Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft
File:                     fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft (raw, json)
Hash identifier:          MsRG37sX6Cck/RoF0schsyd3Ygc/1l2h+l9kdZNlb9U=
Subject key identifier:   32:38:0F:8D:F7:B1:54:28:C7:E5:FD:25:C4:00:B2:D3:5C:BC:D2:33
Authority key identifier: 7D:18:D8:77:50:21:05:FA:18:72:AD:EE:4C:F2:62:3C:41:4F:16:B5
Certificate issuer:       /CN=A915D4F2/serialNumber=7D18D877502105FA1872ADEE4CF2623C414F16B5
Certificate serial:       03BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft
Manifest number:          03AB
Signing time:             Sun 19 Oct 2025 02:46:50 +0000
Manifest this update:     Sun 19 Oct 2025 02:46:49 +0000
Manifest next update:     Sun 26 Oct 2025 02:46:49 +0000
Files and hashes:         1: fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl (hash: XEzDCbOjAb+aLO/ZmAlLH1oKZyxWZn3GND6+CXk4kL8=)
                          2: 2E6B1980CA0211EF80E1DD42C4F9AE02.roa (hash: tjP7XKoMqNX1LQ2yQaonbdxhhj6KFZbH0sAXzwNewCI=)
                          3: 319786BEB63B11EF8D06900EC4F9AE02.roa (hash: jSZIZjYKkStn9QppODMFCLkxqd3q8dcDZLkti6SpjkQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl
                          rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 02:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 956 (0x3bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D4F2, serialNumber=7D18D877502105FA1872ADEE4CF2623C414F16B5
        Validity
            Not Before: Oct 19 02:46:49 2025 GMT
            Not After : Oct 26 02:46:49 2025 GMT
        Subject: CN=68f45119-4b62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ce:b8:06:20:aa:96:3a:6a:b5:ca:ba:8a:a8:
                    55:59:08:dc:bb:ab:d1:96:0e:3e:a6:26:8e:c7:21:
                    76:ec:bd:21:d4:50:e7:ba:5f:bd:1a:9f:bb:55:71:
                    94:d0:2c:13:0f:49:21:a3:e3:7d:45:05:dd:05:12:
                    fe:fa:75:ed:6e:e2:02:31:ce:a3:66:d5:33:47:92:
                    98:c0:16:76:81:1f:88:53:67:21:a9:02:9a:b8:34:
                    38:1e:64:b3:36:07:a7:91:6e:c8:8e:c4:9c:4f:5c:
                    77:d1:d5:71:c6:21:de:78:56:d4:d4:71:9b:eb:af:
                    5d:58:fd:43:64:92:f7:1b:d5:4d:cf:02:7d:a1:0e:
                    d7:aa:35:fe:bf:16:cf:36:16:4f:56:d4:9b:56:34:
                    b9:40:03:4a:a6:a4:7c:46:f9:b5:80:3d:94:32:9a:
                    e5:2f:cb:92:a9:6f:85:27:6d:1f:a6:34:38:4e:25:
                    c4:34:bf:ad:8c:07:76:7d:9d:1f:cf:27:9e:aa:b0:
                    eb:aa:23:f4:a9:de:56:30:52:5b:9a:f1:56:60:de:
                    0b:39:53:23:9e:94:0a:e3:85:45:d1:34:b2:cb:ee:
                    64:08:34:34:b2:1a:6a:4b:dd:e9:12:c9:b9:f2:3b:
                    b9:66:84:b3:06:61:e9:4b:b2:ae:60:1e:4c:fd:06:
                    91:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:38:0F:8D:F7:B1:54:28:C7:E5:FD:25:C4:00:B2:D3:5C:BC:D2:33
            X509v3 Authority Key Identifier:
                keyid:7D:18:D8:77:50:21:05:FA:18:72:AD:EE:4C:F2:62:3C:41:4F:16:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:ea:61:37:f7:8d:a3:02:d9:a4:37:ef:46:13:3e:20:c2:11:
         c5:7a:dc:88:f9:a9:54:72:ff:44:1a:d6:e0:44:0a:1e:5c:dd:
         98:ae:5f:9f:c8:10:ae:de:a6:83:0c:21:8f:be:e0:13:f6:4e:
         b6:3d:1c:e1:ec:23:68:31:b6:b4:c5:52:37:25:99:08:72:82:
         90:e2:4b:89:5f:3b:72:ef:bd:f9:6c:88:40:3e:f0:ff:c6:96:
         d5:25:e0:0b:31:de:b3:1f:d5:fb:3b:39:bd:3c:87:be:f2:c4:
         59:dd:10:6e:e8:5a:a8:75:d3:ed:d3:5a:a2:36:11:e7:f2:82:
         94:46:03:6d:01:4d:bd:1f:91:59:9e:b5:d7:50:29:ef:11:76:
         24:01:3d:c6:e0:7d:de:4f:df:22:c0:90:18:e9:29:9a:ac:bb:
         55:60:8b:bf:9e:a4:4f:3b:59:a1:da:7f:08:c4:7e:f0:e2:b5:
         1f:e3:e7:ab:c8:08:0a:27:ad:3f:84:25:f9:09:b9:5b:84:e6:
         c6:17:5e:dd:40:1e:e0:ed:a9:c2:5d:3c:7f:b2:3e:5d:86:37:
         d5:15:c9:a8:d4:9f:5c:78:a2:2b:df:fb:a5:40:19:03:73:f5:
         8a:c6:c4:57:f3:3b:6e:37:4d:2f:11:44:e8:a1:d4:d1:99:17:
         22:8f:6b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:49:27 2025 by rpki-client