Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91410C5/D109EBD0572E11F095F7FE48C4F9AE02/V4hJyblKNVp2IKl0eXPSG77aP1M.mft
File:                     V4hJyblKNVp2IKl0eXPSG77aP1M.mft (raw, json)
Hash identifier:          D77upzJV/7DHNYkVSb09KTh3Bg94NTzZwmBIUEfFa4k=
Subject key identifier:   A5:D9:DD:23:A7:FE:12:D1:44:C4:AC:2F:30:6F:12:94:D1:54:3D:28
Authority key identifier: 57:88:49:C9:B9:4A:35:5A:76:20:A9:74:79:73:D2:1B:BE:DA:3F:53
Certificate issuer:       /CN=A91410C5/serialNumber=578849C9B94A355A7620A9747973D21BBEDA3F53
Certificate serial:       47
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V4hJyblKNVp2IKl0eXPSG77aP1M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91410C5/D109EBD0572E11F095F7FE48C4F9AE02/V4hJyblKNVp2IKl0eXPSG77aP1M.mft
Manifest number:          41
Signing time:             Sun 19 Oct 2025 10:59:14 +0000
Manifest this update:     Sun 19 Oct 2025 10:59:13 +0000
Manifest next update:     Sun 26 Oct 2025 10:59:13 +0000
Files and hashes:         1: V4hJyblKNVp2IKl0eXPSG77aP1M.crl (hash: OF//AUnY/iQ9eF8TWNVlRXpXr7SzJykjTFXj0BkK5TI=)
                          2: C7142BC6654E11F0903B1F31C4F9AE02.roa (hash: N2WAIBH8ZMkrMk9CktT8AtzaLV74cC0YpuQq3dTGOmI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91410C5/D109EBD0572E11F095F7FE48C4F9AE02/V4hJyblKNVp2IKl0eXPSG77aP1M.crl
                          rsync://rpki.apnic.net/member_repository/A91410C5/D109EBD0572E11F095F7FE48C4F9AE02/V4hJyblKNVp2IKl0eXPSG77aP1M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V4hJyblKNVp2IKl0eXPSG77aP1M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 10:59:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71 (0x47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91410C5, serialNumber=578849C9B94A355A7620A9747973D21BBEDA3F53
        Validity
            Not Before: Oct 19 10:59:13 2025 GMT
            Not After : Oct 26 10:59:13 2025 GMT
        Subject: CN=68f4c482-8a10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e8:17:c3:2a:b3:77:e6:aa:1a:c8:62:b7:9c:
                    de:f4:0b:61:16:61:0c:44:cc:6e:72:f7:25:59:52:
                    b0:ad:3c:a1:4e:7b:dd:21:c8:ba:30:17:9a:b9:00:
                    2f:ba:70:30:ea:95:e4:c4:53:c9:f6:ae:fc:45:ef:
                    a9:a3:45:f0:e3:d8:ac:f3:35:d3:82:7e:71:7a:72:
                    05:b9:14:47:e2:a7:8d:b1:41:77:d5:9e:06:fd:47:
                    76:cb:96:1a:97:e7:45:59:be:39:d7:64:96:30:ea:
                    15:50:e1:c5:d5:a9:eb:67:f2:33:38:a8:c3:09:b1:
                    68:cc:d0:97:4d:9d:c5:88:a3:10:a6:88:b0:cc:5d:
                    b6:ce:59:9e:96:0c:da:03:d5:fb:d0:6e:b3:6e:04:
                    0a:ff:80:8c:47:25:3f:a2:e2:f3:4b:b6:37:ca:8f:
                    a4:1c:0b:0b:d1:b0:49:90:ad:47:9b:56:ce:71:6b:
                    68:9e:41:c1:eb:5f:fb:8c:19:a9:c3:ae:9d:b6:12:
                    a0:7b:6d:7f:19:80:dd:8a:3a:4e:76:18:2a:12:75:
                    50:18:ed:01:42:68:70:8a:44:62:42:00:77:48:e4:
                    bf:74:55:d6:e3:41:e4:eb:e5:25:78:d3:97:3c:12:
                    da:e0:8a:c9:3b:55:0f:63:4f:9c:1e:41:f7:ec:14:
                    ba:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:D9:DD:23:A7:FE:12:D1:44:C4:AC:2F:30:6F:12:94:D1:54:3D:28
            X509v3 Authority Key Identifier:
                keyid:57:88:49:C9:B9:4A:35:5A:76:20:A9:74:79:73:D2:1B:BE:DA:3F:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91410C5/D109EBD0572E11F095F7FE48C4F9AE02/V4hJyblKNVp2IKl0eXPSG77aP1M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V4hJyblKNVp2IKl0eXPSG77aP1M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91410C5/D109EBD0572E11F095F7FE48C4F9AE02/V4hJyblKNVp2IKl0eXPSG77aP1M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:5c:c1:50:7c:7d:87:67:03:db:f5:98:e1:d3:fc:65:6a:2f:
         87:6f:59:c1:12:4e:d6:5f:57:b1:59:73:5a:fe:4c:4b:18:0d:
         ae:89:b6:92:fe:24:ca:ee:d0:8f:e3:31:d4:f0:aa:c8:2b:50:
         e0:d2:69:4a:61:7c:94:dc:db:22:b1:25:61:e4:4a:50:69:19:
         39:98:ad:95:da:92:28:48:f8:73:ab:2b:a4:1b:ee:e8:70:1c:
         94:ee:59:ad:9c:28:db:73:82:ab:83:ab:6f:12:14:f4:26:96:
         83:71:e4:66:1a:a3:05:40:d2:ee:56:cb:ed:ef:05:50:1e:63:
         84:33:bc:99:44:0d:37:f0:37:cd:6c:32:59:70:89:d8:63:bc:
         40:fe:11:eb:ed:be:b7:b7:f0:4f:3d:de:c6:67:9f:cf:69:5e:
         4c:3e:89:24:0c:a2:5c:dc:20:02:4e:14:84:6a:22:76:1a:96:
         3a:94:b4:fb:43:69:57:01:d4:a1:52:bf:93:6b:d5:7a:23:c4:
         19:c4:27:8c:51:62:ef:06:b9:47:df:2b:80:80:ae:dd:cc:78:
         11:bb:cc:38:b5:a6:f1:76:3f:c8:5b:56:c9:f5:f6:4b:21:ec:
         b9:16:ce:26:11:7b:7f:96:2f:ee:98:99:b4:df:02:6d:da:70:
         cd:f6:1d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:15:16 2025 by rpki-client