Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/1OqUZPMism19ISjcN1LyKIgAFto.mft
File:                     1OqUZPMism19ISjcN1LyKIgAFto.mft (raw, json)
Hash identifier:          dX6QFc+fY72YwCHGd+w5zfGZwuyHhA/9Moa/LBLudwY=
Subject key identifier:   CA:D8:D6:03:11:86:07:AA:A3:29:93:8E:EA:C7:A9:E2:AD:0E:6C:10
Authority key identifier: D4:EA:94:64:F3:22:B2:6D:7D:21:28:DC:37:52:F2:28:88:00:16:DA
Certificate issuer:       /CN=A913367F/serialNumber=D4EA9464F322B26D7D2128DC3752F228880016DA
Certificate serial:       07ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1OqUZPMism19ISjcN1LyKIgAFto.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/1OqUZPMism19ISjcN1LyKIgAFto.mft
Manifest number:          07DB
Signing time:             Sat 18 Oct 2025 22:31:27 +0000
Manifest this update:     Sat 18 Oct 2025 22:31:26 +0000
Manifest next update:     Sat 25 Oct 2025 22:31:26 +0000
Files and hashes:         1: 1OqUZPMism19ISjcN1LyKIgAFto.crl (hash: jBZ7OTB9MiKIevdweN2bNwx2hBGHauB0NJpEwmCBAq8=)
                          2: BF13AB8C5D3311EFA43E0C6EC4F9AE02.roa (hash: Ld5X+hhHes8uxmazOqPYTCeJp0q6EYoIhogSp+9j3P0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/1OqUZPMism19ISjcN1LyKIgAFto.crl
                          rsync://rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/1OqUZPMism19ISjcN1LyKIgAFto.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1OqUZPMism19ISjcN1LyKIgAFto.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 22:31:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2029 (0x7ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913367F, serialNumber=D4EA9464F322B26D7D2128DC3752F228880016DA
        Validity
            Not Before: Oct 18 22:31:26 2025 GMT
            Not After : Oct 25 22:31:26 2025 GMT
        Subject: CN=68f4153f-665e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:06:3d:b0:32:28:d3:3d:e7:1c:8b:1f:30:54:
                    2f:06:0b:e9:57:97:1b:55:f1:09:3d:8c:7e:9c:67:
                    a7:f2:a8:c4:ee:ee:2f:b0:00:8c:b4:09:74:f4:4f:
                    a0:aa:1d:b7:46:c4:c9:3b:ce:03:69:ae:3f:e1:76:
                    5e:12:cf:69:20:84:d2:0d:a8:bc:88:6c:c0:15:0d:
                    86:52:d6:bb:6c:60:5c:b1:98:70:cb:b5:b3:0b:92:
                    42:46:3e:e0:2e:7a:ba:ce:0b:1d:e1:bc:3c:4b:8a:
                    16:e3:22:ce:a3:87:7b:5a:9f:b1:d0:28:8d:d7:76:
                    31:fc:18:41:14:05:89:ed:d6:e3:13:ce:95:2e:4b:
                    6e:d0:63:cf:b7:b4:de:83:93:63:21:23:08:af:80:
                    51:1a:c5:2f:a7:23:53:f4:b2:6a:df:ad:0d:b6:d8:
                    0e:91:8e:4d:b8:21:1f:a3:45:b7:8f:eb:1e:50:6c:
                    a6:1b:76:c7:76:5f:8f:17:54:ae:0c:22:e6:e7:b8:
                    45:55:95:a4:67:c8:63:61:31:9b:57:1a:12:ca:32:
                    a6:6d:4e:ec:62:16:3d:0d:59:26:45:99:ec:be:cb:
                    18:7d:d0:06:62:b4:86:f5:0e:0f:ac:b2:26:75:02:
                    2a:38:64:59:cc:22:b6:45:00:36:42:a7:01:2b:5b:
                    c7:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:D8:D6:03:11:86:07:AA:A3:29:93:8E:EA:C7:A9:E2:AD:0E:6C:10
            X509v3 Authority Key Identifier:
                keyid:D4:EA:94:64:F3:22:B2:6D:7D:21:28:DC:37:52:F2:28:88:00:16:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/1OqUZPMism19ISjcN1LyKIgAFto.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1OqUZPMism19ISjcN1LyKIgAFto.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/1OqUZPMism19ISjcN1LyKIgAFto.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:55:df:8b:b4:be:44:db:59:96:38:c2:02:4b:e4:f5:24:ab:
         c4:da:23:54:51:44:a0:25:14:c3:b2:1b:a4:08:96:f0:5c:b0:
         3d:2c:5c:0d:e5:b3:b0:b7:fb:c4:c1:7f:bf:fe:df:49:2a:28:
         bb:cc:8c:65:50:8d:d0:38:99:af:ec:9f:85:be:70:cc:da:4a:
         a9:34:0d:f5:f2:f2:d3:ba:22:e4:8b:c6:86:4d:c1:69:81:0d:
         41:5c:1e:c0:c1:0e:0e:c0:a8:7b:ee:35:3d:83:18:a3:9a:ea:
         45:b2:2d:9b:63:14:33:0f:f0:57:29:a2:34:52:43:38:66:73:
         be:a1:b5:e3:36:f5:64:6a:b0:6d:46:27:f8:50:62:d8:d1:6e:
         b0:09:74:aa:c5:32:80:e4:5e:40:ca:80:d6:4c:15:f0:d3:22:
         6e:17:80:b7:9e:33:ff:e9:11:9d:64:4b:e7:93:88:98:97:a9:
         b3:6f:da:20:a3:b3:e3:29:0a:a8:45:0d:ec:11:34:ac:fb:cd:
         a8:b3:2f:6e:5a:c5:4a:11:11:12:da:8e:04:5c:8a:95:e0:16:
         1d:b4:10:2f:5f:e0:8c:bd:33:ef:9f:67:cd:df:a2:94:76:fe:
         64:a3:62:87:55:d9:d9:97:a5:91:7e:8d:65:ef:43:84:7d:99:
         b5:ee:1e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:47:18 2025 by rpki-client