Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.mft
File:                     s-lBocVdFIOrV5HZSYdQ492t7cw.mft (raw, json)
Hash identifier:          WblmfkyhuxIQ2J0ADlCh3NGjK2NOppw5onM0S+gCFdw=
Subject key identifier:   E7:8D:DA:45:D0:3C:1A:DC:AA:9C:25:7A:63:02:14:E4:B9:AA:2E:2E
Authority key identifier: B3:E9:41:A1:C5:5D:14:83:AB:57:91:D9:49:87:50:E3:DD:AD:ED:CC
Certificate issuer:       /CN=A913B018/serialNumber=B3E941A1C55D1483AB5791D9498750E3DDADEDCC
Certificate serial:       013E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s-lBocVdFIOrV5HZSYdQ492t7cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.mft
Manifest number:          013C
Signing time:             Sun 19 Oct 2025 07:11:30 +0000
Manifest this update:     Sun 19 Oct 2025 07:11:29 +0000
Manifest next update:     Sun 26 Oct 2025 07:11:29 +0000
Files and hashes:         1: s-lBocVdFIOrV5HZSYdQ492t7cw.crl (hash: 14EgZtVIyd/iTLwYCKMjo5QisH+HTZfezTnjMtpKboc=)
                          2: 8B097276C5F911EE8D0FDF82C4F9AE02.roa (hash: rdPAEAIE6ELTFaI7KJd4MZCFob5xV/RE3eKxMhnDVS4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.crl
                          rsync://rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s-lBocVdFIOrV5HZSYdQ492t7cw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 07:11:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 318 (0x13e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B018, serialNumber=B3E941A1C55D1483AB5791D9498750E3DDADEDCC
        Validity
            Not Before: Oct 19 07:11:29 2025 GMT
            Not After : Oct 26 07:11:29 2025 GMT
        Subject: CN=68f48f22-ab51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:24:bc:da:d8:66:a6:5f:19:d5:4d:49:08:e0:
                    42:f1:f0:8a:8f:f0:77:a2:be:85:b5:be:99:a3:87:
                    69:16:a8:17:13:6f:45:21:74:9f:d2:6a:c4:dc:6f:
                    62:cd:78:78:25:3a:8c:87:7f:88:fb:6d:97:11:e3:
                    18:6f:72:72:17:fb:34:5c:0b:57:df:93:a6:07:0f:
                    66:ce:7e:bb:01:d2:df:90:92:1f:18:90:12:05:38:
                    36:f4:82:00:f4:a7:59:49:5f:76:c1:aa:d4:1d:fc:
                    f6:fa:80:6b:08:cd:24:40:da:bb:e0:c7:9f:82:32:
                    5e:96:73:aa:29:57:5a:23:19:fa:c5:f8:f8:d7:c6:
                    2f:a9:59:75:6a:d6:0e:56:78:20:8e:be:16:a1:09:
                    fc:2a:e0:06:64:0b:03:c9:ab:55:55:6a:e1:47:38:
                    28:4d:fa:6b:3e:64:b3:0c:bf:55:63:7a:1b:1d:d6:
                    f5:12:f3:64:78:40:79:ab:de:d6:c4:e9:5e:0e:f7:
                    4e:e4:2a:02:b6:c5:a9:29:a7:38:49:2e:4f:5c:60:
                    bd:74:b4:8a:07:58:63:f4:3c:b2:60:c4:a4:bf:78:
                    fe:32:24:47:f2:5f:a2:0c:5f:79:2c:44:51:71:b0:
                    35:22:60:97:a8:1d:01:6c:2f:0c:7d:20:62:f2:a9:
                    a2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:8D:DA:45:D0:3C:1A:DC:AA:9C:25:7A:63:02:14:E4:B9:AA:2E:2E
            X509v3 Authority Key Identifier:
                keyid:B3:E9:41:A1:C5:5D:14:83:AB:57:91:D9:49:87:50:E3:DD:AD:ED:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s-lBocVdFIOrV5HZSYdQ492t7cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:58:ac:af:cc:ed:d9:b8:65:98:68:88:40:93:f2:1e:4a:84:
         c6:20:b0:fa:17:ac:3a:00:01:a3:e7:39:37:59:47:e2:f9:8b:
         7d:24:e6:b3:e6:f5:c2:ce:5b:cc:bc:e7:d4:73:6e:1a:b4:49:
         0f:44:ca:8b:02:70:5e:80:93:7b:88:3d:a6:97:8d:a2:87:1d:
         96:cd:16:95:e9:7d:75:45:f8:ba:12:ce:9f:a0:fe:96:9a:64:
         27:70:54:9a:7a:10:69:9f:5f:48:45:b0:d4:68:eb:65:25:b0:
         e3:6f:02:fc:42:62:13:92:46:0b:ca:6c:8f:a8:4b:16:b3:13:
         ef:db:55:e7:6b:51:6d:b3:4b:d5:64:57:3b:27:a9:a5:8d:4a:
         dd:a1:fa:11:9e:d9:95:a3:2f:e0:65:49:18:65:a6:ff:38:5a:
         6b:93:ee:60:9f:2f:96:ae:00:37:d1:c7:55:5e:9e:22:f8:37:
         f7:69:75:7a:0f:c6:1b:32:a7:95:82:8a:bb:0d:49:6c:ae:11:
         84:71:97:46:4d:38:e2:92:27:81:ca:33:ee:2e:b4:3a:9a:ee:
         73:e5:2a:9f:c3:94:64:e1:3c:ff:b8:34:11:d2:ef:76:f0:39:
         28:e1:4a:ec:ef:85:e6:88:b1:b8:f3:c1:91:1b:72:49:ec:c1:
         4e:09:5e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:26:19 2025 by rpki-client