Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.mft
File:                     e-IwFTz_kAFkLbybJPhdDMKCNk4.mft (raw, json)
Hash identifier:          CuGn9csudXD63MUCgzUYRZf5Br0Od0s9gmxVEvf2LP0=
Subject key identifier:   00:5F:93:EE:74:F5:26:95:05:3B:0F:4B:50:AA:7D:8A:07:DB:10:F7
Authority key identifier: 7B:E2:30:15:3C:FF:90:01:64:2D:BC:9B:24:F8:5D:0C:C2:82:36:4E
Certificate issuer:       /CN=A91625DB/serialNumber=7BE230153CFF9001642DBC9B24F85D0CC282364E
Certificate serial:       017A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-IwFTz_kAFkLbybJPhdDMKCNk4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.mft
Manifest number:          016C
Signing time:             Sun 19 Oct 2025 06:42:09 +0000
Manifest this update:     Sun 19 Oct 2025 06:42:08 +0000
Manifest next update:     Sun 26 Oct 2025 06:42:08 +0000
Files and hashes:         1: e-IwFTz_kAFkLbybJPhdDMKCNk4.crl (hash: jNcI7gpVuSZ4QD9I5GF0AZavFdpFecpj43nmUKnSjdU=)
                          2: 9D3EBEF4921111EE9AD1150CC4F9AE02.roa (hash: H7JonSUtz6tgIVuXpEGUpFZ7fUQBIkEHbO/Cd9DHtNo=)
                          3: C00D9A3C71EE11EFA7DD021EC4F9AE02.roa (hash: j/6dClTGKIF6Y0W3OQ8vmv5qC35aQkMZjQK9N8GGPFU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.crl
                          rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-IwFTz_kAFkLbybJPhdDMKCNk4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 06:42:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 378 (0x17a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91625DB, serialNumber=7BE230153CFF9001642DBC9B24F85D0CC282364E
        Validity
            Not Before: Oct 19 06:42:08 2025 GMT
            Not After : Oct 26 06:42:08 2025 GMT
        Subject: CN=68f48840-2d30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:31:a7:12:43:95:45:05:e4:62:87:1b:22:52:
                    46:c4:7c:1d:b8:c6:0a:f5:6a:44:b4:1d:b2:b8:39:
                    53:94:84:e2:8c:4e:2e:73:c5:59:c2:33:21:ca:cb:
                    b5:86:04:5e:3f:d1:3e:37:9b:08:c3:79:21:c3:f5:
                    5d:40:94:35:1d:12:ae:01:8d:39:55:b3:5b:2f:f8:
                    94:e9:f0:aa:b9:29:65:1d:aa:65:5e:bc:63:5f:b9:
                    66:d3:ef:1f:17:74:c3:59:e4:e8:94:dd:a4:f1:12:
                    06:05:59:de:84:e7:e9:9e:79:08:af:84:c5:60:fa:
                    9d:c8:da:e1:00:3d:50:0d:26:11:cb:df:b5:79:26:
                    6d:31:27:d5:ee:8e:b4:80:bb:52:57:cf:17:a5:2b:
                    3d:a1:23:6c:77:e6:ed:7c:68:db:56:b4:38:83:aa:
                    08:3a:52:0f:73:ea:3a:8e:4b:8b:64:43:21:5c:44:
                    9c:ff:0d:2c:69:51:51:6f:41:3a:c5:1e:3d:09:b3:
                    1d:8d:0a:c2:eb:37:27:3a:ae:cf:bb:8b:ae:ec:87:
                    f0:a5:e0:bb:a9:30:2f:53:42:53:90:2a:da:93:ed:
                    31:99:47:4b:ea:c6:e0:43:f7:24:10:a4:a0:bb:20:
                    90:69:67:d0:5d:e4:fd:f0:f6:9a:d0:aa:f7:d4:52:
                    f5:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:5F:93:EE:74:F5:26:95:05:3B:0F:4B:50:AA:7D:8A:07:DB:10:F7
            X509v3 Authority Key Identifier:
                keyid:7B:E2:30:15:3C:FF:90:01:64:2D:BC:9B:24:F8:5D:0C:C2:82:36:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-IwFTz_kAFkLbybJPhdDMKCNk4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:5a:4c:33:22:a2:4e:4b:d5:f7:4d:db:e3:10:85:75:ab:de:
         a3:25:08:7d:ee:be:7e:93:ee:51:f5:26:66:ab:25:4c:7b:b5:
         8f:d1:2a:bf:9a:79:f0:ac:a7:c9:c3:0f:38:4e:a4:29:08:c6:
         6a:1c:6b:ce:97:17:af:aa:9d:5d:9a:f4:ed:7f:01:77:cb:8e:
         c9:f3:19:48:d3:5c:85:78:bc:27:88:93:90:0b:64:46:d2:db:
         eb:ac:a2:69:1f:d4:48:f2:3f:82:c4:dc:4e:fe:8c:ce:75:ba:
         55:6c:b1:ec:4f:a5:2c:08:65:ba:6b:c3:85:bb:24:d1:32:87:
         74:bc:23:f7:59:af:8d:68:d2:50:fa:35:13:ee:30:6f:d1:9d:
         60:6b:76:04:f1:28:35:9a:c6:46:1a:74:e9:c0:10:cf:3b:59:
         05:9a:1f:1d:78:bc:98:f9:9d:9f:0f:5f:13:9b:8d:7c:57:84:
         f2:9c:8c:4f:31:69:f0:95:f6:67:5a:03:8d:9e:44:59:29:ac:
         ec:ad:14:bf:d7:a2:3e:58:43:63:28:3d:5a:59:40:8a:24:a9:
         5b:c1:37:f9:54:10:7d:fa:ba:a1:85:fa:66:9c:0e:de:8a:4c:
         47:25:d2:5f:9a:7f:7b:6c:f1:11:12:d6:bd:7c:9d:db:8e:9a:
         dd:73:cc:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:01:50 2025 by rpki-client