Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/75-XzrKSdlHWT6oC452-DaO3H5U.mft
File:                     75-XzrKSdlHWT6oC452-DaO3H5U.mft (raw, json)
Hash identifier:          tXdQemN/Q9yLnH3nA135dG+Kzxcmuqmd1gGYF/PYpdQ=
Subject key identifier:   98:55:6C:59:8C:7D:8E:B6:76:A2:AF:1F:0F:82:92:02:E9:8A:3A:B1
Authority key identifier: EF:9F:97:CE:B2:92:76:51:D6:4F:AA:02:E3:9D:BE:0D:A3:B7:1F:95
Certificate issuer:       /CN=A9165588/serialNumber=EF9F97CEB2927651D64FAA02E39DBE0DA3B71F95
Certificate serial:       85
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75-XzrKSdlHWT6oC452-DaO3H5U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/75-XzrKSdlHWT6oC452-DaO3H5U.mft
Manifest number:          7D
Signing time:             Sun 19 Oct 2025 10:08:53 +0000
Manifest this update:     Sun 19 Oct 2025 10:08:53 +0000
Manifest next update:     Sun 26 Oct 2025 10:08:53 +0000
Files and hashes:         1: 75-XzrKSdlHWT6oC452-DaO3H5U.crl (hash: 6GX5Vo+x3VK1XWhNphsR9LPDLnYjAj1vnThSueYLjk4=)
                          2: 2701A0D8769611F09C8ABC22C4F9AE02.roa (hash: UltTcVIqPHEDuUriQr1xUBBRJ1pBDqVcDmFzpS+wHEA=)
                          3: C405E494FCBF11EF8E586B7AC4F9AE02.roa (hash: 8p+dYc7w4P5cdTWL4po8oK48UBPSJ7b6JBGkywZrPZ0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/75-XzrKSdlHWT6oC452-DaO3H5U.crl
                          rsync://rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/75-XzrKSdlHWT6oC452-DaO3H5U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75-XzrKSdlHWT6oC452-DaO3H5U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 10:08:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133 (0x85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165588, serialNumber=EF9F97CEB2927651D64FAA02E39DBE0DA3B71F95
        Validity
            Not Before: Oct 19 10:08:53 2025 GMT
            Not After : Oct 26 10:08:53 2025 GMT
        Subject: CN=68f4b8b5-5d98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:46:16:91:c6:8f:93:05:eb:8a:34:9a:e3:9e:
                    2d:78:2f:b7:29:88:eb:e6:d2:e4:1e:06:11:a8:31:
                    7d:82:4e:92:40:e8:89:1b:be:ad:93:d8:e1:cf:43:
                    33:27:f6:07:87:5b:bb:e2:05:f9:9d:75:17:3d:bd:
                    97:79:8a:fa:17:be:8c:25:1f:6e:df:6e:6b:57:88:
                    05:8e:78:5a:53:74:b9:84:04:15:20:1a:d9:d8:53:
                    e2:51:44:43:ec:02:e5:4b:b0:c0:0d:e4:ab:e8:05:
                    11:9e:01:68:1b:c4:3c:f8:1c:34:70:78:c0:70:04:
                    92:31:d0:5b:ea:b4:e3:a9:7b:82:15:e9:70:2f:cd:
                    eb:89:d1:52:5b:d8:89:6c:ef:be:fa:f4:74:7b:9d:
                    24:03:1a:6e:95:ca:01:80:3f:55:16:3e:c0:96:28:
                    e5:e9:c6:98:43:d5:16:d9:9b:65:49:68:7b:9f:28:
                    8c:e3:a5:ea:ed:3e:98:39:aa:ea:46:2a:ad:09:31:
                    44:a9:68:db:01:08:af:02:0c:95:56:2d:b1:a0:b0:
                    04:df:65:5e:8b:5d:b2:e1:1e:c9:af:6b:63:94:36:
                    60:3c:3e:3f:c3:a2:7b:0a:77:19:37:18:9c:85:ae:
                    c0:3a:a3:93:77:c4:9a:a5:1c:1a:40:e4:6b:11:d7:
                    d5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:55:6C:59:8C:7D:8E:B6:76:A2:AF:1F:0F:82:92:02:E9:8A:3A:B1
            X509v3 Authority Key Identifier:
                keyid:EF:9F:97:CE:B2:92:76:51:D6:4F:AA:02:E3:9D:BE:0D:A3:B7:1F:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/75-XzrKSdlHWT6oC452-DaO3H5U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75-XzrKSdlHWT6oC452-DaO3H5U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/75-XzrKSdlHWT6oC452-DaO3H5U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:b7:28:03:ae:d9:ae:7d:6b:d8:73:a3:4a:b8:53:bc:d0:1f:
         5a:f2:c4:ea:3e:26:3c:98:08:10:ca:4d:7f:a7:52:b4:95:36:
         dd:07:90:7c:33:85:6d:a3:62:d1:bf:55:d0:7f:49:09:62:b9:
         04:a3:6c:35:d6:5d:84:0d:9f:21:ca:71:eb:e7:30:84:be:a1:
         e4:6a:30:f0:cd:48:df:9e:58:50:fa:0a:68:92:0f:e5:d3:66:
         5f:2d:4b:5c:35:c5:51:50:3f:13:56:35:d2:cf:d1:3e:ec:e2:
         09:9c:45:9a:19:58:70:d5:f6:6b:fe:8c:c7:60:9a:17:24:8c:
         96:1e:6a:6e:88:c2:be:d8:fa:95:93:30:ee:36:97:be:43:96:
         3c:93:84:35:3d:35:1e:87:02:c1:e8:cf:da:eb:55:c6:4c:dd:
         bf:1d:1a:7c:7c:29:ba:b8:6f:80:4d:38:e8:07:08:94:5f:94:
         f5:27:0f:46:50:b7:9c:18:9d:46:37:2c:8f:60:89:47:f6:7d:
         33:c6:ff:8f:9d:88:f5:96:cb:d1:4f:09:62:b1:6f:b2:b5:3b:
         63:98:51:80:fa:50:54:38:c6:ed:13:33:7e:3b:9f:3f:ae:7a:
         1d:43:4c:2e:d4:bb:1e:27:a4:e0:5d:cf:60:02:92:8c:5a:25:
         7b:ef:d5:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:44:30 2025 by rpki-client