Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F478/499A915E6D1611EDBE12050CC4F9AE02/Vo92XMq0LFIweY5o-8N8iqSfX0Q.mft
File:                     Vo92XMq0LFIweY5o-8N8iqSfX0Q.mft (raw, json)
Hash identifier:          MPzcKEUg/kvp9xGJM/mqQK9q0WW0RedOUKDsY3ksAb0=
Subject key identifier:   15:44:62:54:9B:94:08:94:65:B7:89:3A:62:0B:84:FE:46:69:AC:00
Authority key identifier: 56:8F:76:5C:CA:B4:2C:52:30:79:8E:68:FB:C3:7C:8A:A4:9F:5F:44
Certificate issuer:       /CN=A913F478/serialNumber=568F765CCAB42C5230798E68FBC37C8AA49F5F44
Certificate serial:       0231
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vo92XMq0LFIweY5o-8N8iqSfX0Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F478/499A915E6D1611EDBE12050CC4F9AE02/Vo92XMq0LFIweY5o-8N8iqSfX0Q.mft
Manifest number:          0229
Signing time:             Sun 19 Oct 2025 04:21:26 +0000
Manifest this update:     Sun 19 Oct 2025 04:21:26 +0000
Manifest next update:     Sun 26 Oct 2025 04:21:26 +0000
Files and hashes:         1: Vo92XMq0LFIweY5o-8N8iqSfX0Q.crl (hash: JOLd272r6uwm3rXbUpQfE3e1Xeb4L2hPf86vQX4npLI=)
                          2: A89C497E6D1911ED9C34360FC4F9AE02.roa (hash: Ir6olLnhCGZYy0iMT1MpvP5cPRTYc1RU4xFD3VOPJhU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F478/499A915E6D1611EDBE12050CC4F9AE02/Vo92XMq0LFIweY5o-8N8iqSfX0Q.crl
                          rsync://rpki.apnic.net/member_repository/A913F478/499A915E6D1611EDBE12050CC4F9AE02/Vo92XMq0LFIweY5o-8N8iqSfX0Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vo92XMq0LFIweY5o-8N8iqSfX0Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 04:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 561 (0x231)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F478, serialNumber=568F765CCAB42C5230798E68FBC37C8AA49F5F44
        Validity
            Not Before: Oct 19 04:21:26 2025 GMT
            Not After : Oct 26 04:21:26 2025 GMT
        Subject: CN=68f46746-82b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ae:fd:63:38:c7:a1:90:52:62:4d:b1:fa:80:
                    db:85:5a:13:93:b3:e8:0a:2a:ad:9c:8c:d9:ff:a6:
                    e8:19:62:9c:08:a0:04:3c:0a:6e:d6:a0:53:ad:42:
                    12:db:cb:81:32:4b:7b:7f:4a:8b:a8:12:f8:bd:a3:
                    11:35:81:af:67:24:ce:e7:f7:76:0d:dc:8a:30:16:
                    48:f7:b5:c4:85:82:b3:d9:aa:c9:5a:a1:ec:81:3c:
                    02:8f:09:64:15:e8:35:07:1a:17:38:b2:8a:05:9a:
                    8b:0e:05:06:17:37:fe:4c:61:2f:08:8e:98:0c:c8:
                    9f:dc:e1:60:ca:fa:f3:a8:43:6f:28:0d:76:55:2d:
                    12:0a:87:c3:83:6b:07:e0:61:0b:9a:65:54:a8:bd:
                    20:df:e7:fa:c8:e6:5f:2b:e7:e2:43:a6:a1:25:e7:
                    08:a5:f8:80:6c:14:ef:5c:a7:39:6d:51:09:a4:5d:
                    d9:bb:a0:79:90:32:bc:12:b7:35:ae:38:82:f2:0c:
                    37:be:4e:ed:6b:53:ed:55:d2:1f:85:5e:bb:63:9b:
                    de:30:4e:40:c3:eb:a7:74:84:31:c5:33:36:69:73:
                    b9:25:d7:5a:ba:f5:d6:0c:92:34:00:ef:2c:b0:14:
                    71:dc:1c:6a:ec:da:b4:3f:bf:fc:46:ed:8a:fe:95:
                    27:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:44:62:54:9B:94:08:94:65:B7:89:3A:62:0B:84:FE:46:69:AC:00
            X509v3 Authority Key Identifier:
                keyid:56:8F:76:5C:CA:B4:2C:52:30:79:8E:68:FB:C3:7C:8A:A4:9F:5F:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F478/499A915E6D1611EDBE12050CC4F9AE02/Vo92XMq0LFIweY5o-8N8iqSfX0Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vo92XMq0LFIweY5o-8N8iqSfX0Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F478/499A915E6D1611EDBE12050CC4F9AE02/Vo92XMq0LFIweY5o-8N8iqSfX0Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:71:56:bb:b0:8a:71:5b:ce:2b:a6:80:0a:fc:2f:74:1c:af:
         c7:02:18:5e:e7:94:5d:11:a8:a6:f9:d8:c9:a0:da:41:2b:0a:
         8d:9e:d5:55:d6:87:91:74:95:75:62:39:8d:26:e1:db:85:d7:
         4a:5c:20:3a:e6:64:30:55:56:fd:7e:60:8e:15:65:02:40:20:
         38:2f:75:fe:04:6c:d9:f2:cf:ca:03:97:56:00:0f:93:ff:36:
         90:73:93:ca:1c:cb:60:ba:a2:bd:eb:39:6c:5f:16:ce:d0:27:
         d4:b3:06:53:49:6a:70:4f:90:ed:e9:69:93:56:a2:c1:0c:64:
         3f:1f:da:bd:c6:3d:eb:27:b6:4f:d8:e3:f8:85:af:a2:25:92:
         22:3f:05:90:75:e5:d5:b2:2f:81:86:5c:45:b1:81:ee:af:c6:
         68:f2:c3:e0:e9:3a:9d:a0:3b:bf:59:7e:8b:7b:5d:9d:37:be:
         d5:d9:2a:e7:ca:d0:b6:d7:71:b2:25:cf:5a:ed:5d:ae:92:fd:
         1f:1b:1d:3c:c1:7c:6d:7e:cd:78:34:05:c0:67:00:36:d7:2f:
         bd:01:6a:a0:15:a4:65:6b:42:e5:12:fe:1c:5e:c7:ee:6d:aa:
         0f:0e:0f:4d:85:0f:88:ee:9f:b5:2a:52:b7:c7:2b:a3:aa:f2:
         3b:93:be:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:42:30 2025 by rpki-client