Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft
File:                     15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft (raw, json)
Hash identifier:          l66slmIyezh5rvAR0vSJ1J1eViPFEjp0URoyoENhs7c=
Subject key identifier:   5C:DB:F8:0E:5D:CE:E4:4C:11:3A:2D:90:10:04:18:C9:F7:FA:09:1C
Authority key identifier: D7:90:C2:C4:69:32:BE:9D:25:82:2D:99:12:8E:BB:CF:03:3D:45:C4
Certificate issuer:       /CN=A9143F26/serialNumber=D790C2C46932BE9D25822D99128EBBCF033D45C4
Certificate serial:       01B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15DCxGkyvp0lgi2ZEo67zwM9RcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft
Manifest number:          01AC
Signing time:             Sun 19 Oct 2025 05:49:51 +0000
Manifest this update:     Sun 19 Oct 2025 05:49:51 +0000
Manifest next update:     Sun 26 Oct 2025 05:49:51 +0000
Files and hashes:         1: 15DCxGkyvp0lgi2ZEo67zwM9RcQ.crl (hash: fseM4Y82IFnz4dBZiCOyOdgcf4zfBz6h16sGxoHGg2I=)
                          2: 9728C64EF10811EE8F128341C4F9AE02.roa (hash: Q0kMZvSMppTmP/L1MFuKtKcyvw4++N9BtkqfdKNNGdY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.crl
                          rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15DCxGkyvp0lgi2ZEo67zwM9RcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 05:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 436 (0x1b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143F26, serialNumber=D790C2C46932BE9D25822D99128EBBCF033D45C4
        Validity
            Not Before: Oct 19 05:49:51 2025 GMT
            Not After : Oct 26 05:49:51 2025 GMT
        Subject: CN=68f47bff-b568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:9e:9d:64:a4:5e:41:63:59:25:e7:94:9d:67:
                    48:29:cd:db:b8:6e:06:88:f8:27:e8:d9:17:50:58:
                    dc:78:64:b2:19:9e:81:d8:9b:4c:5e:56:69:9a:27:
                    2a:2b:61:a2:1c:b0:ee:d8:62:1d:22:12:ca:bc:24:
                    43:2d:9c:07:d6:ed:91:ee:cb:8e:32:55:96:ac:37:
                    8d:30:05:dc:43:2b:a8:27:ef:7c:78:a5:14:a9:a7:
                    e6:01:0e:ab:70:66:34:11:81:7a:96:a6:ac:bf:c0:
                    0c:69:9e:6e:78:ea:5a:e8:ba:08:05:87:d8:c5:b0:
                    b3:3d:b0:9a:05:54:6b:a3:d8:25:e5:32:0f:a1:48:
                    60:99:0d:02:c9:b3:69:0b:32:eb:cc:89:78:ab:c1:
                    fa:67:d6:92:94:da:9d:1f:f6:8d:b4:f9:23:8f:9b:
                    9e:c4:f7:d0:d2:a3:48:d4:e2:6f:bc:24:1a:0d:7e:
                    d5:30:c3:09:87:85:9d:40:b4:b3:42:15:58:f2:b7:
                    c5:e6:71:9f:56:51:66:05:52:d6:28:ac:36:90:71:
                    e3:a4:f0:df:99:9d:c7:30:f5:de:d5:b8:08:ed:b7:
                    93:35:81:6a:1d:e5:13:02:da:3d:11:e5:77:18:93:
                    49:b7:42:07:37:0e:97:6d:f3:2e:e4:53:ba:24:7b:
                    2e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:DB:F8:0E:5D:CE:E4:4C:11:3A:2D:90:10:04:18:C9:F7:FA:09:1C
            X509v3 Authority Key Identifier:
                keyid:D7:90:C2:C4:69:32:BE:9D:25:82:2D:99:12:8E:BB:CF:03:3D:45:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15DCxGkyvp0lgi2ZEo67zwM9RcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:41:1c:03:61:94:da:8f:b6:12:21:6a:5e:07:7c:08:fa:9d:
         6e:3c:65:ce:38:41:c5:61:7c:cf:01:e0:73:0d:ee:28:1d:bf:
         fb:89:32:97:ad:28:50:66:aa:7c:25:9c:a2:a5:95:de:c1:b6:
         70:31:a4:a5:6d:ca:b2:8c:3d:3f:cb:6f:26:66:db:2e:df:4b:
         66:c9:c8:fb:57:3c:51:d2:9d:1c:26:d6:5e:ec:bf:56:ae:6c:
         99:e1:24:42:33:cd:47:6b:d6:2a:09:7c:4a:4e:de:89:d4:36:
         ac:2d:e2:21:61:11:a9:2c:6b:ba:7d:23:ce:82:de:a7:7b:2b:
         00:ee:7d:80:b8:9e:9f:0b:a6:c8:c4:5b:a3:89:93:70:55:00:
         45:72:0b:3e:52:be:18:a8:76:50:7c:17:1c:49:82:2f:52:f3:
         b6:a5:d7:bd:87:08:d5:b0:36:48:ea:43:21:a3:53:e3:f7:8e:
         71:63:27:99:09:14:fd:02:66:58:a7:c1:2a:dc:ad:8e:07:58:
         a5:99:ef:9f:d5:be:57:a0:f7:f0:c6:9b:dd:66:9b:c3:c2:8b:
         63:c2:69:67:76:1a:9e:c6:8f:24:9e:3a:04:91:1a:d1:4c:9f:
         ec:a9:71:5b:14:f6:32:d4:33:79:ad:b6:80:e5:00:22:85:0f:
         fe:41:06:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:44:59 2025 by rpki-client