Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.mft
File:                     fWozDw0BJJQnx_yd3dz0qCh2CwY.mft (raw, json)
Hash identifier:          H/SOQcZtwwGzqSIRmAMDGzwqjLbg/QCw/MVY4VHdQws=
Subject key identifier:   F8:A0:33:3E:5F:5B:33:58:27:96:A4:8F:70:2C:B0:C7:37:57:C6:A9
Authority key identifier: 7D:6A:33:0F:0D:01:24:94:27:C7:FC:9D:DD:DC:F4:A8:28:76:0B:06
Certificate issuer:       /CN=A9145519/serialNumber=7D6A330F0D01249427C7FC9DDDDCF4A828760B06
Certificate serial:       1C94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWozDw0BJJQnx_yd3dz0qCh2CwY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.mft
Manifest number:          1C83
Signing time:             Sat 18 Oct 2025 16:29:57 +0000
Manifest this update:     Sat 18 Oct 2025 16:29:56 +0000
Manifest next update:     Sat 25 Oct 2025 16:29:56 +0000
Files and hashes:         1: fWozDw0BJJQnx_yd3dz0qCh2CwY.crl (hash: UCas97B3snNVYwL5JvjkFKsZ5Q/onOPyUtvCsTUwSL8=)
                          2: 78D1DAC8E45E11E681F82341C4F9AE02.roa (hash: 3Dm5ElwPB3NMJf/bLLX77VdgpNnL/LPrpw6YAX3+x3w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.crl
                          rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWozDw0BJJQnx_yd3dz0qCh2CwY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 16:29:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7316 (0x1c94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145519, serialNumber=7D6A330F0D01249427C7FC9DDDDCF4A828760B06
        Validity
            Not Before: Oct 18 16:29:56 2025 GMT
            Not After : Oct 25 16:29:56 2025 GMT
        Subject: CN=68f3c084-f3f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1a:ab:25:b0:33:00:6c:5f:96:2d:86:fe:fb:
                    fb:ca:2c:ed:5e:62:86:54:6c:01:eb:a4:df:2e:73:
                    23:13:82:e8:d4:7e:34:cd:e8:e3:1d:e8:c1:5e:3c:
                    1b:7d:fa:f7:44:88:63:cf:b7:77:ec:9f:b9:e0:3a:
                    a7:d4:97:da:80:aa:6c:49:f1:56:9b:88:04:22:51:
                    5b:29:f0:96:ab:19:1d:15:77:e2:86:22:82:8b:b7:
                    68:cf:58:21:d1:2b:85:54:d1:55:aa:97:3c:ec:f5:
                    4d:37:74:b7:9f:41:b2:92:2d:03:e3:47:8f:fa:f3:
                    1f:ac:90:54:5e:3b:78:c4:54:35:d8:3d:3b:92:dc:
                    6e:dc:2c:8e:91:1b:64:61:e5:f8:a1:96:0c:88:71:
                    e0:7b:41:8f:1f:13:b2:53:e1:cc:ce:64:58:61:58:
                    4e:78:d9:cc:4b:34:03:5b:62:d9:4a:10:37:82:79:
                    cd:3e:c6:41:30:59:01:4c:8f:a4:e7:eb:af:73:ff:
                    94:e2:1b:f4:62:23:81:41:68:86:fc:0d:4d:44:4f:
                    cd:b2:4b:61:59:59:b5:cf:4e:c4:62:9b:3b:f7:61:
                    cf:ef:30:ef:4c:b4:b5:57:16:49:7e:68:e0:68:b0:
                    35:df:12:71:01:94:2c:f2:93:b3:3e:4a:22:f0:85:
                    62:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:A0:33:3E:5F:5B:33:58:27:96:A4:8F:70:2C:B0:C7:37:57:C6:A9
            X509v3 Authority Key Identifier:
                keyid:7D:6A:33:0F:0D:01:24:94:27:C7:FC:9D:DD:DC:F4:A8:28:76:0B:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWozDw0BJJQnx_yd3dz0qCh2CwY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:82:e4:eb:67:43:6b:23:ee:cb:e4:4b:f2:07:b1:ad:24:50:
         e4:ef:0a:61:0c:8b:e1:ff:6c:e9:69:d1:83:4d:cc:cd:ce:36:
         5f:75:71:16:44:1b:d8:3c:0f:f5:72:ff:6b:03:5e:2e:3b:05:
         d8:b8:95:ba:c7:2c:f4:80:3a:27:67:2b:b3:9a:f2:95:6d:63:
         73:f0:88:f1:79:90:cf:b9:90:0b:a2:63:41:9b:2e:d4:a7:9f:
         88:c4:f0:54:26:3e:8b:14:8d:48:b9:ef:40:01:c1:c9:1e:94:
         12:15:71:b3:ff:b6:19:92:8d:84:8a:0b:46:86:22:53:6e:4f:
         3c:bc:0f:f8:07:e9:a0:4d:54:36:c9:9e:34:8d:19:f3:9b:32:
         1c:54:03:56:f4:6d:87:9d:3a:f8:20:ff:60:13:cf:dc:f0:e4:
         0b:68:a3:22:bf:f6:29:eb:6a:19:e4:c7:05:74:86:ae:d2:68:
         d6:11:5f:df:41:68:ac:e5:b8:f0:ea:b2:04:f0:ad:3d:b1:12:
         ee:b7:00:12:7b:41:b1:70:43:5a:ff:fb:4e:08:6f:5e:12:50:
         8e:a2:43:41:24:47:18:a1:ae:0c:a6:f2:1b:3d:cb:88:24:b2:
         cf:9b:7a:ca:b6:37:32:96:a0:5f:b7:73:3d:19:98:8d:ea:e1:
         cb:9a:b1:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:45:45 2025 by rpki-client