Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft
File:                     zT31OqDpo5hZXpVwFRVbzKxWjRU.mft (raw, json)
Hash identifier:          fZ3ixrOhwjw8Vs8DRe3VMvsfVWO8UiMF1QNOMkS1jVQ=
Subject key identifier:   28:51:A5:26:B5:65:6B:74:13:B4:5D:04:9B:9E:E6:07:DF:7F:87:03
Authority key identifier: CD:3D:F5:3A:A0:E9:A3:98:59:5E:95:70:15:15:5B:CC:AC:56:8D:15
Certificate issuer:       /CN=A914EBB2/serialNumber=CD3DF53AA0E9A398595E957015155BCCAC568D15
Certificate serial:       0122
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft
Manifest number:          0111
Signing time:             Sun 19 Oct 2025 08:07:09 +0000
Manifest this update:     Sun 19 Oct 2025 08:07:08 +0000
Manifest next update:     Sun 26 Oct 2025 08:07:08 +0000
Files and hashes:         1: zT31OqDpo5hZXpVwFRVbzKxWjRU.crl (hash: qMVxDvy+6znuURJhtslkA0CC1XjfrdsFdxH9MF1oHxQ=)
                          2: BB8DC2EEDA3911EFB026B123C4F9AE02.roa (hash: ACt0GfmIsnWsiYO7nO4wwlOPBRzxk2m850xRSMz9+f0=)
                          3: 9292865625AA11F0A63D1D85C4F9AE02.roa (hash: 3k3KaN1j3W/678DW+zVJw9AP9zsgzVJ2wnOYz4kwK+U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.crl
                          rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 08:07:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 290 (0x122)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EBB2, serialNumber=CD3DF53AA0E9A398595E957015155BCCAC568D15
        Validity
            Not Before: Oct 19 08:07:08 2025 GMT
            Not After : Oct 26 08:07:08 2025 GMT
        Subject: CN=68f49c2c-5fad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:96:61:86:ce:dc:a4:87:98:c3:01:ed:dd:ab:
                    0c:85:d3:db:81:89:31:74:c3:5b:ef:aa:34:31:f4:
                    c7:0f:b7:fa:ae:f1:6f:8f:db:01:75:03:9b:5f:49:
                    43:f3:ba:bd:d5:20:fc:48:94:ee:cb:d7:f9:7b:88:
                    ba:be:f3:ea:f2:18:06:b3:ad:8c:a7:7e:95:ce:e3:
                    45:7e:df:4c:65:f9:69:70:c9:10:6a:88:5f:64:83:
                    00:1b:b4:35:51:8f:da:f8:83:48:b8:63:84:5b:03:
                    99:f4:9e:78:0f:fb:b4:0c:06:18:18:00:4a:74:bc:
                    3b:89:60:a4:69:86:cb:49:32:8d:dd:42:f9:71:ed:
                    5d:0d:73:cf:70:2c:85:99:78:e4:4d:52:13:71:d5:
                    8d:59:5b:59:34:80:b3:0c:e5:ab:c7:ea:a3:cb:b8:
                    6c:84:3e:7b:9d:02:5e:8d:5f:10:de:49:43:1e:c2:
                    0d:2c:72:10:38:c2:ff:bd:f8:7a:80:dd:4c:56:75:
                    b7:db:47:cc:b1:64:27:82:f2:1b:3d:27:d1:c5:be:
                    4b:2d:95:27:85:f5:50:6e:e1:81:c6:fb:59:c4:6c:
                    76:18:25:2c:54:80:f6:38:91:b0:c9:41:cd:48:e7:
                    07:70:16:7a:2b:e2:43:85:3f:30:42:2d:75:63:12:
                    fb:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:51:A5:26:B5:65:6B:74:13:B4:5D:04:9B:9E:E6:07:DF:7F:87:03
            X509v3 Authority Key Identifier:
                keyid:CD:3D:F5:3A:A0:E9:A3:98:59:5E:95:70:15:15:5B:CC:AC:56:8D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:3f:6a:7f:31:e1:fa:64:f6:d1:9b:7a:1e:7d:19:1e:4e:e5:
         3b:b2:04:3f:62:f6:d8:57:7e:42:07:32:58:68:35:0d:fe:0f:
         d9:b9:5a:f4:fe:e5:f0:c4:91:fb:0e:46:c6:20:b6:d8:3f:25:
         18:2e:50:fd:eb:6c:52:c2:2b:64:a8:44:de:5e:60:b1:b2:20:
         48:e8:62:e0:7c:af:68:20:59:34:aa:96:f0:a7:e1:50:44:53:
         10:4a:ea:b8:14:d1:76:0c:3d:e5:01:cc:c5:32:62:55:e6:5e:
         39:1f:66:b1:ea:50:9c:e3:83:a2:91:d6:be:d9:5b:47:a0:fd:
         34:ef:2f:95:f8:5e:8d:be:6e:15:a4:5c:e2:7d:e0:8d:81:eb:
         b1:63:df:59:cf:28:d8:95:c3:41:54:a0:77:d6:02:4a:56:08:
         9e:9c:6f:53:bf:ef:97:fd:c4:0f:fd:c7:32:05:6a:94:35:3b:
         2f:da:33:7a:5d:a1:e9:4a:61:46:3b:ae:36:d5:c7:d7:71:5d:
         3c:b5:09:b0:19:1b:71:fa:b7:56:af:b6:33:71:be:ff:6a:46:
         09:a3:da:51:75:19:3d:32:c3:2c:06:a7:86:56:43:90:f8:74:
         8b:9d:dd:c8:a6:3c:29:39:3a:be:ad:d4:c9:47:e1:2c:60:c5:
         44:6b:46:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:43:57 2025 by rpki-client