Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91650EA/521D1AD8D76711EEAF22C066C4F9AE02/SyWxRyDwREuz1mj5Y1hDVPf6whM.mft
File:                     SyWxRyDwREuz1mj5Y1hDVPf6whM.mft (raw, json)
Hash identifier:          BoPVS3BGx9VrfWjO4n66YiwEY20T6Uxv+OoFGxv/H0o=
Subject key identifier:   85:80:9C:47:5B:D7:99:5D:6D:F2:5A:65:B7:C5:38:19:97:B2:EE:54
Authority key identifier: 4B:25:B1:47:20:F0:44:4B:B3:D6:68:F9:63:58:43:54:F7:FA:C2:13
Certificate issuer:       /CN=A91650EA/serialNumber=4B25B14720F0444BB3D668F963584354F7FAC213
Certificate serial:       0132
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SyWxRyDwREuz1mj5Y1hDVPf6whM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91650EA/521D1AD8D76711EEAF22C066C4F9AE02/SyWxRyDwREuz1mj5Y1hDVPf6whM.mft
Manifest number:          0130
Signing time:             Sun 19 Oct 2025 07:21:39 +0000
Manifest this update:     Sun 19 Oct 2025 07:21:38 +0000
Manifest next update:     Sun 26 Oct 2025 07:21:38 +0000
Files and hashes:         1: SyWxRyDwREuz1mj5Y1hDVPf6whM.crl (hash: GSx78cFyaV3ib6zRT4qcV8cco5pfNDiSs9Z7lxISoSA=)
                          2: D0F245E0D76711EE99C72C29C4F9AE02.roa (hash: 9VKla165NEuwDujrYh1FdBvK2ZH/U/K5NZJL+RjIV7c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91650EA/521D1AD8D76711EEAF22C066C4F9AE02/SyWxRyDwREuz1mj5Y1hDVPf6whM.crl
                          rsync://rpki.apnic.net/member_repository/A91650EA/521D1AD8D76711EEAF22C066C4F9AE02/SyWxRyDwREuz1mj5Y1hDVPf6whM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SyWxRyDwREuz1mj5Y1hDVPf6whM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 07:21:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 306 (0x132)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91650EA, serialNumber=4B25B14720F0444BB3D668F963584354F7FAC213
        Validity
            Not Before: Oct 19 07:21:38 2025 GMT
            Not After : Oct 26 07:21:38 2025 GMT
        Subject: CN=68f49183-2685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:9b:00:28:12:56:49:f2:67:a3:ca:49:33:69:
                    e4:13:df:78:71:cb:95:ba:65:39:7c:b3:4f:f3:fc:
                    5e:54:fc:b2:44:96:fc:56:ae:ce:5f:de:69:de:2a:
                    93:be:a4:fe:c5:f8:04:23:19:19:90:d7:79:f9:69:
                    8c:78:b7:23:5e:d7:f3:47:da:cd:0a:a9:e1:8d:99:
                    8b:95:da:d1:4c:a0:ad:1f:00:c5:b3:f4:24:0c:bd:
                    66:b9:c0:7f:65:38:89:18:1e:e2:b1:b0:e1:0e:0e:
                    1e:61:e7:6c:f2:5b:87:81:f1:d4:ed:bc:d3:3f:6c:
                    34:47:f3:c4:e2:08:95:2a:2c:e1:1f:fd:89:f1:91:
                    f6:85:74:03:79:41:72:e0:d7:db:85:c9:b6:7b:22:
                    c4:33:8f:69:07:fd:1b:de:9a:0f:46:65:3b:11:20:
                    0f:4b:9f:f8:9a:44:d4:8d:3c:89:00:87:4b:ca:95:
                    ca:79:7f:60:81:a5:f3:d0:51:b7:5f:79:d3:35:6e:
                    99:ff:b3:7a:30:f7:bf:97:38:57:83:a1:af:b2:c4:
                    53:74:8d:4a:d0:ba:54:15:96:ad:ca:72:fa:89:9f:
                    97:ff:f0:07:f7:07:9c:75:60:30:33:2d:31:e5:6c:
                    a8:86:62:32:27:e8:86:31:a8:2e:d0:70:cc:34:03:
                    e8:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:80:9C:47:5B:D7:99:5D:6D:F2:5A:65:B7:C5:38:19:97:B2:EE:54
            X509v3 Authority Key Identifier:
                keyid:4B:25:B1:47:20:F0:44:4B:B3:D6:68:F9:63:58:43:54:F7:FA:C2:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91650EA/521D1AD8D76711EEAF22C066C4F9AE02/SyWxRyDwREuz1mj5Y1hDVPf6whM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SyWxRyDwREuz1mj5Y1hDVPf6whM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91650EA/521D1AD8D76711EEAF22C066C4F9AE02/SyWxRyDwREuz1mj5Y1hDVPf6whM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:07:5a:88:a1:cb:f3:f5:5c:ae:99:70:41:e7:ee:0e:08:02:
         03:4b:e2:98:39:90:24:39:ef:e9:f0:35:ff:62:ab:ac:1d:48:
         71:b8:ec:5a:0f:53:19:af:62:e9:88:7e:04:bb:2c:77:23:9f:
         bd:3a:b5:ae:20:e4:1a:2e:64:a6:61:37:d6:14:f5:3c:15:e7:
         2d:94:e5:92:83:5c:cd:e5:ea:38:35:5d:fa:e2:51:1b:42:ad:
         ea:07:95:b2:fc:7b:f1:b9:da:dc:5c:72:9d:ae:86:c0:13:21:
         18:c4:30:99:7f:ff:0d:3c:b3:cd:70:bd:56:c2:16:ef:b8:34:
         49:86:81:b4:4c:b8:8f:89:e6:f7:a6:d0:f9:d5:80:96:29:fd:
         bc:d2:fb:ed:30:7a:8a:27:06:9d:91:53:48:c1:26:be:91:24:
         80:d3:0d:20:de:23:b1:4b:94:81:ae:bd:35:4d:3a:31:93:56:
         3f:de:29:44:61:6d:96:9e:aa:1d:43:19:20:7b:a8:f8:19:24:
         4c:7c:1b:62:96:e8:e0:41:7a:7b:56:a3:73:7b:ba:84:b7:ca:
         01:22:c9:f1:cc:3e:d3:e1:a6:bf:68:7c:a2:5e:d6:cc:fb:66:
         dc:d2:f0:74:a7:8b:3c:ef:92:02:18:fd:53:0f:0a:3e:c7:1b:
         46:e0:61:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:03:54 2025 by rpki-client