Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft
File:                     z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft (raw, json)
Hash identifier:          lOdAqWbedG7MdNfL2ZtDwejQLh4E4qkziR2rZlwSPqU=
Subject key identifier:   77:56:06:BB:B5:F0:7E:A8:AB:AD:96:AF:A2:1A:05:25:9B:BC:9F:05
Authority key identifier: CF:6B:55:0A:2F:0C:64:2B:DC:D4:D8:BE:A5:03:84:9B:2D:45:0F:98
Certificate issuer:       /CN=A913B018/serialNumber=CF6B550A2F0C642BDCD4D8BEA503849B2D450F98
Certificate serial:       013E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft
Manifest number:          013C
Signing time:             Sun 19 Oct 2025 07:11:27 +0000
Manifest this update:     Sun 19 Oct 2025 07:11:27 +0000
Manifest next update:     Sun 26 Oct 2025 07:11:27 +0000
Files and hashes:         1: z2tVCi8MZCvc1Ni-pQOEmy1FD5g.crl (hash: TuH4JMVSBYS9hwIH4gbw3jCuFlQ10NLbpIY0FQnzAYA=)
                          2: 8B7FA748C5F911EE8D0FDF82C4F9AE02.roa (hash: b3y+yqQZHBTfkBDVadEGnUf7c6xDOQSv+IeavRvLzwE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.crl
                          rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 07:11:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 318 (0x13e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B018, serialNumber=CF6B550A2F0C642BDCD4D8BEA503849B2D450F98
        Validity
            Not Before: Oct 19 07:11:27 2025 GMT
            Not After : Oct 26 07:11:27 2025 GMT
        Subject: CN=68f48f1f-5681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:4e:02:b3:d2:0e:f4:aa:46:48:29:7b:54:f0:
                    18:83:b8:59:46:86:d2:c4:fb:d7:ed:f5:ae:97:a2:
                    39:8a:98:da:c3:cd:50:7a:87:5f:b3:e6:09:59:d5:
                    30:e4:03:2b:d2:07:ad:0a:3b:bc:b5:d0:d5:4c:58:
                    dd:6c:8c:3c:ea:00:a7:59:43:8d:58:01:47:0b:18:
                    5f:8a:a0:26:b2:31:3c:b6:44:fd:aa:ee:69:3b:e0:
                    8f:81:dd:a8:b7:b5:a3:b9:fc:75:6a:07:97:3c:94:
                    72:fb:e4:de:8c:9c:d4:d8:40:86:5e:f8:34:4a:c3:
                    b7:27:a0:ce:7f:19:3f:ce:20:12:c0:5c:3e:42:b0:
                    eb:9b:84:63:38:e6:6e:6b:d6:82:89:c1:aa:c6:af:
                    20:8d:ac:21:13:14:b2:c5:3f:dd:82:cb:6a:b1:ed:
                    0b:49:13:8f:41:71:55:55:45:f2:bf:a0:32:76:be:
                    2f:32:5a:b6:20:b0:0b:cd:24:09:f4:e2:96:79:ff:
                    cc:73:f0:34:c8:80:43:11:67:8b:e4:d4:c1:42:3b:
                    ca:fd:25:57:6f:7d:d6:97:43:25:15:59:82:53:0c:
                    f8:57:7a:c5:59:5b:8f:2e:c2:08:2b:c0:fb:28:7a:
                    8e:45:ec:b3:9f:a5:61:83:8c:e2:f6:e0:e1:a9:3e:
                    27:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:56:06:BB:B5:F0:7E:A8:AB:AD:96:AF:A2:1A:05:25:9B:BC:9F:05
            X509v3 Authority Key Identifier:
                keyid:CF:6B:55:0A:2F:0C:64:2B:DC:D4:D8:BE:A5:03:84:9B:2D:45:0F:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:df:65:df:ba:76:e6:1b:d4:2c:6a:e2:0b:d5:59:15:f9:bc:
         88:db:fe:76:d1:4e:d9:1b:ee:68:51:c0:9d:0f:5a:b2:02:ed:
         e6:0e:8e:aa:67:12:95:51:9b:13:df:d0:23:6b:82:82:8d:c5:
         79:65:aa:81:3f:e7:a0:b4:85:7c:01:45:41:0b:8a:c3:70:3e:
         d7:c5:8a:1c:68:f6:45:e3:5e:e9:f6:b2:28:47:34:1c:c5:ec:
         48:fa:e3:a5:6a:8e:d8:0f:b1:98:59:9b:32:8c:68:66:74:d0:
         65:4a:b0:f7:67:23:d6:4a:3b:32:84:9f:1b:a9:d0:a7:d4:00:
         20:32:bb:24:c0:b8:e2:3b:1a:12:59:cf:9b:28:45:58:30:08:
         12:70:50:20:2c:f7:69:07:29:12:17:ef:93:8d:3d:88:5c:07:
         92:6c:8d:61:07:d5:b9:cc:c6:1f:d1:cc:30:97:7e:fb:d9:8c:
         88:db:fa:21:18:2b:06:32:39:76:9b:3d:7d:32:d4:82:60:74:
         56:15:db:a2:7c:8c:af:d9:8d:43:52:97:31:5b:fc:50:3e:3a:
         ff:fb:ed:7e:a8:13:7f:7f:79:59:98:fb:e9:14:71:6e:8c:e2:
         06:ca:83:67:b6:74:59:8d:d9:de:9e:2a:76:39:21:0f:dd:5f:
         a7:4d:77:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:08:19 2025 by rpki-client