51:AC:F7:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912127A/9EB009B666E111ED8552471BC4F9AE02/51IOJIn_YDiw2HmwRxcPnFGs984.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/51IOJIn_YDiw2HmwRxcPnFGs984.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912127A/9EB009B666E111ED8552471BC4F9AE02/51IOJIn_YDiw2HmwRxcPnFGs984.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:6c:ef:49:be:b4:e0:d2:53:86:0c:3a:2e:78:c1:07:86:fd:
         27:31:c8:2c:4c:5f:fa:77:d5:aa:56:1f:fb:d8:8e:67:cf:3b:
         63:12:2a:6b:16:4e:02:b4:83:99:2d:c3:7b:41:3c:23:c1:a7:
         5e:02:67:05:3f:bf:b0:b7:39:90:98:d0:65:86:43:e2:44:e7:
         32:9c:d9:6a:25:cf:1a:b0:20:a8:9b:06:40:16:c7:9e:57:85:
         8a:1b:5c:cc:70:21:7a:88:88:90:b3:0e:0a:19:28:f9:70:22:
         a8:a0:90:38:9f:26:cb:a5:78:60:b8:16:a5:07:e6:c4:6d:f0:
         fa:f2:6c:18:50:c7:a3:16:ea:92:2c:c4:3b:08:df:dd:06:4f:
         77:70:13:33:7a:5b:19:31:26:76:9d:ef:74:0e:33:af:fc:71:
         29:e2:dc:ac:a4:32:44:a1:8c:9e:9a:0b:e1:64:53:4b:7e:60:
         b5:cf:84:8d:f0:ba:75:83:bc:8c:4b:46:bc:8c:8c:2c:3f:d1:
         59:d7:70:1c:70:75:70:82:89:6a:0f:56:82:b6:4b:f6:73:3f:
         bf:a0:ec:ec:1a:e6:32:1a:ba:05:3f:47:f9:d6:d6:8b:59:f3:
         89:df:ed:64:63:05:61:a1:4c:d0:ab:7c:2d:53:10:b8:51:e8:
         ca:71:d2:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:23:57 2025 by rpki-client