Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912763C/F20AB31CEE6211EAA766644EC4F9AE02/4VLg53x5W1Qih9ZcHk4L8obU1eA.mft
File:                     4VLg53x5W1Qih9ZcHk4L8obU1eA.mft (raw, json)
Hash identifier:          4PnKR0FJM/07z8GzuO4Eb160UEGMuzLSBSGGZFA/yX8=
Subject key identifier:   57:28:EA:DD:A7:D2:61:BE:CF:B8:D2:38:3E:DD:82:8A:4D:61:E1:88
Authority key identifier: E1:52:E0:E7:7C:79:5B:54:22:87:D6:5C:1E:4E:0B:F2:86:D4:D5:E0
Certificate issuer:       /CN=A912763C/serialNumber=E152E0E77C795B542287D65C1E4E0BF286D4D5E0
Certificate serial:       082B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VLg53x5W1Qih9ZcHk4L8obU1eA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912763C/F20AB31CEE6211EAA766644EC4F9AE02/4VLg53x5W1Qih9ZcHk4L8obU1eA.mft
Manifest number:          0824
Signing time:             Sat 18 Oct 2025 22:01:11 +0000
Manifest this update:     Sat 18 Oct 2025 22:01:10 +0000
Manifest next update:     Sat 25 Oct 2025 22:01:10 +0000
Files and hashes:         1: 4VLg53x5W1Qih9ZcHk4L8obU1eA.crl (hash: INbvovLASrOpUzZILZeYi1MzOAag2i+CUumzSQBQSNc=)
                          2: 22329D14EE6511EAA50E8052C4F9AE02.roa (hash: CrTXUk46Qs0+2Fg8G1Szn+PXGeNBfOdVzoZfC6kMiL8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912763C/F20AB31CEE6211EAA766644EC4F9AE02/4VLg53x5W1Qih9ZcHk4L8obU1eA.crl
                          rsync://rpki.apnic.net/member_repository/A912763C/F20AB31CEE6211EAA766644EC4F9AE02/4VLg53x5W1Qih9ZcHk4L8obU1eA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VLg53x5W1Qih9ZcHk4L8obU1eA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 22:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2091 (0x82b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912763C, serialNumber=E152E0E77C795B542287D65C1E4E0BF286D4D5E0
        Validity
            Not Before: Oct 18 22:01:10 2025 GMT
            Not After : Oct 25 22:01:10 2025 GMT
        Subject: CN=68f40e26-aa2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:5a:49:95:33:01:11:3c:84:1b:25:ea:40:c8:
                    62:f1:04:3f:d5:ac:6c:1e:ea:f4:ad:99:62:0c:71:
                    96:be:bc:44:fa:43:af:53:9b:b2:06:73:de:6b:d9:
                    d1:ca:1b:88:ec:79:69:3a:0c:ec:a9:5c:46:55:5e:
                    78:3a:85:1e:86:dc:a5:d3:3f:83:ef:24:6f:1a:27:
                    82:c1:80:27:74:67:4f:cb:99:2c:18:c1:bc:65:fd:
                    70:a8:92:08:07:bf:ed:71:33:d3:81:0d:3e:1e:d1:
                    65:6c:86:a4:c4:2e:ea:bd:b8:bd:c0:c3:b2:f0:b6:
                    fc:60:42:cf:85:1b:3c:56:6d:e4:de:7b:2e:10:c6:
                    e4:1b:a8:52:96:a7:2c:67:4a:33:0a:ce:08:d8:f4:
                    56:60:1f:1c:f2:da:de:6e:78:bd:78:15:2c:a0:60:
                    7e:49:57:3c:2d:8f:96:57:24:3f:99:b5:74:75:57:
                    41:d1:ba:3a:3e:6b:56:58:4d:ab:d3:90:7b:93:6d:
                    c8:52:64:fa:65:e3:a2:94:bc:e9:3f:b4:c3:73:de:
                    a0:f5:9a:3b:0b:cf:e7:62:f7:e7:77:4f:90:56:e8:
                    81:3d:a4:cd:a7:35:df:5d:9a:74:da:8c:f6:9c:dd:
                    f1:9c:e3:48:ea:cf:a2:9e:cd:65:7a:82:e9:22:2d:
                    0e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:28:EA:DD:A7:D2:61:BE:CF:B8:D2:38:3E:DD:82:8A:4D:61:E1:88
            X509v3 Authority Key Identifier:
                keyid:E1:52:E0:E7:7C:79:5B:54:22:87:D6:5C:1E:4E:0B:F2:86:D4:D5:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912763C/F20AB31CEE6211EAA766644EC4F9AE02/4VLg53x5W1Qih9ZcHk4L8obU1eA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VLg53x5W1Qih9ZcHk4L8obU1eA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912763C/F20AB31CEE6211EAA766644EC4F9AE02/4VLg53x5W1Qih9ZcHk4L8obU1eA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:83:9b:14:32:cc:85:45:76:12:a0:7e:5e:00:0c:f1:bb:2b:
         7d:cb:06:e3:98:f1:e1:1f:5c:22:28:e8:69:66:e0:7d:57:2c:
         ee:bb:92:4c:56:ab:3f:24:77:f4:06:4b:c7:13:6e:38:d7:fc:
         1d:e4:52:23:63:45:b4:f6:7d:b0:97:a2:64:7d:dd:2b:81:a5:
         b7:c2:0f:3a:7c:f1:43:ba:c8:90:cd:2f:cf:ac:db:58:5c:48:
         3d:e9:f4:f8:f7:30:2d:8a:73:bb:91:53:b4:a2:b7:a0:75:df:
         2e:0d:95:a9:ec:08:97:32:f1:c8:d4:bc:07:6a:d1:77:c7:08:
         3a:e5:5f:4a:be:73:da:f6:4e:db:27:75:44:63:be:ec:ab:fe:
         9f:49:1c:f4:2b:a2:fd:18:57:dc:68:13:cd:99:51:1f:58:b9:
         1a:09:c9:75:77:f9:00:d7:4f:bc:36:7b:5c:f3:b7:77:7c:c3:
         c3:30:7e:50:1e:db:11:1d:08:ba:55:b0:8c:dd:72:68:d5:d3:
         19:98:52:6f:b3:aa:14:62:77:e1:77:53:be:d9:74:67:37:e7:
         ee:ad:73:fb:ee:15:42:b5:a6:4c:5b:0f:5f:4f:a4:61:1f:75:
         7a:dc:ed:62:fd:c8:cb:99:d0:ae:4f:f3:4f:ef:3a:e2:87:73:
         d1:ae:20:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:44:46 2025 by rpki-client