Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.mft
File:                     t1kJKmkY9F6s0Nz9-XHQ0_pQIao.mft (raw, json)
Hash identifier:          CSUvdMD6hJam2n9XMZMi9wsJ6Zhjg3EA7Iuv6AouSgE=
Subject key identifier:   39:0B:6B:74:3C:F3:48:20:5D:DC:E3:D1:34:34:AB:3C:F1:0E:2C:6D
Authority key identifier: B7:59:09:2A:69:18:F4:5E:AC:D0:DC:FD:F9:71:D0:D3:FA:50:21:AA
Certificate issuer:       /CN=A9149680/serialNumber=B759092A6918F45EACD0DCFDF971D0D3FA5021AA
Certificate serial:       07E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.mft
Manifest number:          07DB
Signing time:             Sat 18 Oct 2025 22:24:55 +0000
Manifest this update:     Sat 18 Oct 2025 22:24:54 +0000
Manifest next update:     Sat 25 Oct 2025 22:24:54 +0000
Files and hashes:         1: t1kJKmkY9F6s0Nz9-XHQ0_pQIao.crl (hash: StNS/3RQISSxNkbIWmm6pjor2P4VZkOk4ZgW2i8qm5g=)
                          2: 4EF261AE0BA211EB99DE471BC4F9AE02.roa (hash: elCspCf7kpxqe/1sy2Dq4/SmTn/Yog4Qi7W5Fjs7BFA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.crl
                          rsync://rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 22:24:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2018 (0x7e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149680, serialNumber=B759092A6918F45EACD0DCFDF971D0D3FA5021AA
        Validity
            Not Before: Oct 18 22:24:54 2025 GMT
            Not After : Oct 25 22:24:54 2025 GMT
        Subject: CN=68f413b6-7739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:0c:1d:cd:43:ef:63:60:6d:02:7c:38:4f:f5:
                    5d:1a:62:44:6d:df:a1:c5:7b:36:e1:b4:7e:d2:46:
                    65:8a:88:8a:3a:09:c2:32:80:49:54:36:88:c3:17:
                    d5:1d:44:02:53:34:23:26:f5:2c:92:4e:31:8d:0a:
                    de:0f:be:34:11:f7:50:9f:1e:51:65:ac:fc:60:59:
                    97:40:4d:67:af:2b:2c:e3:b2:5c:85:9a:55:cb:45:
                    b1:d8:4e:54:59:aa:af:86:ea:55:76:bf:3b:a7:e0:
                    2d:be:ec:e3:da:41:2e:d6:20:ab:56:70:a7:1a:79:
                    f4:6b:2d:3e:31:3b:66:5d:32:a9:30:cc:8f:3e:10:
                    55:03:ce:b9:4f:88:17:59:da:9b:33:80:cd:0f:83:
                    cb:78:4c:dc:68:55:f9:ff:09:3d:07:df:df:4f:b5:
                    43:b5:54:57:c6:5d:de:62:a1:8c:5c:04:62:a5:cf:
                    ae:a0:0c:0d:0b:88:f4:17:26:b5:2f:3c:a3:2b:6f:
                    0d:8b:da:68:05:59:56:3f:e2:b5:61:09:ea:e8:e5:
                    71:a2:4a:9d:e8:6b:2f:ba:b7:6e:f9:09:54:4d:31:
                    28:a2:b7:01:56:6e:38:f3:36:6d:bb:00:f4:84:60:
                    25:0e:01:6b:2a:1e:9c:d4:0d:f5:4c:d2:52:3b:e6:
                    f6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:0B:6B:74:3C:F3:48:20:5D:DC:E3:D1:34:34:AB:3C:F1:0E:2C:6D
            X509v3 Authority Key Identifier:
                keyid:B7:59:09:2A:69:18:F4:5E:AC:D0:DC:FD:F9:71:D0:D3:FA:50:21:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:1c:17:0c:0b:23:67:bd:3e:f2:aa:fb:76:85:33:69:45:4c:
         54:58:90:b3:e9:c3:b2:91:20:60:83:ce:71:1d:e7:d8:3d:7d:
         3e:45:98:eb:f7:78:c3:8d:3e:fc:9f:61:db:1e:4e:be:6c:23:
         2d:3b:9c:38:ef:6b:07:39:fc:98:6c:ff:90:e6:ad:b9:65:0c:
         c0:f8:f1:fc:d2:9c:e9:13:22:e2:37:ee:d2:da:5e:be:f6:25:
         d7:18:97:51:77:b7:56:38:59:dd:65:ee:38:07:ed:65:d5:42:
         f6:38:f0:58:97:cb:6e:78:8b:e1:00:9f:98:d5:34:b6:27:d5:
         2e:7d:81:5c:53:04:06:80:a6:a9:12:03:72:37:22:3b:a4:28:
         d4:3d:b1:d9:16:c3:73:ef:f9:ef:e3:6e:8e:86:d9:ed:4f:14:
         06:11:e4:69:ad:8f:94:cf:1a:f5:e5:18:40:a5:c0:ee:e4:69:
         0f:42:f5:1d:5e:1a:cb:37:d6:20:af:0d:e2:2a:42:9d:49:ab:
         75:9f:28:4e:3d:2d:90:bc:82:65:b0:f8:59:89:51:f3:1c:26:
         80:55:d1:fd:dd:43:c7:91:7d:59:18:9a:a8:88:e9:32:43:7d:
         23:a8:50:92:e8:05:0e:56:d8:6c:d5:5e:83:8a:c4:a8:fb:8d:
         0c:27:aa:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:15:41 2025 by rpki-client