Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.mft
File:                     T191psKYj1i2AwEqjbRFofN9XXI.mft (raw, json)
Hash identifier:          g0Pm09rs73c6tN67s6AwUsqIgPdZyEb+AV2Bj1Dg88M=
Subject key identifier:   25:22:20:52:C5:94:FD:E9:88:DF:5A:43:F0:9A:AE:E1:02:E3:91:B8
Authority key identifier: 4F:5F:75:A6:C2:98:8F:58:B6:03:01:2A:8D:B4:45:A1:F3:7D:5D:72
Certificate issuer:       /CN=A914C3FB/serialNumber=4F5F75A6C2988F58B603012A8DB445A1F37D5D72
Certificate serial:       84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T191psKYj1i2AwEqjbRFofN9XXI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.mft
Manifest number:          77
Signing time:             Sun 19 Oct 2025 10:20:46 +0000
Manifest this update:     Sun 19 Oct 2025 10:20:45 +0000
Manifest next update:     Sun 26 Oct 2025 10:20:45 +0000
Files and hashes:         1: T191psKYj1i2AwEqjbRFofN9XXI.crl (hash: rJoG3I8j3QtmirCpnN5yJN32C7u45PDccBwWRY2xHv4=)
                          2: 41E7BB1C0BA211F08457541BC4F9AE02.roa (hash: SLWKUoxyCCrW041ENZCKTkuF3OJqQTSoY0CsLhDIP04=)
                          3: 850942E4325311F081E87832C4F9AE02.roa (hash: YKfa7XcZECRGtp0hZwgH99jMIjA/4Bdgt+cMhZRSKcQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.crl
                          rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T191psKYj1i2AwEqjbRFofN9XXI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 10:20:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 132 (0x84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C3FB, serialNumber=4F5F75A6C2988F58B603012A8DB445A1F37D5D72
        Validity
            Not Before: Oct 19 10:20:45 2025 GMT
            Not After : Oct 26 10:20:45 2025 GMT
        Subject: CN=68f4bb7e-446d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:49:47:a9:6a:ec:31:54:52:2a:3c:f1:86:b5:
                    4b:e2:01:51:29:d7:d8:c8:f5:02:8f:33:d7:90:38:
                    8f:f5:9f:8d:59:30:9f:35:f8:cf:db:7e:9b:0c:aa:
                    2c:85:0a:0c:d0:05:15:8d:e7:07:cc:85:f7:4a:bf:
                    29:91:bc:96:ee:f2:cb:cf:ac:3c:8a:35:7d:db:4c:
                    9c:f5:6a:a9:96:d4:89:d2:f7:7d:2f:fe:e3:77:2e:
                    06:bf:52:7e:6a:dd:0f:f8:c4:76:b9:07:c3:d6:b5:
                    00:ee:a5:8e:07:6f:0f:5a:09:c5:c4:3d:2c:7f:5d:
                    a3:8c:05:26:5e:9b:2b:f8:a6:b0:4d:4a:8b:e2:f8:
                    6e:b0:b8:89:70:07:79:20:eb:34:de:d2:6e:4b:27:
                    b5:ee:64:8d:dc:09:02:14:ec:e3:7d:df:4d:93:e5:
                    47:c5:f9:a7:16:e2:f1:4d:d0:cb:1f:02:8b:75:ae:
                    9a:c4:be:9d:d9:10:c6:0a:70:51:c3:c4:d4:e7:e5:
                    f5:f7:7b:64:46:12:74:53:1c:65:43:08:83:b5:b2:
                    40:67:cd:ff:c6:c0:86:0c:6c:8b:13:ea:d9:a0:0f:
                    30:09:08:80:45:14:af:ef:52:53:4e:dd:63:08:cb:
                    b1:50:5d:56:98:2b:c2:23:61:bb:c1:d5:47:83:14:
                    4a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:22:20:52:C5:94:FD:E9:88:DF:5A:43:F0:9A:AE:E1:02:E3:91:B8
            X509v3 Authority Key Identifier:
                keyid:4F:5F:75:A6:C2:98:8F:58:B6:03:01:2A:8D:B4:45:A1:F3:7D:5D:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T191psKYj1i2AwEqjbRFofN9XXI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:07:08:f0:89:7e:ef:03:1f:8e:df:47:fd:1d:9f:c9:22:97:
         83:45:0b:0d:33:6f:18:c6:d7:84:3d:f7:8d:c5:a5:c4:52:71:
         b0:53:12:90:06:99:fc:9e:e8:ea:a1:4d:1e:20:02:fe:44:d3:
         dc:6a:30:2f:9e:0d:fe:20:b9:ec:de:f0:ab:27:36:2b:56:13:
         e3:9d:fa:d4:22:46:2f:4f:2a:b6:c3:c9:f7:5a:3e:26:e0:96:
         57:55:10:55:e8:ee:44:63:d7:c4:24:4f:86:0e:ea:e6:ba:26:
         da:ed:26:51:26:9b:09:dd:41:50:08:55:0b:f4:ae:3a:a0:07:
         a4:ab:e2:6c:dc:99:f6:ed:46:0e:09:b5:5c:bf:0e:7d:d5:1a:
         45:18:e6:df:bc:6c:05:ce:5e:c5:fd:40:e0:38:75:ba:a9:08:
         f3:2d:b0:94:1a:e2:cb:84:f8:50:c8:e9:be:3b:6d:2f:97:ec:
         0a:2b:65:bc:99:82:ac:bc:a6:4a:21:b2:7e:07:4f:db:f7:e7:
         f7:11:e7:6b:33:19:0c:e4:12:ba:9a:12:d6:d3:67:10:c6:0e:
         56:ff:c6:47:04:f0:fc:b7:62:43:bd:10:fd:08:c7:28:db:9c:
         3b:e0:ce:1c:e1:64:d8:bf:77:87:85:17:0f:ee:f5:6d:c6:d4:
         1a:f1:21:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:45:22 2025 by rpki-client