Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft
File:                     oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft (raw, json)
Hash identifier:          zF2r6x2h+zngTOxKDu2ssYoD4a97bEx9XeZQfa//8xA=
Subject key identifier:   A5:3F:B4:66:30:9E:57:C8:62:46:6E:20:0C:78:A1:BF:49:CF:5B:54
Authority key identifier: A0:DE:57:2A:46:CF:32:4B:AE:08:C3:E9:30:BC:AF:E7:39:A0:15:D1
Certificate issuer:       /CN=A915BF4F/serialNumber=A0DE572A46CF324BAE08C3E930BCAFE739A015D1
Certificate serial:       02E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oN5XKkbPMkuuCMPpMLyv5zmgFdE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft
Manifest number:          02DE
Signing time:             Sun 19 Oct 2025 03:26:54 +0000
Manifest this update:     Sun 19 Oct 2025 03:26:54 +0000
Manifest next update:     Sun 26 Oct 2025 03:26:54 +0000
Files and hashes:         1: oN5XKkbPMkuuCMPpMLyv5zmgFdE.crl (hash: b/sL4NMvpyy1NfWeg2+vYi4JAY8QSI27lVBdvgciXDM=)
                          2: 42D236F0042111ED888BB024C4F9AE02.roa (hash: Sw/iVVZQKRk2IehEH8KSZSL+WBhl3LKTM/sZZ2FNR28=)
                          3: 41F88F22042111ED888BB024C4F9AE02.roa (hash: bOo49vshLt+uwGwclaQ/vUkNjrTzsnBMVbUbDnocL6Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.crl
                          rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oN5XKkbPMkuuCMPpMLyv5zmgFdE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 03:26:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 745 (0x2e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BF4F, serialNumber=A0DE572A46CF324BAE08C3E930BCAFE739A015D1
        Validity
            Not Before: Oct 19 03:26:54 2025 GMT
            Not After : Oct 26 03:26:54 2025 GMT
        Subject: CN=68f45a7e-85fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d5:e8:c0:8e:5b:03:4d:83:74:b0:e2:52:9e:
                    44:f4:22:6e:65:ce:ba:1f:13:c7:f0:08:03:3d:13:
                    fc:78:54:71:0e:4a:74:ac:70:d5:62:4a:1f:ca:df:
                    98:91:de:7c:03:aa:10:ad:66:61:1f:ca:e1:db:2b:
                    4d:0b:c1:48:21:fc:b9:35:37:4c:3d:72:31:b8:0f:
                    62:80:5f:56:39:26:56:a2:ba:47:4d:95:3b:03:35:
                    fc:a2:76:d0:f1:78:ca:69:81:d1:13:39:d8:b9:d2:
                    73:14:e4:8f:71:36:b3:40:64:cd:81:61:12:cd:1b:
                    b3:be:80:ff:8d:fc:9d:53:b7:b1:c2:a0:7f:29:3c:
                    a1:e5:b7:35:1a:87:bf:bc:b5:77:ff:59:e8:d0:f5:
                    0c:40:44:19:ed:b5:ca:21:75:ef:5f:03:d8:18:53:
                    1f:52:f7:f8:19:ac:07:03:57:e5:5e:c0:4f:b8:44:
                    9a:56:15:32:2f:d3:09:fa:d5:65:43:27:f3:9c:df:
                    42:ce:f1:7d:82:20:20:2f:c8:e4:d5:fd:cf:ae:32:
                    08:0c:02:21:df:56:74:fc:98:ac:d9:e8:33:db:79:
                    df:f6:92:ec:59:ae:27:f4:5d:88:6b:7b:5a:d0:c9:
                    f9:81:31:b3:eb:ae:b5:02:ff:b0:e1:45:a8:11:9b:
                    26:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:3F:B4:66:30:9E:57:C8:62:46:6E:20:0C:78:A1:BF:49:CF:5B:54
            X509v3 Authority Key Identifier:
                keyid:A0:DE:57:2A:46:CF:32:4B:AE:08:C3:E9:30:BC:AF:E7:39:A0:15:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oN5XKkbPMkuuCMPpMLyv5zmgFdE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:23:0b:5d:4b:1e:cc:52:b3:e4:07:76:b1:dd:b5:f8:e1:32:
         ad:6d:17:ec:27:8b:fd:90:1e:7f:50:c8:ec:86:3d:ae:52:19:
         17:c8:15:25:8a:20:97:77:e3:1b:e0:56:cf:92:d7:83:68:d2:
         14:57:86:76:73:24:3b:da:ef:84:9c:00:0e:1b:ad:c7:bb:39:
         07:75:b2:c2:25:fd:b1:dc:c9:41:a5:29:80:a3:d2:bb:4c:f1:
         dd:b6:c4:ba:82:43:4e:cf:11:11:1c:6a:b1:9f:56:32:ce:21:
         20:82:8b:d9:52:f8:4b:1d:37:ab:bd:36:83:c1:bc:d8:e0:7a:
         09:69:8d:a2:53:7b:98:a2:ab:cf:ea:20:ef:8c:36:f6:1b:99:
         f8:57:4f:73:61:9d:bc:1f:88:71:8c:d8:cd:d8:f5:36:22:f0:
         08:3d:6e:e3:89:bd:0b:95:d6:1e:55:5d:d3:d5:0f:49:55:17:
         33:fe:dd:fb:c5:cb:6b:f7:43:ce:14:16:87:dd:ab:5e:06:d2:
         d6:e2:46:41:1e:11:82:e1:fa:85:51:35:d7:26:bc:d0:d0:44:
         ba:58:57:f1:71:29:5c:e5:9f:6d:eb:f0:87:2b:30:fa:69:24:
         09:94:09:d4:72:e0:71:26:66:2a:60:46:d8:b7:0d:07:02:fb:
         86:89:c2:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:03:44 2025 by rpki-client