Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft
File:                     3YIYybgUroW5QGU2YHJQx6ruyAk.mft (raw, json)
Hash identifier:          BlzYzwVne3WbvJjHiTYGmmH6LmmK7t0fGhoPVgCbrkw=
Subject key identifier:   82:40:44:31:59:54:61:6A:DB:F1:09:E4:C9:2C:A9:BD:6C:82:46:22
Authority key identifier: DD:82:18:C9:B8:14:AE:85:B9:40:65:36:60:72:50:C7:AA:EE:C8:09
Certificate issuer:       /CN=A915ABD7/serialNumber=DD8218C9B814AE85B9406536607250C7AAEEC809
Certificate serial:       039D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft
Manifest number:          0394
Signing time:             Sun 19 Oct 2025 02:48:38 +0000
Manifest this update:     Sun 19 Oct 2025 02:48:37 +0000
Manifest next update:     Sun 26 Oct 2025 02:48:37 +0000
Files and hashes:         1: 3YIYybgUroW5QGU2YHJQx6ruyAk.crl (hash: d4NwxxJ+1aH9GSiqIXigKEsUVCTTz9MH6b+uaz7J7hU=)
                          2: 88F3C02C045611EFB93F1F33C4F9AE02.roa (hash: NYEcly+S03KH8Gz/ED4JBmnf9asUtp3vEim2ZrMueG0=)
                          3: A4F1EAECC09211EC8950E57AC4F9AE02.roa (hash: /dpglo9CFx73F4sqDk7WZ21gpjG8xDFFFJkPbHJ8/V0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.crl
                          rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 02:48:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 925 (0x39d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915ABD7, serialNumber=DD8218C9B814AE85B9406536607250C7AAEEC809
        Validity
            Not Before: Oct 19 02:48:37 2025 GMT
            Not After : Oct 26 02:48:37 2025 GMT
        Subject: CN=68f45186-33b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d0:ed:33:81:19:bc:25:b9:68:c9:12:16:7f:
                    a9:41:34:62:d5:21:b4:28:cb:a2:48:d3:9f:08:e1:
                    6a:7a:46:73:e1:1e:d2:af:bc:3c:87:23:df:41:04:
                    34:1a:55:19:ad:5a:eb:a6:27:08:f9:86:1a:9b:b1:
                    a5:4a:a5:fd:da:f2:56:b2:e9:17:63:72:6c:76:3f:
                    39:26:40:0e:43:02:b0:b5:50:83:48:27:ab:a1:81:
                    51:e9:f3:a3:6c:3f:c8:14:dd:95:21:27:9f:42:de:
                    d0:b8:d1:bc:27:4d:e9:79:eb:73:45:f8:9a:64:48:
                    4f:82:70:04:2d:70:8d:03:03:58:06:00:d5:14:7d:
                    4e:a5:f7:df:03:51:fa:9b:f0:d8:d1:f7:ac:b9:6b:
                    21:09:ea:81:57:fc:65:7b:ef:1e:32:8e:8d:af:00:
                    10:28:3a:12:cc:63:b6:bf:15:02:2f:a1:2f:b2:84:
                    c0:34:a7:37:1d:bd:48:28:9a:3a:d5:e2:b3:09:65:
                    86:67:50:22:d3:e7:8b:b4:37:36:e9:0e:47:c2:3c:
                    35:43:43:00:c1:30:39:92:0d:b0:1b:33:01:78:7c:
                    5c:8a:97:11:43:9f:bc:9c:0c:e8:4a:d1:12:54:d6:
                    19:94:93:d1:3a:94:1a:e9:58:10:86:89:77:8b:d5:
                    b5:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:40:44:31:59:54:61:6A:DB:F1:09:E4:C9:2C:A9:BD:6C:82:46:22
            X509v3 Authority Key Identifier:
                keyid:DD:82:18:C9:B8:14:AE:85:B9:40:65:36:60:72:50:C7:AA:EE:C8:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:66:dd:7a:91:e1:d0:92:98:1c:70:73:37:ec:1f:1e:46:88:
         a2:69:b9:ae:67:6c:8b:54:e0:a9:9c:d7:e7:e7:ea:9c:4d:40:
         59:c6:21:d0:f7:2c:fe:a4:d8:69:65:1c:cc:95:25:d9:13:d5:
         4a:49:0d:b4:0c:e8:d5:ed:fc:df:70:53:32:c1:41:ae:5f:63:
         aa:7c:d9:67:1a:2e:de:78:95:58:26:54:a7:49:40:86:f2:97:
         42:04:34:22:76:0a:e2:72:50:f1:9c:09:f0:d4:32:55:b1:2a:
         62:29:29:f0:67:15:7d:a8:16:31:3b:db:e9:e8:cb:97:dc:f2:
         8e:3a:8d:e8:35:ae:5f:dd:6f:8b:77:39:59:db:54:da:da:ab:
         60:d6:2c:d7:a6:af:c3:8c:13:6b:2d:b6:23:9a:1e:c4:b2:7e:
         9b:3e:aa:06:8f:1c:b3:f8:ab:83:d9:bd:9c:ae:97:1b:11:e8:
         03:ae:73:0b:32:3c:68:59:b1:95:9c:97:80:12:56:4c:4c:1e:
         63:f3:2d:b3:85:f6:ce:e8:bb:2b:bc:4b:f9:17:84:bf:a6:ab:
         28:ee:b3:0e:46:7a:ad:b9:09:d0:ab:f5:8a:14:6c:85:21:cb:
         be:3c:2f:f9:ea:81:ca:d7:74:68:24:84:1d:3f:76:8e:24:fe:
         cd:f4:9f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:47:42 2025 by rpki-client