Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915180C/9A7CD3EA96B511E684F73411C4F9AE02/mmZSAdYWDzHXa50heh3_6tEsuoI.mft
File:                     mmZSAdYWDzHXa50heh3_6tEsuoI.mft (raw, json)
Hash identifier:          v2U+7YMtV0YGxt/LtKuM4+gGnVGxodoiBQ1iN3Nobu4=
Subject key identifier:   1D:5D:75:09:AA:73:98:12:3B:78:18:42:1D:5C:F4:1E:D5:FD:1C:41
Authority key identifier: 9A:66:52:01:D6:16:0F:31:D7:6B:9D:21:7A:1D:FF:EA:D1:2C:BA:82
Certificate issuer:       /CN=A915180C/serialNumber=9A665201D6160F31D76B9D217A1DFFEAD12CBA82
Certificate serial:       1E1B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mmZSAdYWDzHXa50heh3_6tEsuoI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915180C/9A7CD3EA96B511E684F73411C4F9AE02/mmZSAdYWDzHXa50heh3_6tEsuoI.mft
Manifest number:          1E0D
Signing time:             Sat 18 Oct 2025 16:24:08 +0000
Manifest this update:     Sat 18 Oct 2025 16:24:07 +0000
Manifest next update:     Sat 25 Oct 2025 16:24:07 +0000
Files and hashes:         1: mmZSAdYWDzHXa50heh3_6tEsuoI.crl (hash: 0Wx3/GYewYMWDgLe/xc9M1suARg8iDgK+JZYZHc8H2U=)
                          2: 5F313E6A99D611E6BB89D557C4F9AE02.roa (hash: E6FRFgy91DX39QwXhd6FNmc9ZicG2jWRbQwdVUf8ghA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915180C/9A7CD3EA96B511E684F73411C4F9AE02/mmZSAdYWDzHXa50heh3_6tEsuoI.crl
                          rsync://rpki.apnic.net/member_repository/A915180C/9A7CD3EA96B511E684F73411C4F9AE02/mmZSAdYWDzHXa50heh3_6tEsuoI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mmZSAdYWDzHXa50heh3_6tEsuoI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 16:24:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7707 (0x1e1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915180C, serialNumber=9A665201D6160F31D76B9D217A1DFFEAD12CBA82
        Validity
            Not Before: Oct 18 16:24:07 2025 GMT
            Not After : Oct 25 16:24:07 2025 GMT
        Subject: CN=68f3bf27-9188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:9f:c8:50:5a:5f:03:fd:f7:77:b2:ff:3d:44:
                    97:3b:e5:4b:b5:53:4b:73:4e:b7:f7:b6:e7:5c:f6:
                    12:20:98:6d:6d:e9:d2:fa:54:c3:8d:6c:db:85:a5:
                    41:a1:43:66:22:04:25:39:ab:31:cf:2a:7c:81:3d:
                    29:82:bf:18:f9:db:13:25:c7:ac:56:43:ba:9d:32:
                    4c:04:e1:27:07:a0:50:04:78:12:4c:ba:8e:3e:7b:
                    fa:89:05:cb:48:fe:fd:26:8d:c0:d8:a3:18:fa:3f:
                    9e:85:41:67:93:82:01:9f:cb:af:80:67:38:5c:60:
                    92:22:81:af:b7:67:8e:ce:7b:9d:15:01:a3:b9:88:
                    78:7a:67:3b:94:d4:86:fe:ac:49:bb:ae:60:33:7f:
                    b0:30:4e:18:b4:65:31:3a:bb:12:f5:73:84:dc:e0:
                    7e:dc:8c:b2:11:d1:d3:dc:54:23:f3:35:0d:1b:1d:
                    96:48:86:99:77:c3:48:04:b8:08:a5:fe:ac:08:3f:
                    90:90:89:c1:1d:62:48:1b:c4:37:12:22:c0:db:1c:
                    f4:90:99:a5:16:b9:5a:8d:a3:f6:57:02:83:b2:0c:
                    ed:3e:04:a1:bc:41:e0:5e:d5:4e:d1:bf:98:d3:cd:
                    77:ac:74:2c:ae:35:94:82:6f:7c:37:74:1e:81:87:
                    f9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:5D:75:09:AA:73:98:12:3B:78:18:42:1D:5C:F4:1E:D5:FD:1C:41
            X509v3 Authority Key Identifier:
                keyid:9A:66:52:01:D6:16:0F:31:D7:6B:9D:21:7A:1D:FF:EA:D1:2C:BA:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915180C/9A7CD3EA96B511E684F73411C4F9AE02/mmZSAdYWDzHXa50heh3_6tEsuoI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mmZSAdYWDzHXa50heh3_6tEsuoI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915180C/9A7CD3EA96B511E684F73411C4F9AE02/mmZSAdYWDzHXa50heh3_6tEsuoI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:28:91:c8:6b:3d:48:8b:9f:45:f1:88:16:1c:6a:25:f8:83:
         44:fd:a2:90:0b:ff:6d:4f:45:0b:7d:ab:25:1a:94:d5:7f:48:
         2b:50:e2:22:e7:3a:e3:a4:22:e5:78:5c:f9:d3:cf:1e:b4:0b:
         5b:38:e6:33:da:c5:62:f1:8a:e8:50:c7:8d:ff:fe:0b:b1:20:
         40:00:c1:96:44:16:de:41:b4:30:00:cc:6d:a1:39:92:40:b7:
         09:64:d3:c6:ac:3a:06:49:a2:60:1e:a7:e1:ca:fe:0c:a7:c6:
         a3:2d:60:73:e8:2e:1d:b1:d5:45:b2:42:da:ad:93:dc:f9:0c:
         74:ff:80:1a:56:32:d4:a0:1b:e9:71:14:78:d6:d4:fb:c6:e7:
         f5:e1:61:b4:40:49:9a:4b:40:db:05:f0:d3:7a:62:d4:b4:97:
         49:a0:e4:00:dd:1a:5d:23:2f:da:e6:a6:3f:f5:82:54:67:c0:
         73:e7:16:90:1b:4c:7e:d3:03:7b:f5:2e:c2:95:db:9c:d0:75:
         71:6c:eb:d8:ba:06:69:80:a5:c1:62:4a:be:09:5e:35:5d:dc:
         63:77:95:9c:f3:eb:23:b0:06:c1:92:94:ee:32:5f:bc:88:2b:
         73:c9:4b:4d:64:e3:dd:ee:e9:a9:92:00:98:a4:33:36:f5:03:
         ba:62:ed:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:06:07 2025 by rpki-client