Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft
File:                     p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft (raw, json)
Hash identifier:          5fbiuILVgK7/O9N9JKqebkL+woQJjFnbr6yh09Azk4Q=
Subject key identifier:   29:06:60:F3:20:34:1E:A5:D2:A7:E6:25:5F:AF:D0:A4:DA:78:6D:4C
Authority key identifier: A7:60:AD:E0:C9:D0:5E:E6:79:EC:30:41:22:BC:33:50:C8:D2:A4:39
Certificate issuer:       /CN=A912BE25/serialNumber=A760ADE0C9D05EE679EC304122BC3350C8D2A439
Certificate serial:       0344
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft
Manifest number:          032F
Signing time:             Sun 19 Oct 2025 03:14:35 +0000
Manifest this update:     Sun 19 Oct 2025 03:14:34 +0000
Manifest next update:     Sun 26 Oct 2025 03:14:34 +0000
Files and hashes:         1: p2Ct4MnQXuZ57DBBIrwzUMjSpDk.crl (hash: bXhIdwx0kNw8BdhtmktmoMK8Z3yeT4lAvxrG4yvPaAQ=)
                          2: 3824E928764711F0980D9877C4F9AE02.roa (hash: Vlt8E5RCfri6tIVkewPLLzIXYySBs5xXKD+pS8VKrVI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.crl
                          rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 03:14:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 836 (0x344)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912BE25, serialNumber=A760ADE0C9D05EE679EC304122BC3350C8D2A439
        Validity
            Not Before: Oct 19 03:14:34 2025 GMT
            Not After : Oct 26 03:14:34 2025 GMT
        Subject: CN=68f4579b-94ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0d:90:34:13:6e:66:65:b7:2d:5c:30:56:e2:
                    56:be:a2:33:bf:59:73:64:2a:2e:23:25:0c:41:a4:
                    55:db:81:84:97:a4:cd:b5:b3:a4:4e:49:2a:d7:08:
                    7f:b0:13:25:fe:ac:e9:4e:5e:c3:86:7a:22:78:c7:
                    4a:86:59:9f:fc:21:ce:23:25:a7:10:72:17:bc:54:
                    ac:ec:0d:4e:e2:4a:04:2a:2a:57:63:7b:d5:7c:1d:
                    ce:63:98:02:1a:96:2a:51:20:a0:25:70:a2:8f:e5:
                    a6:99:a2:11:3d:f0:68:b3:65:87:7c:a4:c2:a9:2a:
                    88:df:5c:9c:0c:11:ca:c7:70:42:34:05:a3:5c:ab:
                    f6:02:7b:a1:72:66:1f:ce:86:74:d3:a9:a0:4e:05:
                    79:e5:e3:c7:d6:cb:09:fd:4e:ef:60:6a:00:22:5e:
                    73:9c:87:7c:91:14:51:f6:19:77:1d:39:80:b2:01:
                    94:0e:0f:e2:85:af:bb:d5:cc:bf:df:f1:46:28:91:
                    35:ce:de:70:86:d0:e1:33:20:d3:a8:23:12:fe:ac:
                    d4:41:14:b2:3e:fc:c9:b8:f9:fb:12:06:55:59:fb:
                    17:35:b5:4d:07:d0:b7:ba:da:31:70:fa:b0:12:35:
                    52:2c:1b:98:20:33:c6:54:e2:e1:fe:43:c7:f7:d3:
                    16:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:06:60:F3:20:34:1E:A5:D2:A7:E6:25:5F:AF:D0:A4:DA:78:6D:4C
            X509v3 Authority Key Identifier:
                keyid:A7:60:AD:E0:C9:D0:5E:E6:79:EC:30:41:22:BC:33:50:C8:D2:A4:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:2a:de:86:3f:23:dc:de:1a:5f:ff:0e:5e:49:8b:54:5b:b1:
         37:06:cc:30:96:02:c1:55:d1:ea:84:1f:d2:6f:38:af:60:9d:
         9e:92:d6:fa:26:bb:b7:6a:fd:c9:77:d2:74:14:89:f6:2a:14:
         62:05:45:17:87:29:e6:4b:d3:f1:e6:e6:7a:a6:b0:57:42:d9:
         b1:b4:bb:81:da:f8:17:40:f9:b0:70:25:95:0c:d4:0d:69:45:
         3b:71:25:0d:7a:b3:5e:05:09:d6:96:7b:8a:99:80:e3:6a:db:
         21:91:f8:95:5a:0c:a0:b2:6e:73:ab:8d:37:02:e9:aa:80:a0:
         2c:bf:b3:b1:4a:32:31:10:d9:00:e1:b2:a6:1b:96:d8:75:34:
         a2:15:fa:35:f0:6d:72:86:a7:7a:0a:95:95:19:81:5b:27:4f:
         87:6f:f9:a0:4a:dd:d6:f4:cf:07:ac:23:e9:34:b2:ce:3b:6f:
         6b:2e:84:2b:4e:c6:97:47:81:a6:47:cf:c4:86:8b:92:dc:b9:
         99:79:fe:05:e3:4e:d4:b9:0a:e5:bc:f8:f5:51:06:8a:26:f8:
         6d:15:e8:41:c3:5f:c1:72:f9:67:97:14:3b:ae:cd:d9:eb:6a:
         6c:02:83:1c:45:9a:84:14:70:48:79:9a:61:da:f5:16:00:61:
         89:d3:fd:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:47:56 2025 by rpki-client