Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.mft
File:                     p8GCywxW7MaNdJGikUFEtHdPdzI.mft (raw, json)
Hash identifier:          IGxlbq8iTBjHCPXSZNmJod4Rny/Oks6EMVmQyPXDbCU=
Subject key identifier:   C4:2E:AB:3A:8D:73:4E:86:BF:8C:0D:CF:F4:83:FF:5B:E9:06:D8:2D
Authority key identifier: A7:C1:82:CB:0C:56:EC:C6:8D:74:91:A2:91:41:44:B4:77:4F:77:32
Certificate issuer:       /CN=A9133C64/serialNumber=A7C182CB0C56ECC68D7491A2914144B4774F7732
Certificate serial:       01F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p8GCywxW7MaNdJGikUFEtHdPdzI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.mft
Manifest number:          01F1
Signing time:             Sun 19 Oct 2025 04:53:24 +0000
Manifest this update:     Sun 19 Oct 2025 04:53:23 +0000
Manifest next update:     Sun 26 Oct 2025 04:53:23 +0000
Files and hashes:         1: p8GCywxW7MaNdJGikUFEtHdPdzI.crl (hash: Dl+EpErs4NpZYoWduN5prnEpRKm4ym5fYDkgXww2IjI=)
                          2: 4E2597ACB30F11EDA610E01FC4F9AE02.roa (hash: 475LzmYCu9I1wtql81HCosh9WiMF26s1jk6v328c/zc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.crl
                          rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p8GCywxW7MaNdJGikUFEtHdPdzI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 04:53:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 501 (0x1f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133C64, serialNumber=A7C182CB0C56ECC68D7491A2914144B4774F7732
        Validity
            Not Before: Oct 19 04:53:23 2025 GMT
            Not After : Oct 26 04:53:23 2025 GMT
        Subject: CN=68f46ec4-8ff7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:dc:a9:a9:d1:7d:e1:c5:2d:f9:c4:96:72:39:
                    6e:4a:90:a9:77:c6:b3:23:83:05:64:ae:7f:c1:c6:
                    dc:ff:45:fa:62:ca:7f:5c:85:61:f5:d8:05:d7:73:
                    89:e1:e1:b2:3b:9b:0d:6e:6a:61:0a:f3:af:36:49:
                    76:42:58:28:c4:df:27:62:64:d5:5a:b6:32:7f:19:
                    65:6d:3a:04:d8:a7:0a:39:0b:15:dd:74:c0:f0:f8:
                    bc:c1:bf:00:3c:61:96:7b:49:72:16:4e:e8:56:5c:
                    c2:64:fc:1d:15:c0:d8:01:4e:1a:89:c8:a2:87:3b:
                    3a:f4:67:29:35:69:a7:16:3a:65:16:7c:46:03:fb:
                    16:c6:3c:db:fc:8d:03:24:83:01:64:b5:fb:86:e8:
                    14:e2:d9:68:69:10:d2:5f:ca:ed:c2:00:f4:1a:fd:
                    3b:27:2b:62:ec:b4:5d:eb:ee:82:a0:33:14:0f:fa:
                    51:a4:47:e3:15:2a:a5:0b:bd:ae:f1:03:70:c9:e3:
                    82:58:d9:29:16:df:b6:99:7a:ca:a3:a2:da:25:3c:
                    18:b2:71:1b:f7:4b:16:c1:e2:99:33:1e:d3:3b:76:
                    97:2c:b4:00:c4:ef:2e:f3:34:60:c6:5e:47:52:28:
                    b5:78:8e:34:2c:b9:4b:5a:66:3e:e6:f9:35:b7:c6:
                    47:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:2E:AB:3A:8D:73:4E:86:BF:8C:0D:CF:F4:83:FF:5B:E9:06:D8:2D
            X509v3 Authority Key Identifier:
                keyid:A7:C1:82:CB:0C:56:EC:C6:8D:74:91:A2:91:41:44:B4:77:4F:77:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p8GCywxW7MaNdJGikUFEtHdPdzI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:40:c6:be:83:0f:f0:4e:b8:b3:3d:27:3f:8d:58:4d:07:13:
         33:28:57:02:7b:e2:c5:0a:8a:23:42:e3:7c:f7:d2:73:78:f3:
         1a:52:79:39:ef:6b:ff:b9:f2:9a:6c:d4:6f:ff:bf:5c:34:3a:
         8b:95:0f:7b:04:78:8e:ae:5c:52:23:a4:af:82:0f:2d:75:11:
         f3:f5:a5:22:3c:ed:04:18:51:ff:01:f7:53:14:d1:dc:54:fc:
         03:58:fd:4a:af:3a:e6:7f:30:e7:5b:1c:8a:18:6f:2c:69:ef:
         47:5f:f4:2a:fb:a9:09:86:00:b2:a7:d9:15:be:e5:69:8a:d2:
         65:b9:34:20:8e:79:41:ec:92:63:0e:61:59:63:fe:66:34:f8:
         74:f2:c0:f7:50:17:c5:84:f4:44:66:8f:b8:af:e5:13:f1:b4:
         29:7d:a0:a6:db:0e:37:09:33:ca:83:b1:8b:11:d7:b5:ad:d2:
         d5:17:1f:30:b8:7a:db:f2:34:f4:aa:89:89:ff:db:16:9d:b3:
         cb:19:8d:b2:a1:8c:ef:89:7a:da:dd:c7:26:de:d8:be:ab:85:
         7c:cd:3e:52:b4:8c:6a:79:1c:e6:a0:b2:75:2c:de:a4:e7:88:
         f8:f6:0b:78:c8:62:bd:ce:52:06:df:2d:62:02:ca:fa:3e:ed:
         79:61:1e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:54:54 2025 by rpki-client