Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.mft
File:                     loAFcwGMfC-1oAgeY8Y_TaRAPLY.mft (raw, json)
Hash identifier:          Tm0XCKFlbUgxxKvEeY3Sis3hEfjnmfRh9kNmG5EQJRQ=
Subject key identifier:   FF:1A:93:66:70:91:1E:69:45:3A:53:3F:35:6C:29:59:00:78:F5:7C
Authority key identifier: 96:80:05:73:01:8C:7C:2F:B5:A0:08:1E:63:C6:3F:4D:A4:40:3C:B6
Certificate issuer:       /CN=A91534B8/serialNumber=96800573018C7C2FB5A0081E63C63F4DA4403CB6
Certificate serial:       02E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loAFcwGMfC-1oAgeY8Y_TaRAPLY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.mft
Manifest number:          02DC
Signing time:             Sun 19 Oct 2025 03:31:20 +0000
Manifest this update:     Sun 19 Oct 2025 03:31:20 +0000
Manifest next update:     Sun 26 Oct 2025 03:31:20 +0000
Files and hashes:         1: loAFcwGMfC-1oAgeY8Y_TaRAPLY.crl (hash: VQODSl6mYi8tIuupSb8J1rY4XnQ/ECuFpc6zmyFsPfk=)
                          2: E52CB968094711EDA5B20C0AC4F9AE02.roa (hash: 9v/ZeGZKD58JIKPG+TPtlKNDrryBJF2rWiKbvOcAj4I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.crl
                          rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loAFcwGMfC-1oAgeY8Y_TaRAPLY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 03:31:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 737 (0x2e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91534B8, serialNumber=96800573018C7C2FB5A0081E63C63F4DA4403CB6
        Validity
            Not Before: Oct 19 03:31:20 2025 GMT
            Not After : Oct 26 03:31:20 2025 GMT
        Subject: CN=68f45b88-117e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:07:80:38:3e:12:98:87:c3:7d:8b:fd:54:23:
                    10:55:57:40:3b:a8:e8:83:08:f5:67:83:78:89:a3:
                    45:be:f7:d7:e8:40:78:ff:d2:9f:28:2e:f8:ef:f1:
                    88:67:d1:3c:74:dc:4f:06:9c:e1:89:90:0c:b5:6d:
                    d8:a5:60:0c:6c:56:03:27:da:49:12:d0:b0:44:38:
                    78:bf:82:a3:24:74:2f:2c:90:4d:63:d0:13:fc:af:
                    2a:ff:f6:f8:84:aa:71:8a:0b:f5:bc:78:1a:7b:bb:
                    0b:0f:89:f4:89:f1:46:27:25:b9:43:4d:b9:b2:87:
                    40:7e:db:11:48:2b:4c:6d:cd:04:31:17:e7:16:36:
                    23:5e:8b:d9:b0:75:68:92:a0:f2:63:9b:28:2f:8d:
                    c4:1b:1e:4f:c7:9c:ec:11:55:8e:11:e1:d5:3f:16:
                    8b:41:bb:41:20:3a:1e:48:b0:2e:8f:f9:46:be:16:
                    1b:cc:52:61:fa:59:b1:61:ee:63:64:70:42:14:29:
                    d9:c2:2c:4f:56:b0:67:65:16:41:27:91:aa:f0:3b:
                    98:d7:1f:1f:ae:22:ad:a9:11:04:e1:8b:5a:8f:3d:
                    a2:67:ae:c5:6e:81:cf:b3:d0:06:5c:8f:34:fe:67:
                    b8:20:e8:be:7a:34:3e:e8:35:a4:fc:bd:42:1d:20:
                    87:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:1A:93:66:70:91:1E:69:45:3A:53:3F:35:6C:29:59:00:78:F5:7C
            X509v3 Authority Key Identifier:
                keyid:96:80:05:73:01:8C:7C:2F:B5:A0:08:1E:63:C6:3F:4D:A4:40:3C:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loAFcwGMfC-1oAgeY8Y_TaRAPLY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:36:9d:0f:68:ec:91:4d:8c:0a:96:1c:eb:ca:e2:bb:78:3f:
         fc:b3:b9:b8:0f:be:74:9f:f8:90:e5:2f:1c:7f:11:18:fc:23:
         79:68:68:9d:3e:ea:1a:ca:83:13:41:9b:60:47:46:d2:28:ca:
         24:9b:7b:45:fb:ef:72:73:10:4e:46:d3:da:00:0d:57:95:39:
         e1:94:95:fb:64:aa:db:6f:66:7c:17:94:2c:58:5f:28:4d:a9:
         39:2d:7d:87:e7:62:86:36:72:c8:21:d3:2a:48:f7:8b:6f:42:
         6b:fb:79:e3:59:49:67:72:38:8e:2b:2a:6f:e9:e0:7e:f0:80:
         e1:56:2f:2e:da:da:e1:1a:30:aa:0c:c6:ee:14:75:d9:5d:ce:
         8d:35:e4:15:0b:43:ab:fc:94:57:50:a3:a5:b3:b7:65:2c:15:
         4c:d1:e6:42:40:c6:ae:01:f2:25:89:57:fc:1a:e8:da:45:38:
         f3:bd:70:5b:44:75:d5:a8:a7:62:d1:be:ed:96:a0:9c:80:cb:
         69:c7:5e:c7:23:c6:62:99:b4:f2:69:4f:9a:28:61:47:7e:4f:
         2e:aa:af:ba:ea:48:9e:a8:18:1d:37:aa:c5:bd:26:b1:e4:4b:
         af:67:bf:52:77:39:1f:82:be:72:59:34:7a:ef:7f:65:7e:00:
         56:e6:1d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:04:46 2025 by rpki-client