Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.mft
File:                     XnPt2W_yeohfYTVup3sfVDXIT8w.mft (raw, json)
Hash identifier:          BidsZFC+cAPwT0xwm+ZLsYU8hUNxwsQKSV51wHNjR0g=
Subject key identifier:   72:9F:FD:33:2F:1D:28:B7:AB:FA:C0:EB:A9:86:E9:6A:23:8B:44:13
Authority key identifier: 5E:73:ED:D9:6F:F2:7A:88:5F:61:35:6E:A7:7B:1F:54:35:C8:4F:CC
Certificate issuer:       /CN=A912759E/serialNumber=5E73EDD96FF27A885F61356EA77B1F5435C84FCC
Certificate serial:       02C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnPt2W_yeohfYTVup3sfVDXIT8w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.mft
Manifest number:          02C4
Signing time:             Sun 19 Oct 2025 03:34:20 +0000
Manifest this update:     Sun 19 Oct 2025 03:34:20 +0000
Manifest next update:     Sun 26 Oct 2025 03:34:20 +0000
Files and hashes:         1: XnPt2W_yeohfYTVup3sfVDXIT8w.crl (hash: WHmSY+LDhEsverEc5czmRuJPReg3fJ5haRjiV0coJ5M=)
                          2: 7F0509300CCE11ED97C94316C4F9AE02.roa (hash: yP2d46I6eQAvhpe/ALVhIcW2d8YQgRGFzGAw4LWLaPE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.crl
                          rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnPt2W_yeohfYTVup3sfVDXIT8w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 03:34:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 713 (0x2c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912759E, serialNumber=5E73EDD96FF27A885F61356EA77B1F5435C84FCC
        Validity
            Not Before: Oct 19 03:34:20 2025 GMT
            Not After : Oct 26 03:34:20 2025 GMT
        Subject: CN=68f45c3c-76d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4a:0d:c0:88:8f:1d:9a:ff:c8:82:d1:5a:2a:
                    50:ce:c6:04:32:5f:dc:92:8d:43:be:2e:f8:ae:a4:
                    b5:d2:4b:b0:9d:3d:9e:57:52:a3:2e:f0:42:12:0b:
                    89:d4:15:fc:1c:42:91:a0:f1:f8:3c:de:24:b8:71:
                    a8:9c:89:05:3c:88:09:6e:53:09:6f:58:d8:df:ee:
                    1c:fe:ab:87:e8:fa:b2:21:e2:ca:2d:ab:7d:7d:89:
                    9e:bb:be:2a:a6:8b:26:ce:74:cd:ec:6b:77:8d:a8:
                    1b:69:55:f4:6f:e6:81:ae:a2:f2:b1:a8:ed:88:61:
                    d6:6b:53:d9:c9:53:8c:2b:e1:96:b5:d1:bf:c4:7e:
                    39:fb:0a:81:44:39:a0:73:fa:a4:6b:11:dd:a3:c8:
                    a9:4f:76:bd:3c:4b:b2:ae:bc:8b:e2:c3:e5:b7:4c:
                    d7:90:9a:da:33:0d:8c:f0:95:a4:47:16:a0:b1:4e:
                    dc:fb:91:3c:22:f2:4d:c0:30:0c:13:e0:77:f0:6f:
                    c1:34:ba:67:e3:5d:c0:a4:f5:59:06:eb:8f:8a:8d:
                    77:46:96:29:0c:58:fb:d8:19:33:71:c7:7d:11:67:
                    54:b9:2d:66:27:9c:e6:9e:d8:bd:7f:b3:34:c6:8d:
                    39:03:5c:63:44:c9:ef:35:0e:e4:5d:62:e7:cb:fe:
                    99:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:9F:FD:33:2F:1D:28:B7:AB:FA:C0:EB:A9:86:E9:6A:23:8B:44:13
            X509v3 Authority Key Identifier:
                keyid:5E:73:ED:D9:6F:F2:7A:88:5F:61:35:6E:A7:7B:1F:54:35:C8:4F:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnPt2W_yeohfYTVup3sfVDXIT8w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:39:b3:b8:40:c8:d2:4a:36:af:e4:13:c1:48:61:51:67:35:
         df:6a:02:a9:da:01:d1:b2:ae:13:79:29:b5:14:b1:37:d9:3f:
         c1:53:62:ac:75:fc:ff:b9:f5:59:63:1e:da:57:7c:04:39:a1:
         ba:67:1b:17:31:32:fe:26:aa:80:c3:0f:f1:1c:1b:b8:71:87:
         35:4e:f2:47:0c:e8:93:02:4b:5e:79:ef:d6:3e:c8:e2:73:6e:
         76:52:82:4e:32:33:9d:6f:a5:be:31:f1:1c:73:cf:a1:85:6b:
         69:fa:a8:c1:26:02:15:78:29:3e:f1:98:68:89:25:50:16:a2:
         08:e6:c5:b6:6c:a4:05:b9:6f:b6:2f:a8:b6:98:2b:ba:ea:5e:
         2d:89:82:c3:fc:1e:f5:69:7a:2e:fa:77:04:de:26:13:2a:c6:
         2d:9d:32:87:c2:45:9c:02:8a:92:7b:b4:72:f9:d1:71:90:3f:
         53:7f:61:6f:e5:7a:62:48:bb:d2:ce:0f:56:a1:f8:58:c4:a9:
         de:3e:8e:e5:ee:79:a5:2b:61:90:c9:12:7d:6e:07:12:6f:fc:
         58:9e:ae:cd:36:c3:b8:2f:24:cb:ab:e6:b6:37:aa:2d:88:22:
         dc:1d:3f:fc:ad:e5:11:50:31:a4:c2:79:ff:7e:f2:6a:77:a7:
         19:e1:fc:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:50:07 2025 by rpki-client