Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.mft
File:                     dK62Py8dqVfWWCCWT_ed8PWTgAw.mft (raw, json)
Hash identifier:          yOydyhaDoy2wrmtW7LwSgBu3RvUt3uoWihva23cU+zM=
Subject key identifier:   07:4C:46:E9:92:8B:85:89:6D:3F:29:F9:FD:70:5D:2F:4A:D0:50:B3
Authority key identifier: 74:AE:B6:3F:2F:1D:A9:57:D6:58:20:96:4F:F7:9D:F0:F5:93:80:0C
Certificate issuer:       /CN=A914661C/serialNumber=74AEB63F2F1DA957D65820964FF79DF0F593800C
Certificate serial:       02AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK62Py8dqVfWWCCWT_ed8PWTgAw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.mft
Manifest number:          0285
Signing time:             Sun 19 Oct 2025 03:58:24 +0000
Manifest this update:     Sun 19 Oct 2025 03:58:23 +0000
Manifest next update:     Sun 26 Oct 2025 03:58:23 +0000
Files and hashes:         1: dK62Py8dqVfWWCCWT_ed8PWTgAw.crl (hash: VWPvNjrFbyonOTJbei7LIpjjseBP2fT/iQfABJYuMEg=)
                          2: 73FB6A56C81111EF84B47370C4F9AE02.roa (hash: FSQFwzvb6RuW0Sh2+svpj142oGUaQdy8xkFnU8z167U=)
                          3: 1E5E9AEAC81211EFB612B471C4F9AE02.roa (hash: 7iLFOV2BKyuTGCKpIHGsoIZ6F5iQ9/kJBEpaKwlQl9U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.crl
                          rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK62Py8dqVfWWCCWT_ed8PWTgAw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 03:58:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 686 (0x2ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914661C, serialNumber=74AEB63F2F1DA957D65820964FF79DF0F593800C
        Validity
            Not Before: Oct 19 03:58:23 2025 GMT
            Not After : Oct 26 03:58:23 2025 GMT
        Subject: CN=68f461df-68cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:04:11:5c:3a:ab:c8:42:04:c5:c1:c3:27:dd:
                    84:46:47:30:ca:38:e8:96:b0:0f:73:8b:fa:8b:d6:
                    42:c6:b8:e3:6f:c7:8c:40:63:43:7e:a7:3c:44:f3:
                    65:49:35:8b:ae:0d:72:20:66:8d:94:b4:50:32:2d:
                    af:ad:e6:47:06:9b:00:ba:e5:33:f0:7a:05:a8:0d:
                    58:7b:09:17:17:d0:4c:2e:bb:71:6f:62:4d:0c:d1:
                    9c:06:a5:78:ac:3e:00:b5:58:d8:96:8f:c4:7c:5f:
                    93:ff:22:cd:09:2e:d7:40:78:4a:cb:0f:72:cd:f2:
                    30:9d:93:6c:8a:35:44:f2:ee:57:63:d2:87:05:b4:
                    9a:fb:b5:ca:ea:18:8a:43:b7:53:24:d6:85:e1:84:
                    25:8d:d8:96:47:23:7c:c4:4c:dc:76:d8:ec:68:44:
                    cd:9d:a8:27:1f:99:c8:23:dc:06:be:92:66:92:8c:
                    92:35:cd:71:70:10:d4:aa:b1:81:e1:65:8d:00:34:
                    b8:94:01:98:28:da:7b:0d:c7:f3:bc:87:98:92:aa:
                    d7:fe:c7:fe:ac:2e:fb:4b:19:d5:5b:26:7c:54:ca:
                    10:23:73:c9:37:78:95:99:25:be:84:a7:5f:2c:f8:
                    54:84:89:af:fb:93:18:2c:f4:f7:e4:b6:0e:fe:cf:
                    71:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:4C:46:E9:92:8B:85:89:6D:3F:29:F9:FD:70:5D:2F:4A:D0:50:B3
            X509v3 Authority Key Identifier:
                keyid:74:AE:B6:3F:2F:1D:A9:57:D6:58:20:96:4F:F7:9D:F0:F5:93:80:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK62Py8dqVfWWCCWT_ed8PWTgAw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:cf:61:7b:83:0f:ff:bf:e9:f3:4f:15:a2:23:73:44:70:f9:
         62:70:91:86:a7:ee:4d:2e:08:88:7a:46:e9:c4:a7:0e:37:dc:
         a7:9f:0e:4d:c7:b7:50:d6:03:00:62:72:cf:c9:e7:c7:13:e7:
         ba:a5:08:b0:3c:57:3e:93:03:16:d5:1e:8a:e1:ea:c7:be:88:
         27:38:b1:e2:00:ce:9b:c6:1a:56:4c:0e:08:52:92:f0:56:4e:
         48:87:a1:c4:db:ec:e2:37:ac:d2:3f:82:4c:20:02:e4:68:2d:
         ba:83:41:bd:a2:84:b5:35:d3:2c:c1:f5:d2:d5:09:26:fa:96:
         48:52:2e:57:1e:51:b2:5c:93:b8:f2:1c:a9:3f:47:f4:95:e7:
         8f:f3:b9:e6:3c:a4:ed:75:a3:df:e5:ec:af:6d:dc:d1:cd:74:
         8a:4e:7b:46:88:bb:3c:37:5d:dd:1b:d9:15:ed:68:3e:f8:f0:
         af:27:40:a8:ab:de:8b:a3:61:b3:b4:45:96:0e:1a:72:52:29:
         5d:c7:18:0c:03:5c:3d:8f:6c:52:36:53:5d:96:a9:5a:53:02:
         7d:b0:6e:15:ef:16:cd:17:45:e6:9d:fe:c0:39:c1:bd:80:e1:
         4b:67:5f:63:8e:b7:c6:55:5c:91:ca:2a:99:f4:65:d8:42:f8:
         72:6a:ee:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:06:08 2025 by rpki-client