Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.mft
File:                     p878FwCk4YRmJQjHgV9-sdASnr4.mft (raw, json)
Hash identifier:          XeaYvdAwy53tJYDv3Qa9vrNbmSF8qYZkwukCUxePFSY=
Subject key identifier:   2A:4C:31:F0:F5:E5:2B:9D:3D:AE:F8:93:B4:F9:F4:7A:E7:CB:03:2B
Authority key identifier: A7:CE:FC:17:00:A4:E1:84:66:25:08:C7:81:5F:7E:B1:D0:12:9E:BE
Certificate issuer:       /CN=A9152B13/serialNumber=A7CEFC1700A4E184662508C7815F7EB1D0129EBE
Certificate serial:       010B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p878FwCk4YRmJQjHgV9-sdASnr4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.mft
Manifest number:          0106
Signing time:             Sun 19 Oct 2025 07:56:31 +0000
Manifest this update:     Sun 19 Oct 2025 07:56:30 +0000
Manifest next update:     Sun 26 Oct 2025 07:56:30 +0000
Files and hashes:         1: p878FwCk4YRmJQjHgV9-sdASnr4.crl (hash: ZX7o2kyqpJTap4rWFI6W2/mTfucvt0jSB8Ys7TmwhZY=)
                          2: 0BBF212E1EC211EF82A61739C4F9AE02.roa (hash: Jf2arvBq83FoSm5BKtxRrGvm4pEMUSYC+oIeuz2JcN8=)
                          3: 479B58B21EC111EF9258717EC4F9AE02.roa (hash: QIMDScliq15LdkPQsPXmCzkeCzTbM6NI7el8bqF5qD8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.crl
                          rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p878FwCk4YRmJQjHgV9-sdASnr4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 07:56:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 267 (0x10b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9152B13, serialNumber=A7CEFC1700A4E184662508C7815F7EB1D0129EBE
        Validity
            Not Before: Oct 19 07:56:30 2025 GMT
            Not After : Oct 26 07:56:30 2025 GMT
        Subject: CN=68f499ae-c6f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:30:a0:db:5b:c6:22:ee:80:ef:3f:80:88:98:
                    ea:88:43:b2:64:a0:42:eb:7a:08:03:8b:30:d4:2f:
                    5f:88:2e:78:a3:78:fe:95:1b:50:d1:e5:ad:94:28:
                    19:b0:af:50:59:20:9d:25:84:ff:02:9f:13:93:6a:
                    31:e6:51:ef:0d:e7:d5:57:52:ce:79:9f:28:dc:49:
                    4a:50:42:1d:c9:8c:51:d4:75:84:d1:01:93:d4:90:
                    c2:72:97:0a:86:36:ce:96:88:96:fe:60:19:9b:67:
                    46:10:81:96:d4:62:53:91:3e:9f:a8:bb:ff:4c:be:
                    81:4e:70:3b:e9:5e:b0:1d:79:dd:e1:7c:ba:3b:dd:
                    5b:b3:d0:a1:71:ac:16:70:1c:d9:25:ff:7c:02:62:
                    78:1b:85:94:85:b3:39:b7:30:e6:3d:46:e6:a2:6e:
                    66:b5:b7:b6:40:bd:6a:c8:f3:e1:24:a8:be:58:bc:
                    24:5f:09:02:8a:d2:d6:02:5f:f6:22:db:34:3d:66:
                    4b:97:5a:15:7a:2b:79:a0:21:f2:bc:40:5c:8f:79:
                    b6:60:76:2e:63:eb:a2:82:b8:f4:06:87:17:a4:87:
                    6a:34:2f:a6:8f:f6:f4:f8:a6:58:ae:32:72:83:47:
                    1b:5a:08:f7:33:6a:ea:c2:41:60:db:37:c9:45:50:
                    07:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:4C:31:F0:F5:E5:2B:9D:3D:AE:F8:93:B4:F9:F4:7A:E7:CB:03:2B
            X509v3 Authority Key Identifier:
                keyid:A7:CE:FC:17:00:A4:E1:84:66:25:08:C7:81:5F:7E:B1:D0:12:9E:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p878FwCk4YRmJQjHgV9-sdASnr4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:a5:70:92:38:1b:e7:98:42:1d:98:48:a2:16:bd:ec:e6:ac:
         ba:5e:fe:a7:78:6d:cb:59:bd:77:0a:7e:04:95:87:47:dc:3e:
         02:45:05:39:3f:7a:57:17:dd:ea:ca:aa:c6:c1:70:2b:4c:46:
         2f:c1:06:a9:66:86:0c:1e:60:66:72:35:a5:ac:8f:ca:22:a6:
         b2:8c:97:a9:95:e5:ee:ca:97:5a:a9:ec:1e:4d:86:61:f1:f8:
         dd:9d:fb:b5:06:9e:6e:e3:39:53:23:c1:97:a7:fb:9c:ca:0b:
         66:51:cd:9b:a6:88:77:86:b1:47:7b:51:05:be:ef:01:30:42:
         28:fc:a1:61:6f:c3:54:7b:d2:8c:cf:d1:0a:5d:86:0d:37:89:
         b3:68:82:cc:20:88:30:06:55:ad:e8:41:51:bb:87:f4:08:ea:
         bb:d1:b8:3c:29:70:be:43:da:4f:2a:db:d5:36:ef:31:8b:3f:
         2b:dd:78:41:3e:9d:1f:7b:0c:01:19:19:eb:13:f5:f2:79:07:
         2e:38:ea:c2:5b:7b:79:ae:7b:1a:9c:b4:fd:d9:fb:86:90:01:
         c5:7b:a6:46:42:1f:1e:ce:a0:85:57:ed:27:70:37:e6:35:19:
         7f:85:47:32:c9:17:86:50:1a:68:31:c3:93:7c:db:7f:53:1d:
         17:de:8e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:48:14 2025 by rpki-client