Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.mft
File:                     IugbMnyx-zUB4Fr6uUEhkY_bW14.mft (raw, json)
Hash identifier:          HOce4/9gJ0DbKwolTY528+jLKs5KNGr68vVwQ23O2PI=
Subject key identifier:   A4:57:32:CF:40:3A:EC:C6:EA:17:5F:45:24:1C:6F:7E:0C:10:34:7A
Authority key identifier: 22:E8:1B:32:7C:B1:FB:35:01:E0:5A:FA:B9:41:21:91:8F:DB:5B:5E
Certificate issuer:       /CN=A914B5BD/serialNumber=22E81B327CB1FB3501E05AFAB94121918FDB5B5E
Certificate serial:       18B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IugbMnyx-zUB4Fr6uUEhkY_bW14.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.mft
Manifest number:          1881
Signing time:             Sat 18 Oct 2025 16:53:46 +0000
Manifest this update:     Sat 18 Oct 2025 16:53:45 +0000
Manifest next update:     Sat 25 Oct 2025 16:53:45 +0000
Files and hashes:         1: IugbMnyx-zUB4Fr6uUEhkY_bW14.crl (hash: 9rsn+k4bjwLpJatSec/B4Rb3BK7sVeGaYkdDODBUMEY=)
                          2: 99D6FBE6341F11E9BF826924C4F9AE02.roa (hash: YlOygXlIDX3GFV4d167GBuN4YNBn3vpIbjUm1yh/9cQ=)
                          3: AF066E3E8BF711F08B841259C4F9AE02.roa (hash: I9IuYeKsVkPA5gYO/x+81RjmFQuZFPQkT2hjEsy5mDk=)
                          4: 609B8BC27D7B11EDB6B77173C4F9AE02.roa (hash: iFueyXd2lHMmKAfnAjCjI5GADReoL75SeKIy87AJaM0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.crl
                          rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IugbMnyx-zUB4Fr6uUEhkY_bW14.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 16:53:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6324 (0x18b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B5BD, serialNumber=22E81B327CB1FB3501E05AFAB94121918FDB5B5E
        Validity
            Not Before: Oct 18 16:53:45 2025 GMT
            Not After : Oct 25 16:53:45 2025 GMT
        Subject: CN=68f3c619-2516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b1:14:3f:d9:b3:56:62:9d:dc:1d:b1:2f:39:
                    8a:c8:30:8a:4d:bc:a8:15:23:33:98:e1:38:e8:94:
                    4d:5f:89:2c:4c:ea:06:08:1c:78:19:4b:be:69:67:
                    ed:33:4e:a3:5d:db:a5:18:7f:c4:2a:df:87:b3:74:
                    b9:11:73:10:82:3a:39:35:dd:a0:6c:5b:97:1c:4f:
                    1c:ea:90:bf:fb:78:84:5f:42:e3:86:b7:8b:43:d6:
                    a4:6c:14:63:61:63:82:5e:07:5d:8b:81:fe:aa:a0:
                    00:ed:e0:b5:9e:17:a1:c1:1b:bf:c2:40:46:3e:20:
                    5d:41:44:f9:f4:d8:34:61:b2:d7:b0:d8:56:21:27:
                    71:64:50:ac:b1:2f:af:91:3b:48:95:36:99:13:3a:
                    7c:ff:9f:ea:fa:7e:13:60:fc:81:fc:a2:4e:b2:9a:
                    be:f8:0f:0e:83:3c:0d:37:45:e0:45:61:f0:80:69:
                    71:c6:52:5a:7c:08:6a:65:ed:50:b2:01:72:e8:00:
                    da:4f:bb:d3:d5:40:dc:73:1e:af:c2:88:5c:df:9a:
                    cb:4e:9c:84:9f:46:12:99:d2:77:68:83:3e:46:ea:
                    45:10:d1:a6:ff:d1:79:e1:bc:1e:5a:08:09:86:4b:
                    87:bf:5e:f6:fa:49:6f:31:05:e3:37:51:3b:85:47:
                    c1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:57:32:CF:40:3A:EC:C6:EA:17:5F:45:24:1C:6F:7E:0C:10:34:7A
            X509v3 Authority Key Identifier:
                keyid:22:E8:1B:32:7C:B1:FB:35:01:E0:5A:FA:B9:41:21:91:8F:DB:5B:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IugbMnyx-zUB4Fr6uUEhkY_bW14.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:6b:c5:c0:8a:d8:fc:96:fe:06:6a:b1:52:07:ef:56:fe:59:
         38:b2:60:c8:c3:fc:b7:6b:f7:03:27:c1:dc:3b:c5:3a:1f:85:
         b3:ad:9f:56:7c:c7:c3:c3:65:56:c7:82:f8:90:92:51:84:92:
         cc:0d:b7:33:6b:10:9c:3b:75:1b:b0:b8:5d:37:6d:be:a0:20:
         34:b7:4a:25:48:02:3d:b1:c3:f1:c9:88:f4:a4:8b:ea:c0:c4:
         97:16:41:c4:1d:80:f3:5c:6f:f1:7b:68:25:e6:7f:b6:57:c0:
         6d:29:8f:64:6d:b8:c1:f9:64:d7:08:3a:c6:cf:fb:bf:70:49:
         82:63:c0:61:ea:34:7e:ce:4f:06:25:ad:56:0f:40:05:31:ef:
         71:46:96:7e:bd:62:4a:f9:b9:fe:6d:52:90:eb:8c:cd:c5:83:
         f9:93:e7:db:df:8a:db:78:03:6b:69:c1:ec:13:4a:4d:2f:51:
         e9:97:97:cc:b2:8f:04:56:95:9b:02:9d:49:46:00:9f:45:30:
         68:d7:03:81:31:10:cc:29:27:a4:a4:c0:d2:26:9e:05:26:43:
         98:be:0d:91:a1:0f:5e:88:95:ca:54:3d:08:1e:be:6d:11:10:
         4e:cc:21:3f:81:c2:cd:11:e3:dc:85:23:07:b0:b1:64:dd:1b:
         de:3d:fd:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:45:39 2025 by rpki-client