Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C83A/CB62A0AAB69D11EFA813984BC4F9AE02/e1NK7dMPJEWViA1k52Rr0TM0r7Q.mft
File:                     e1NK7dMPJEWViA1k52Rr0TM0r7Q.mft (raw, json)
Hash identifier:          PNrz5imTRm3ze/EQXFFuAA5gFB+wK4TGi6PBptZqosQ=
Subject key identifier:   F8:FB:BD:3D:6B:7F:DC:CE:03:41:F1:BA:0D:3B:9C:72:B5:6B:C8:DB
Authority key identifier: 7B:53:4A:ED:D3:0F:24:45:95:88:0D:64:E7:64:6B:D1:33:34:AF:B4
Certificate issuer:       /CN=A913C83A/serialNumber=7B534AEDD30F244595880D64E7646BD13334AFB4
Certificate serial:       A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1NK7dMPJEWViA1k52Rr0TM0r7Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C83A/CB62A0AAB69D11EFA813984BC4F9AE02/e1NK7dMPJEWViA1k52Rr0TM0r7Q.mft
Manifest number:          A5
Signing time:             Sun 19 Oct 2025 09:31:08 +0000
Manifest this update:     Sun 19 Oct 2025 09:31:07 +0000
Manifest next update:     Sun 26 Oct 2025 09:31:07 +0000
Files and hashes:         1: e1NK7dMPJEWViA1k52Rr0TM0r7Q.crl (hash: dyhP8rIoF40laQC9RiC1xQgHAp9CB+F12qbQ4D/tGL0=)
                          2: 265BE218B69F11EFB2CFE86CC4F9AE02.roa (hash: ROjBhj4WNSVnQpneHUZVLTay7BSLWkeCN2H9UxKd4tc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C83A/CB62A0AAB69D11EFA813984BC4F9AE02/e1NK7dMPJEWViA1k52Rr0TM0r7Q.crl
                          rsync://rpki.apnic.net/member_repository/A913C83A/CB62A0AAB69D11EFA813984BC4F9AE02/e1NK7dMPJEWViA1k52Rr0TM0r7Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1NK7dMPJEWViA1k52Rr0TM0r7Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 09:31:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 168 (0xa8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C83A, serialNumber=7B534AEDD30F244595880D64E7646BD13334AFB4
        Validity
            Not Before: Oct 19 09:31:07 2025 GMT
            Not After : Oct 26 09:31:07 2025 GMT
        Subject: CN=68f4afdc-dc7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:e9:37:c7:93:dc:fa:b3:a8:de:b0:53:01:ca:
                    1f:42:69:79:47:ba:0c:fa:f6:ed:cd:e5:95:70:fa:
                    55:4e:9f:47:1b:b2:14:5c:05:9e:c1:cc:ee:47:ab:
                    c6:f2:45:3c:bb:8d:bf:c6:c5:06:b9:04:38:5c:c8:
                    72:4d:05:02:55:a7:36:26:d4:b0:5b:cb:91:9b:94:
                    39:e8:f4:94:ee:b0:8d:26:d3:ce:c4:46:a3:dc:bd:
                    19:22:bd:02:72:4a:6d:c7:e6:c7:ea:41:b5:e6:d3:
                    21:81:95:91:69:f0:df:17:1d:15:65:fc:9c:46:22:
                    16:79:8f:e3:af:a3:f6:57:0e:5a:69:2d:0d:db:39:
                    f1:27:3d:93:4b:17:af:db:1d:58:23:4c:f4:63:8b:
                    f8:30:c3:01:e7:74:ff:49:97:bf:79:a0:6b:27:af:
                    03:bd:f2:a7:b1:48:59:1a:3b:b8:e6:4e:a9:c3:81:
                    bb:31:25:71:d1:53:34:38:11:88:91:a7:7c:7d:35:
                    b8:0d:9f:e1:26:ed:ca:4e:2a:04:6e:30:cb:31:4f:
                    08:67:9f:2f:ba:0f:43:8e:42:2b:38:dd:81:02:a1:
                    69:61:61:c0:27:61:5b:e7:c9:ab:93:92:af:61:92:
                    45:92:02:83:5c:bf:07:11:2a:9f:04:e6:87:dd:a8:
                    a4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:FB:BD:3D:6B:7F:DC:CE:03:41:F1:BA:0D:3B:9C:72:B5:6B:C8:DB
            X509v3 Authority Key Identifier:
                keyid:7B:53:4A:ED:D3:0F:24:45:95:88:0D:64:E7:64:6B:D1:33:34:AF:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C83A/CB62A0AAB69D11EFA813984BC4F9AE02/e1NK7dMPJEWViA1k52Rr0TM0r7Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1NK7dMPJEWViA1k52Rr0TM0r7Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C83A/CB62A0AAB69D11EFA813984BC4F9AE02/e1NK7dMPJEWViA1k52Rr0TM0r7Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:ab:44:b3:00:3e:cb:f7:71:4f:6c:eb:d1:fe:b9:7a:94:fb:
         2e:b0:6b:e4:0d:e2:92:36:59:8c:9b:f1:56:98:03:a3:ba:35:
         b8:d4:18:a0:fb:02:c2:73:40:fe:60:e0:98:c0:92:7a:6b:f5:
         71:93:be:4b:97:86:7a:5b:ec:05:4f:4b:5a:ad:17:67:18:20:
         8c:75:c2:14:62:b5:4a:e6:bd:09:7b:c6:48:5b:a8:af:74:88:
         44:90:16:cc:60:e1:f4:ef:a2:b0:1a:97:a8:56:2c:79:3b:b9:
         81:74:5c:f8:55:a9:84:5a:c0:be:9f:1e:5f:bc:b5:ad:ca:17:
         51:ef:75:38:80:08:4c:f3:a3:7c:d0:6f:86:cf:92:cc:d2:c1:
         a7:9c:9e:9f:fc:b4:00:61:2c:1f:4f:1f:14:89:2b:c7:3e:72:
         a0:1b:4e:e7:1e:a4:94:53:94:3f:ac:ce:65:c7:b3:da:4c:5e:
         13:d5:be:76:8b:7d:dd:5e:d3:06:bb:4e:c2:80:68:74:12:d3:
         a3:17:e0:21:7c:b8:8a:a7:1a:19:8c:5b:03:66:22:61:e5:b4:
         46:b4:88:cc:52:e2:4c:5f:f0:ae:ef:ae:8a:83:5b:9a:fb:d7:
         69:f1:2c:15:d1:6e:95:a9:0a:eb:59:4e:26:14:c8:6f:34:5d:
         6e:61:80:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:44:53 2025 by rpki-client