Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft
File:                     Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft (raw, json)
Hash identifier:          Q+DLWbqQw2wmKa92a7zwnU+T8EIr5Ph7GXuIjxFglX0=
Subject key identifier:   D5:8B:40:7D:C5:83:CA:98:30:54:A5:09:3B:E4:F1:D4:90:F5:E0:8B
Authority key identifier: 16:0E:00:01:5D:2B:58:15:3F:34:82:E8:DE:94:7B:5F:4A:D7:87:18
Certificate issuer:       /CN=A91295B6/serialNumber=160E00015D2B58153F3482E8DE947B5F4AD78718
Certificate serial:       01B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fg4AAV0rWBU_NILo3pR7X0rXhxg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft
Manifest number:          01B0
Signing time:             Sun 19 Oct 2025 05:44:16 +0000
Manifest this update:     Sun 19 Oct 2025 05:44:15 +0000
Manifest next update:     Sun 26 Oct 2025 05:44:15 +0000
Files and hashes:         1: Fg4AAV0rWBU_NILo3pR7X0rXhxg.crl (hash: 1nQz52lggX0i8aRLPA90A/9GvbERAi3CRusYUjPYYcY=)
                          2: 35C8F50C218A11EE959B7037C4F9AE02.roa (hash: d9bjtW0ZUYjonxEE3MZfuZxfLKtEPtuzgQGXr7LUJRE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.crl
                          rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fg4AAV0rWBU_NILo3pR7X0rXhxg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 05:44:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 439 (0x1b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91295B6, serialNumber=160E00015D2B58153F3482E8DE947B5F4AD78718
        Validity
            Not Before: Oct 19 05:44:15 2025 GMT
            Not After : Oct 26 05:44:15 2025 GMT
        Subject: CN=68f47ab0-8a89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a3:f8:b8:b7:21:92:e7:44:57:5c:05:57:11:
                    45:8c:05:1a:03:d0:dd:59:aa:4b:5c:f4:ea:ba:a1:
                    e6:8e:52:e1:41:72:f8:34:72:24:60:1b:12:07:3f:
                    70:06:8e:d4:f4:d5:7e:dd:19:2a:2f:d8:4b:d7:4e:
                    96:3e:7e:c9:27:45:82:94:be:f9:0d:b8:7f:bf:0e:
                    5b:c5:b8:9e:79:6a:8f:d4:bb:db:e7:d7:6b:ca:cb:
                    fd:a5:ef:ae:7c:ca:c4:78:f9:2d:76:30:97:f6:23:
                    f1:9d:21:64:79:a7:54:26:bf:79:2b:a0:5d:f7:9d:
                    86:8b:4e:89:4f:97:94:26:51:ec:a9:c5:5a:77:93:
                    74:55:65:e9:db:8d:ac:95:fe:17:0b:9d:79:54:bf:
                    79:d1:d9:16:6f:2a:8a:f3:b7:a0:ac:09:44:b8:8a:
                    f5:cb:20:1a:51:f5:da:aa:96:81:d8:f3:6f:80:e7:
                    2d:db:ac:f5:d5:b0:09:2a:73:fb:71:49:69:3c:bc:
                    ec:18:c8:8d:a7:81:3e:9b:95:23:3b:fa:6f:58:c8:
                    c3:99:8e:50:9c:8c:33:48:b6:10:0a:61:a3:e0:64:
                    09:5c:90:22:41:0e:42:81:f0:a8:22:47:ec:f4:c9:
                    13:27:82:6e:00:3d:40:45:0f:3d:45:15:9f:52:94:
                    a7:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:8B:40:7D:C5:83:CA:98:30:54:A5:09:3B:E4:F1:D4:90:F5:E0:8B
            X509v3 Authority Key Identifier:
                keyid:16:0E:00:01:5D:2B:58:15:3F:34:82:E8:DE:94:7B:5F:4A:D7:87:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fg4AAV0rWBU_NILo3pR7X0rXhxg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:7c:7a:ad:71:97:c3:1b:4b:8a:05:e4:ad:b1:67:b5:1c:c9:
         02:ab:50:eb:6f:e8:13:dc:9f:5e:1d:eb:fc:87:5a:85:ce:a0:
         03:d0:05:f0:01:f4:41:fd:35:aa:ae:59:74:15:f2:fe:f5:7d:
         63:94:65:1d:05:36:bc:79:ce:6c:dd:b2:21:49:50:42:50:e2:
         85:f3:e5:45:6b:57:de:41:93:2a:9d:a3:32:33:f8:f0:64:33:
         6e:78:85:bd:14:8d:76:77:f1:8c:e8:0e:93:c7:30:5c:10:f4:
         f0:9f:5c:6f:29:fd:54:44:4f:25:6d:5e:53:70:42:c5:9f:f1:
         a7:7c:f2:c1:3b:eb:8c:a4:10:47:1c:6a:a8:69:8f:f6:06:23:
         22:bf:9a:b0:f2:bf:3b:3d:06:f4:a3:83:c4:91:8c:eb:e0:16:
         00:eb:ba:a3:1b:39:e8:ef:54:62:38:80:d4:6a:c8:47:17:c0:
         4d:23:e6:2b:be:81:c8:65:40:a9:5b:bb:de:9b:c9:4b:cc:4f:
         bf:10:dc:2e:e0:f6:c6:5c:32:35:ef:44:db:06:ec:f6:35:a9:
         d7:67:db:c7:9c:b6:9d:12:d2:dd:83:fc:af:10:44:b6:00:97:
         f5:12:48:44:9e:71:b1:75:9a:92:3a:58:4b:0e:ce:34:db:47:
         43:03:47:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:47:30 2025 by rpki-client