Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft
File:                     Rm8RJELF0C5g8kaZGTriFRlbO6k.mft (raw, json)
Hash identifier:          9xysRJCsKzoujwe89gwRdVJkF/w3NHTBgKZqxaqXOcc=
Subject key identifier:   B3:AD:51:13:4D:1D:DF:D5:E8:14:0F:D5:A3:38:78:74:24:1A:DA:5B
Authority key identifier: 46:6F:11:24:42:C5:D0:2E:60:F2:46:99:19:3A:E2:15:19:5B:3B:A9
Certificate issuer:       /CN=A915F89C/serialNumber=466F112442C5D02E60F24699193AE215195B3BA9
Certificate serial:       0DE6
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft
Manifest number:          0DC4
Signing time:             Sat 18 Oct 2025 14:24:15 +0000
Manifest this update:     Sat 18 Oct 2025 14:24:14 +0000
Manifest next update:     Sat 25 Oct 2025 14:24:14 +0000
Files and hashes:         1: Rm8RJELF0C5g8kaZGTriFRlbO6k.crl (hash: 9xsx6PeS1UGGgTiZqG76oV5ftjiObOTYRCzHh48Pliw=)
                          2: 266ABA161E5811EF89038F3BC4F9AE02.roa (hash: z3Q0XwSryFlf5ykqdN5Y1TdhtSCfR2jxPCzlYL9e1mQ=)
                          3: 1D3D0DC21E5811EFAC23683BC4F9AE02.roa (hash: VRtnd9Tj1mWAfM/JLgDB4PLLpcyhK2ei01M7Ec3zpI8=)
                          4: 91CA6CBC740111EFB5E97021C4F9AE02.roa (hash: YgDfwoJsux34uSaM5jXKcO0HoCC5yHWaw8GBRqOn1lo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.crl
                          rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 14:24:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3558 (0xde6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F89C, serialNumber=466F112442C5D02E60F24699193AE215195B3BA9
        Validity
            Not Before: Oct 18 14:24:14 2025 GMT
            Not After : Oct 25 14:24:14 2025 GMT
        Subject: CN=68f3a30f-ef5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:80:e4:3a:93:8e:f0:c6:a4:ef:5f:8a:32:f7:
                    37:5f:6f:1d:13:61:f8:3a:6c:67:db:41:54:e8:47:
                    c2:41:c1:70:37:c0:57:fc:03:40:9e:2a:3e:60:ba:
                    ad:90:0b:b8:8e:fe:5d:a1:71:f4:c7:0d:6b:80:27:
                    ed:39:2e:78:ae:5f:29:62:01:d1:b7:ba:f1:1b:56:
                    5b:21:84:4b:dd:47:6b:2c:1e:a6:f9:08:b1:00:2e:
                    90:53:c6:a6:61:55:94:de:3a:be:04:59:6b:ef:77:
                    4d:2e:83:f9:41:e3:4e:3d:de:13:05:ab:a1:91:61:
                    75:3d:64:0f:63:a4:84:4c:9b:0b:46:62:ce:8f:6f:
                    12:9e:c4:73:c7:9d:dc:5c:88:14:55:d5:0a:e0:37:
                    f6:09:58:66:f7:de:bc:3a:60:23:53:45:c6:0f:04:
                    e3:67:bb:2a:8d:0a:29:cb:b9:cd:6f:b5:f0:96:a0:
                    a3:1b:c8:ab:92:cb:19:83:ec:cf:b1:eb:05:10:80:
                    12:f4:aa:6a:f6:ef:a8:67:2c:28:49:9d:22:74:46:
                    21:b5:5b:e3:37:d2:93:f9:d0:b3:ac:37:c8:6c:74:
                    70:84:dc:bb:c3:92:8f:10:b4:8d:6d:c2:75:63:c2:
                    c2:9b:49:a9:d1:b6:90:41:f4:93:10:5b:26:6d:a2:
                    7c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:AD:51:13:4D:1D:DF:D5:E8:14:0F:D5:A3:38:78:74:24:1A:DA:5B
            X509v3 Authority Key Identifier:
                keyid:46:6F:11:24:42:C5:D0:2E:60:F2:46:99:19:3A:E2:15:19:5B:3B:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:e9:c2:ce:32:6a:2b:6c:76:ad:33:27:3c:db:48:b0:74:02:
         6c:52:e0:7a:07:37:99:4e:3f:0c:7f:2e:4b:ab:65:51:03:6d:
         01:55:c3:f6:ae:54:61:c1:3e:bc:b8:b6:7a:9f:9f:18:bd:05:
         b7:30:2a:80:b8:2b:57:08:88:01:47:06:3b:1b:16:c4:7d:84:
         d3:bd:32:40:26:c0:8f:74:5e:ff:32:f2:82:23:56:7c:f8:8f:
         2a:b7:45:03:5b:ca:e2:51:18:51:0c:82:f9:a5:71:fc:28:9e:
         40:03:eb:d3:36:44:96:51:02:dc:11:a9:14:ed:01:94:b8:7f:
         b6:95:94:ec:bb:cf:99:a8:53:67:e3:6b:d8:bb:dd:6e:a2:29:
         d6:78:63:46:25:ac:5f:8e:a2:cb:66:1c:e7:54:91:c0:db:46:
         99:cd:b2:8d:42:ee:71:1a:62:fc:14:42:2a:e8:12:8b:3b:57:
         a6:19:6a:f8:51:44:be:33:ae:95:70:12:3b:27:8d:e4:2d:0f:
         38:d9:40:33:f6:d7:db:e0:6f:5d:e7:a9:42:d5:f4:61:3e:1b:
         1a:7e:b7:6e:3c:31:90:c6:e3:f5:f3:50:4c:9e:61:23:51:9c:
         18:06:37:44:84:80:7f:80:fd:6f:25:88:a1:8d:b9:8c:4d:85:
         bb:12:1d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:31:05 2025 by rpki-client