Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/7eL0zENHKMeciTkUFPbuA_tBaIw.mft
File:                     7eL0zENHKMeciTkUFPbuA_tBaIw.mft (raw, json)
Hash identifier:          hIZjtWHzHLNqf9+cpXJ9BKR1XXYcAYfgwbnUXqnQ/OY=
Subject key identifier:   36:27:CE:F5:54:9B:90:41:FF:F3:24:A2:07:A3:A2:48:D5:81:21:F6
Authority key identifier: ED:E2:F4:CC:43:47:28:C7:9C:89:39:14:14:F6:EE:03:FB:41:68:8C
Certificate issuer:       /CN=A912294F/serialNumber=EDE2F4CC434728C79C89391414F6EE03FB41688C
Certificate serial:       0191
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7eL0zENHKMeciTkUFPbuA_tBaIw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/7eL0zENHKMeciTkUFPbuA_tBaIw.mft
Manifest number:          018B
Signing time:             Sun 19 Oct 2025 06:12:08 +0000
Manifest this update:     Sun 19 Oct 2025 06:12:08 +0000
Manifest next update:     Sun 26 Oct 2025 06:12:08 +0000
Files and hashes:         1: 7eL0zENHKMeciTkUFPbuA_tBaIw.crl (hash: XbnldtiwrmrYVhs8pNf4FUtR1kN9DO2g5LGwuqw5yFA=)
                          2: 099FC48C854911EF8C3F5275C4F9AE02.roa (hash: Vh8HA37Ll1YokJwtXyOXVAZejUyFz/Dlz9aO3ujmjWc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/7eL0zENHKMeciTkUFPbuA_tBaIw.crl
                          rsync://rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/7eL0zENHKMeciTkUFPbuA_tBaIw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7eL0zENHKMeciTkUFPbuA_tBaIw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 06:12:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 401 (0x191)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912294F, serialNumber=EDE2F4CC434728C79C89391414F6EE03FB41688C
        Validity
            Not Before: Oct 19 06:12:08 2025 GMT
            Not After : Oct 26 06:12:08 2025 GMT
        Subject: CN=68f48138-7012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ec:c5:80:69:74:77:db:cd:1a:50:65:7c:e8:
                    d6:44:70:eb:86:5a:8a:9a:fa:8b:d1:c4:02:30:78:
                    b8:47:f3:f3:e8:fd:87:26:aa:5c:e4:b3:b6:86:40:
                    fe:ce:d5:b3:73:13:40:1b:fc:c3:5e:ea:fb:1f:cd:
                    a2:15:57:02:52:3d:6b:8b:84:d8:07:92:7e:50:33:
                    4f:67:d9:e7:a3:91:4d:bc:bd:c0:e0:4c:9b:ca:00:
                    04:3b:7d:11:0d:a2:35:96:96:25:e8:aa:a3:f6:39:
                    a3:62:2d:55:c9:42:95:c0:2e:23:8b:66:f0:c9:df:
                    c1:da:6b:d1:f4:6c:5e:6e:a2:b6:d6:70:12:f5:f3:
                    00:99:e1:a9:c4:c0:9b:55:65:d3:d2:8d:4e:c0:04:
                    6b:9a:14:b8:a3:94:77:6e:46:cc:66:6b:b2:e7:02:
                    58:d9:2a:41:f0:01:4c:fb:c2:24:1d:1a:6b:00:0f:
                    c0:e6:dd:a7:f7:cf:6e:66:88:79:0a:89:78:05:04:
                    6e:3a:4d:f8:d4:80:a5:d5:57:f9:bb:60:22:b6:1e:
                    37:20:13:41:45:e5:8a:60:f3:9a:90:1c:59:15:b8:
                    01:16:c3:fa:b1:51:b0:8e:4e:82:d4:8c:34:33:a5:
                    de:73:19:af:42:55:b6:7b:c8:70:21:dd:f3:73:f6:
                    67:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:27:CE:F5:54:9B:90:41:FF:F3:24:A2:07:A3:A2:48:D5:81:21:F6
            X509v3 Authority Key Identifier:
                keyid:ED:E2:F4:CC:43:47:28:C7:9C:89:39:14:14:F6:EE:03:FB:41:68:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/7eL0zENHKMeciTkUFPbuA_tBaIw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7eL0zENHKMeciTkUFPbuA_tBaIw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/7eL0zENHKMeciTkUFPbuA_tBaIw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:17:f1:cf:f5:17:2f:c1:6a:eb:b0:6c:97:ee:da:43:76:5a:
         0d:a3:cf:09:38:b9:cb:76:cf:4e:15:0b:36:7a:d5:86:70:75:
         8f:14:99:49:c6:39:2a:89:89:f7:bb:69:76:c1:18:fb:46:c5:
         2c:bf:d8:06:81:01:c3:59:e2:d5:24:77:4a:d1:6d:f5:fd:7c:
         5a:b9:8d:6c:ba:65:e0:b1:36:07:ca:0b:5b:7d:0c:60:00:b6:
         0b:f2:39:f4:d8:65:c6:06:61:18:92:f1:16:ee:ba:64:a5:4c:
         22:cb:8b:3d:97:df:41:b5:74:68:42:d4:2b:cf:13:af:4b:c9:
         b5:74:77:6e:5d:07:fd:58:92:29:fe:d1:30:85:bf:ed:32:ed:
         79:50:2c:8c:04:b3:b4:e0:bc:84:81:3c:c8:58:39:ec:81:80:
         04:95:a7:72:dd:3a:22:5e:73:3b:38:34:07:9f:b5:64:84:81:
         6e:a4:15:de:df:28:da:ca:33:17:29:2d:05:5f:58:2a:8e:63:
         a1:2d:f0:d5:bd:61:df:9c:dc:7b:87:36:96:c4:97:5d:af:a4:
         77:1f:6c:4d:61:ab:bd:ed:c5:8c:bd:fa:e7:b8:e6:40:43:61:
         9f:6e:00:b1:5d:38:58:a0:e6:64:aa:d9:a8:b5:01:13:8c:bf:
         2e:21:96:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:46:56 2025 by rpki-client