Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.mft
File:                     H8daraClG-4avm9zNZ95tqNG9qQ.mft (raw, json)
Hash identifier:          DV4FJaZPWuv3GfnmBGU6hCkK2eyCnb5hTnT0+Yc3OtQ=
Subject key identifier:   CB:EF:05:4D:6E:CF:1D:DF:61:E2:62:AA:EF:25:A1:97:2C:72:C1:7C
Authority key identifier: 1F:C7:5A:AD:A0:A5:1B:EE:1A:BE:6F:73:35:9F:79:B6:A3:46:F6:A4
Certificate issuer:       /CN=A912372F/serialNumber=1FC75AADA0A51BEE1ABE6F73359F79B6A346F6A4
Certificate serial:       0449
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8daraClG-4avm9zNZ95tqNG9qQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.mft
Manifest number:          0443
Signing time:             Sun 19 Oct 2025 02:08:14 +0000
Manifest this update:     Sun 19 Oct 2025 02:08:13 +0000
Manifest next update:     Sun 26 Oct 2025 02:08:13 +0000
Files and hashes:         1: H8daraClG-4avm9zNZ95tqNG9qQ.crl (hash: z9NHizKmb5e+Dd3cGJ5bcWU/mcKFDsya4VLNdyW890A=)
                          2: FD8409A09C2611EC89DFBD46C4F9AE02.roa (hash: 3YCl3ruDz9pGROpd+e7K4Njtxira0+jtHnGSU4G+bG4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.crl
                          rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8daraClG-4avm9zNZ95tqNG9qQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 02:08:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1097 (0x449)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912372F, serialNumber=1FC75AADA0A51BEE1ABE6F73359F79B6A346F6A4
        Validity
            Not Before: Oct 19 02:08:13 2025 GMT
            Not After : Oct 26 02:08:13 2025 GMT
        Subject: CN=68f4480e-c323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:ba:e5:82:4b:b9:19:b3:d9:3e:df:e8:f6:3b:
                    99:03:87:0f:b2:c6:f9:dc:c0:0f:dd:31:9b:c0:7b:
                    53:5f:16:c7:41:49:dd:59:fd:67:43:e2:34:58:95:
                    4c:5e:84:c8:aa:a3:22:06:97:ed:98:e0:37:86:17:
                    3e:d7:f6:81:6f:52:4b:6f:cb:f1:b0:08:07:cc:81:
                    07:d4:c1:8b:01:43:17:af:c4:e2:72:0c:9c:e9:1d:
                    cf:f8:eb:97:2d:e7:14:b7:02:15:6f:e5:f9:0f:44:
                    7f:64:9f:4a:3a:8c:5a:8a:53:ed:24:23:21:a4:3e:
                    15:71:b0:78:bc:b9:7e:b3:fd:e0:4f:38:f1:51:f5:
                    77:83:02:e3:5e:72:c4:f9:f2:c6:2a:85:f1:11:3a:
                    bb:29:74:99:fe:a2:b4:53:59:27:b1:ef:35:16:d3:
                    b3:fc:82:aa:04:10:df:26:af:18:ee:14:f4:76:ed:
                    dc:a8:c6:5b:6b:6c:5d:b3:61:ba:e1:5c:75:c2:8a:
                    9b:c0:2b:b9:8d:1d:0e:3e:df:b5:6b:8d:aa:48:22:
                    10:82:2f:42:ca:5e:35:b4:0a:80:ba:99:56:ad:a4:
                    25:91:ab:29:07:00:0b:14:ef:2b:ad:d7:ae:37:bd:
                    1d:cb:ca:c8:3e:eb:13:c5:16:95:fd:bd:d5:8b:18:
                    5c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:EF:05:4D:6E:CF:1D:DF:61:E2:62:AA:EF:25:A1:97:2C:72:C1:7C
            X509v3 Authority Key Identifier:
                keyid:1F:C7:5A:AD:A0:A5:1B:EE:1A:BE:6F:73:35:9F:79:B6:A3:46:F6:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8daraClG-4avm9zNZ95tqNG9qQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:c7:1f:26:db:e9:0d:c4:2a:ed:8d:1c:5c:66:d0:6c:d1:52:
         14:1b:74:f5:86:75:fb:ec:6f:ed:2c:32:d1:df:b9:8f:f6:8e:
         06:61:44:80:34:4e:51:1e:32:33:03:b0:31:48:14:97:b4:16:
         0e:e8:0e:cb:9f:d7:11:e3:00:a5:0d:a3:80:70:6a:0d:5e:14:
         50:2a:8c:f4:e3:70:1b:a2:96:d7:67:ed:a2:53:ac:bb:f6:a7:
         b0:de:31:55:9e:3d:29:b8:45:b2:22:74:b1:90:32:69:54:3d:
         37:93:35:46:d5:5d:ab:bd:30:0e:de:2d:37:da:b5:7d:37:8c:
         48:f1:c1:ee:f3:5c:34:da:e3:44:f1:72:ed:dc:d1:c4:90:7a:
         d7:b5:7e:1a:15:83:cf:9c:33:b9:45:22:4c:a5:95:67:72:0f:
         b8:50:98:df:d0:cb:0f:79:d2:dc:a0:1e:9d:dd:35:80:86:47:
         26:fb:43:6c:f1:0c:cd:a4:c1:b6:50:16:70:e2:4e:a2:fa:d6:
         c7:54:0e:59:51:b7:d8:11:2a:d6:7e:d6:be:2b:0c:f4:92:38:
         63:3f:ed:c6:3b:7d:13:03:86:45:09:e8:44:2d:4e:50:71:31:
         3a:16:53:1c:85:5f:30:07:f1:c1:6a:5e:d3:88:9d:62:3c:4d:
         26:6d:86:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:45:06 2025 by rpki-client