Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft
File:                     r-cn5CCdzfgnYldLXjPICDeHoY8.mft (raw, json)
Hash identifier:          TaMkpUI4Zo8C0jb6tgi8PZsS0e/UCKtRUcTAqAnWfwE=
Subject key identifier:   EF:44:2B:A4:5D:37:DF:4E:25:FB:0E:87:82:C9:57:54:05:CF:B7:A0
Authority key identifier: AF:E7:27:E4:20:9D:CD:F8:27:62:57:4B:5E:33:C8:08:37:87:A1:8F
Certificate issuer:       /CN=A915AE5F/serialNumber=AFE727E4209DCDF82762574B5E33C8083787A18F
Certificate serial:       1EF3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft
Manifest number:          1E91
Signing time:             Sun 19 Oct 2025 08:30:32 +0000
Manifest this update:     Sun 19 Oct 2025 08:30:32 +0000
Manifest next update:     Sun 26 Oct 2025 08:30:32 +0000
Files and hashes:         1: r-cn5CCdzfgnYldLXjPICDeHoY8.crl (hash: QCjKawLMGFqKs6DrhHzefV2qOr9HJksNj76qSD6igyM=)
                          2: 7EFB8A6E885311E6BDE50A80C4F9AE02.roa (hash: WKYh+NxnsT3X7rLjv5qUGFM6/m1tIHkeIZefmgprnPs=)
                          3: D80B013A172011EEB3A9C124C4F9AE02.roa (hash: i+bH68t7yKzy0Rw6D9wkVEOs5mv50GBBoWxW4vThyQY=)
                          4: CF946690E5E711EE89AF4E5AC4F9AE02.roa (hash: Hy5wV1LNqpxbM5ijt7NUzM7tVBcEJ4OJJPk557Hpy8c=)
                          5: 882AC358E1F511EE9188A919C4F9AE02.roa (hash: 7XnoI3SWGKSLq9zz7HLNS32aw+KK++smhLaAOQ+1lDo=)
                          6: 5C6A7BE6E1F511EEA08A5519C4F9AE02.roa (hash: T6jmHSx80+1QapW6ywMYadpctCcOQDce4QIxekTXdlo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.crl
                          rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 08:30:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7923 (0x1ef3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915AE5F, serialNumber=AFE727E4209DCDF82762574B5E33C8083787A18F
        Validity
            Not Before: Oct 19 08:30:32 2025 GMT
            Not After : Oct 26 08:30:32 2025 GMT
        Subject: CN=68f4a1a8-41f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ff:a6:88:21:c9:c8:e2:ea:ad:27:4f:50:4b:
                    4c:52:84:0d:7b:ab:c9:83:f6:e3:61:26:b2:2f:4d:
                    94:60:b7:ea:bf:5e:ae:65:56:2a:85:e8:d2:7a:09:
                    5f:1d:4a:9c:e8:fc:48:13:26:44:4d:b7:4c:87:7e:
                    71:ef:a7:7b:fe:21:9e:d2:ef:38:73:fb:5b:eb:0d:
                    6a:8e:9d:2a:9f:34:c6:02:7c:b9:59:cf:d3:e9:8e:
                    49:80:46:11:ac:22:fc:01:37:ac:a2:9c:cb:9d:d3:
                    b8:61:2b:9b:43:ca:c0:46:0c:e8:f0:34:9b:84:ea:
                    a7:3f:7c:63:e4:03:35:e9:bd:63:f7:80:cb:11:8f:
                    d8:95:b3:05:18:68:9b:04:4e:05:d0:48:f9:e1:a2:
                    ae:33:a6:ce:b2:2a:e1:42:eb:38:fa:2f:d7:da:1f:
                    79:f0:c8:89:34:34:45:b5:fa:6f:dd:fc:31:d5:68:
                    d8:75:cc:e5:fd:e7:e2:ee:1e:5f:0b:bb:4d:e5:7a:
                    3e:3f:9e:ea:52:92:60:b8:12:da:b2:46:6e:63:9c:
                    9c:ee:dd:b0:85:62:a1:ac:1a:36:18:8d:1f:65:0a:
                    27:05:35:fd:0c:07:eb:dd:90:26:d0:80:3c:26:8b:
                    fd:99:ac:c3:4b:7f:df:ff:cf:4d:28:4e:69:5f:e1:
                    a9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:44:2B:A4:5D:37:DF:4E:25:FB:0E:87:82:C9:57:54:05:CF:B7:A0
            X509v3 Authority Key Identifier:
                keyid:AF:E7:27:E4:20:9D:CD:F8:27:62:57:4B:5E:33:C8:08:37:87:A1:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:b0:4a:2e:9c:27:fa:ce:6f:01:ae:00:d1:c2:dc:fb:c4:95:
         e0:49:f7:a1:b6:ec:94:69:2c:07:00:7a:ee:de:12:54:3d:a8:
         0b:0e:07:12:fb:19:0a:40:22:d0:bd:b2:02:a3:c6:f4:db:32:
         ae:f0:7f:2d:3b:43:ce:93:2a:df:5c:e0:84:15:2c:94:bc:99:
         6c:4a:47:a0:70:b4:63:08:51:2f:75:1c:33:51:3e:22:cd:34:
         ae:72:9b:ee:bc:ba:11:a8:d7:d9:67:8e:5e:44:a1:53:9a:5c:
         7c:fa:37:3f:8a:f0:ea:87:6b:4a:78:95:e2:7d:5a:fc:99:6d:
         15:3d:5f:7e:1e:44:b8:d5:91:d3:06:6d:e8:16:5b:d0:fc:de:
         d4:20:67:44:41:bb:00:e3:6f:27:d9:d3:82:00:65:17:1b:8d:
         d1:43:46:39:f9:97:14:e9:97:00:fc:64:56:5d:70:b3:e1:b7:
         49:75:84:92:2c:c0:9f:d2:01:0f:31:55:ea:7a:e6:2f:a9:27:
         83:c9:6f:c0:30:1c:1a:c7:d8:6b:76:5a:e6:2e:a7:2a:14:47:
         8a:96:79:dd:cf:7b:06:7c:f4:27:bc:1d:ae:d2:c5:c1:c1:b0:
         d0:25:4e:b2:55:93:36:02:87:69:cb:98:d1:e1:2a:6f:f3:54:
         79:80:e9:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:37:56 2025 by rpki-client