Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915479A/24A48388E37911EFB4666B31C4F9AE02/DS1vMynFa_bo-UG9_adJbb4lMOU.mft
File:                     DS1vMynFa_bo-UG9_adJbb4lMOU.mft (raw, json)
Hash identifier:          B0Cs9J2Cj/MnaX6DB8CJsbuLVFAzrVqbTBIA9kdfh8M=
Subject key identifier:   3C:50:95:57:24:A7:F5:21:19:BC:E0:F1:52:69:AD:F5:F9:B0:90:F1
Authority key identifier: 0D:2D:6F:33:29:C5:6B:F6:E8:F9:41:BD:FD:A7:49:6D:BE:25:30:E5
Certificate issuer:       /CN=A915479A/serialNumber=0D2D6F3329C56BF6E8F941BDFDA7496DBE2530E5
Certificate serial:       84
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DS1vMynFa_bo-UG9_adJbb4lMOU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915479A/24A48388E37911EFB4666B31C4F9AE02/DS1vMynFa_bo-UG9_adJbb4lMOU.mft
Manifest number:          83
Signing time:             Sun 19 Oct 2025 09:55:00 +0000
Manifest this update:     Sun 19 Oct 2025 09:55:00 +0000
Manifest next update:     Sun 26 Oct 2025 09:55:00 +0000
Files and hashes:         1: DS1vMynFa_bo-UG9_adJbb4lMOU.crl (hash: lHYBGmKxt5khPvUrHJh8KrJUGJjtMszrNnwRfxJMX0c=)
                          2: 8836D872E37B11EFB4D75458C4F9AE02.roa (hash: SXO1+0APe7z5DY3Hw4Iwvndpe+8U4RSEIeHcUiLcev8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915479A/24A48388E37911EFB4666B31C4F9AE02/DS1vMynFa_bo-UG9_adJbb4lMOU.crl
                          rsync://rpki.apnic.net/member_repository/A915479A/24A48388E37911EFB4666B31C4F9AE02/DS1vMynFa_bo-UG9_adJbb4lMOU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DS1vMynFa_bo-UG9_adJbb4lMOU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 09:54:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 132 (0x84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915479A, serialNumber=0D2D6F3329C56BF6E8F941BDFDA7496DBE2530E5
        Validity
            Not Before: Oct 19 09:55:00 2025 GMT
            Not After : Oct 26 09:55:00 2025 GMT
        Subject: CN=68f4b574-2ba5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:37:4f:23:ff:6f:d7:9b:26:42:db:ff:0d:96:
                    96:79:c0:ca:40:95:d9:76:75:1a:45:ea:3f:66:29:
                    bb:68:82:8d:03:4f:ee:37:31:e3:ce:b6:1e:57:4e:
                    9f:32:fa:40:75:b6:c4:20:83:95:9f:23:4c:e9:19:
                    3c:2f:2d:d4:b3:35:f1:bc:04:13:8a:f4:26:40:85:
                    dd:8f:1d:fb:96:67:a4:2d:ec:2c:11:7e:db:53:ab:
                    1b:29:5b:a9:75:15:0e:ee:ed:aa:84:93:92:ab:2a:
                    82:0a:b5:e0:32:0e:5f:4b:e1:28:fc:b5:36:fd:d7:
                    8f:0c:fa:99:5d:ff:8e:ef:5d:a3:a7:af:17:86:18:
                    13:6a:49:84:3f:46:de:fd:1b:20:db:85:fd:66:2a:
                    d5:a7:43:ee:33:aa:65:41:14:ce:22:4d:cd:72:63:
                    45:92:e8:be:9a:0b:50:21:5c:f2:1c:9d:7e:c5:06:
                    35:c6:b6:21:24:a8:a2:1c:c8:06:96:43:20:28:bb:
                    43:74:80:d5:c3:ab:fe:d2:76:98:ea:41:47:22:38:
                    9f:6d:d0:68:66:79:5c:b8:bb:27:e8:b5:23:28:04:
                    d0:e7:e2:17:4e:73:a7:4e:53:e2:ce:fe:fe:c7:62:
                    04:a0:9e:15:0e:77:da:45:a2:b4:73:a8:6e:4d:9e:
                    5f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:50:95:57:24:A7:F5:21:19:BC:E0:F1:52:69:AD:F5:F9:B0:90:F1
            X509v3 Authority Key Identifier:
                keyid:0D:2D:6F:33:29:C5:6B:F6:E8:F9:41:BD:FD:A7:49:6D:BE:25:30:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915479A/24A48388E37911EFB4666B31C4F9AE02/DS1vMynFa_bo-UG9_adJbb4lMOU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DS1vMynFa_bo-UG9_adJbb4lMOU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915479A/24A48388E37911EFB4666B31C4F9AE02/DS1vMynFa_bo-UG9_adJbb4lMOU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:04:de:3b:59:80:81:a8:9f:02:a2:9b:36:99:66:2c:6c:a3:
         41:3b:98:f2:8a:d3:67:9e:29:5d:0e:e1:e1:3c:2a:c3:32:bf:
         1b:04:b6:2b:71:ae:59:a0:49:a6:32:10:62:57:ee:84:0a:cd:
         78:04:41:05:19:3a:af:0e:31:b5:b1:07:48:b1:06:b3:cf:b8:
         45:f1:e7:3a:8b:85:07:be:b0:7f:aa:6e:8d:c9:e6:0f:98:79:
         1e:86:be:4c:49:6b:ae:50:af:81:26:34:01:40:17:17:81:4f:
         ff:7a:78:a2:b6:dd:9d:b0:44:30:55:92:38:d7:2d:ce:52:3d:
         6b:20:9e:5a:72:52:a4:3b:a7:57:51:bb:0d:76:90:d3:0a:e1:
         2e:26:b7:de:76:ba:40:f6:d5:e4:3e:93:1f:00:7d:c1:08:3f:
         e2:ed:2b:38:7f:8e:f6:aa:1b:a9:6b:13:25:92:1d:54:6c:b9:
         0c:38:76:bf:37:d1:7c:07:fd:8e:70:d7:95:2f:83:75:d1:32:
         07:29:b2:47:77:e5:a8:50:28:9c:79:8e:df:fd:83:d1:25:0c:
         ad:35:53:d3:a9:c6:f2:9c:1d:19:63:29:a4:3a:e6:34:93:c4:
         8e:a3:2b:61:cc:d0:38:98:76:10:28:de:00:da:72:65:bf:4f:
         fa:7f:a3:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 05:52:18 2025 by rpki-client