Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.mft
File:                     Exdoo2swNG49vr6_h7hIG6q-Pus.mft (raw, json)
Hash identifier:          CSF80y8jhGzqUHyGkDbcpwJlKsM5aydv2iRjMkE3E70=
Subject key identifier:   A4:E7:CE:37:DD:B9:CB:66:DC:67:29:FB:11:FF:2C:B8:9C:C8:0C:7B
Authority key identifier: 13:17:68:A3:6B:30:34:6E:3D:BE:BE:BF:87:B8:48:1B:AA:BE:3E:EB
Certificate issuer:       /CN=A915C281/serialNumber=131768A36B30346E3DBEBEBF87B8481BAABE3EEB
Certificate serial:       3559
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Exdoo2swNG49vr6_h7hIG6q-Pus.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.mft
Manifest number:          3522
Signing time:             Sat 18 Oct 2025 15:00:24 +0000
Manifest this update:     Sat 18 Oct 2025 15:00:23 +0000
Manifest next update:     Sat 25 Oct 2025 15:00:23 +0000
Files and hashes:         1: Exdoo2swNG49vr6_h7hIG6q-Pus.crl (hash: 44bd+22Ta8E7a59NEkje2rM5VTVQkPZrLfHBJADQ0wc=)
                          2: 92078AAE0B5411EF957DA628C4F9AE02.roa (hash: MDqcYhBOLAd7Ve6t+D2323MIjWFyCpfTNAq4hOx2Ghw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.crl
                          rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Exdoo2swNG49vr6_h7hIG6q-Pus.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 15:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13657 (0x3559)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C281, serialNumber=131768A36B30346E3DBEBEBF87B8481BAABE3EEB
        Validity
            Not Before: Oct 18 15:00:23 2025 GMT
            Not After : Oct 25 15:00:23 2025 GMT
        Subject: CN=68f3ab87-eabc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e3:8f:d1:91:ff:45:34:c0:7e:9f:b5:5a:96:
                    a4:e3:62:ac:88:e2:e2:e0:b7:6f:68:ed:01:72:0a:
                    ed:a1:fb:c1:12:18:c2:f7:d2:a8:ca:81:ae:47:b6:
                    08:b1:92:99:15:1b:10:cb:46:a7:d7:e7:b0:29:00:
                    41:f7:55:f3:35:62:de:14:b5:27:12:c2:d8:a8:88:
                    56:86:b7:01:52:ce:20:ad:41:7f:c9:ff:36:4b:ad:
                    e5:a1:5e:6e:2e:c8:c5:2c:58:d4:d5:3b:ca:3f:8b:
                    3d:a9:21:7a:35:85:56:d9:ed:3c:df:6c:c2:d4:15:
                    11:d7:71:3f:9c:6d:08:a0:dc:16:ca:ba:d8:19:9d:
                    d1:7a:18:ba:03:54:fb:1e:85:c2:cf:66:fa:ab:94:
                    99:96:ab:4f:f0:a5:98:95:7b:79:4c:f3:c9:49:5a:
                    ab:52:f4:b7:08:c5:24:0b:08:19:8c:b3:c6:11:11:
                    36:9e:d7:c8:c6:5c:ce:1e:b6:53:2b:73:44:11:8e:
                    dd:5a:4c:ab:b1:32:3f:e1:2f:1f:59:e5:7c:dd:c7:
                    a2:68:ed:05:85:47:ea:77:20:79:03:d0:f8:e1:43:
                    85:c7:98:a4:c5:60:08:93:e6:ec:97:f2:d3:c6:bf:
                    ef:ac:6a:df:b4:13:c8:3e:c9:73:c4:9a:14:25:c2:
                    61:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:E7:CE:37:DD:B9:CB:66:DC:67:29:FB:11:FF:2C:B8:9C:C8:0C:7B
            X509v3 Authority Key Identifier:
                keyid:13:17:68:A3:6B:30:34:6E:3D:BE:BE:BF:87:B8:48:1B:AA:BE:3E:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Exdoo2swNG49vr6_h7hIG6q-Pus.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:34:9a:06:b1:0a:3f:a1:f9:66:aa:58:2b:a5:81:7b:41:ed:
         0b:10:e8:1d:f8:40:6f:76:ad:66:d5:4f:ee:55:34:02:e0:d7:
         a5:04:35:fc:87:be:6f:ed:8a:7c:db:ca:c7:57:55:3e:10:e7:
         bc:b5:52:15:93:9d:4c:63:8d:8d:24:07:75:3f:42:17:06:74:
         2a:ad:c3:46:ea:b3:fc:c4:4a:05:7f:26:7f:fe:29:ae:72:1d:
         66:17:c6:5f:1f:76:29:0b:f5:88:b7:db:c5:92:2e:bd:02:78:
         18:b2:b2:2d:41:e7:8c:33:e1:80:b4:28:5f:71:bf:25:8d:af:
         d4:42:b5:9c:ce:4f:92:3e:2d:28:84:a4:aa:4b:c3:d5:16:04:
         b5:c4:7a:48:68:19:d8:4f:09:69:d0:96:a6:ba:ef:f6:65:41:
         df:e5:6f:ac:82:6a:9b:03:3c:eb:2c:e7:d1:54:db:23:de:7d:
         f3:65:8a:c7:77:68:d5:6e:70:ef:c8:97:f7:12:ed:63:0c:fc:
         bd:b3:ba:a9:fa:4b:f8:9b:02:fa:d9:34:0a:7c:f5:49:9f:8f:
         93:00:4b:2a:90:c3:74:fb:be:d0:92:74:20:d5:70:5f:4b:79:
         8c:12:ff:bc:4b:cf:9e:7c:13:68:c5:d6:c5:14:e5:53:90:9d:
         c5:10:c8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:24:15 2025 by rpki-client