Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/EdV6dX7VZXXQSeQpyOxzelYFC3k.mft
File:                     EdV6dX7VZXXQSeQpyOxzelYFC3k.mft (raw, json)
Hash identifier:          5FGT+3r4ldidEtpcuGSLcusmYgul+r9XjftkOUGH4BM=
Subject key identifier:   6A:CD:D6:D7:68:08:D5:7F:20:CB:96:A0:43:00:0E:45:8F:48:2F:A5
Authority key identifier: 11:D5:7A:75:7E:D5:65:75:D0:49:E4:29:C8:EC:73:7A:56:05:0B:79
Certificate issuer:       /CN=A91672F2/serialNumber=11D57A757ED56575D049E429C8EC737A56050B79
Certificate serial:       0F2F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdV6dX7VZXXQSeQpyOxzelYFC3k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/EdV6dX7VZXXQSeQpyOxzelYFC3k.mft
Manifest number:          0F28
Signing time:             Sat 18 Oct 2025 18:12:50 +0000
Manifest this update:     Sat 18 Oct 2025 18:12:50 +0000
Manifest next update:     Sat 25 Oct 2025 18:12:50 +0000
Files and hashes:         1: EdV6dX7VZXXQSeQpyOxzelYFC3k.crl (hash: O7OSw3Ic86b/+wNouQWbjLV7exIk+vQPvGARPZkZrQY=)
                          2: 6F89ECBE80D611E99C76DF63C4F9AE02.roa (hash: aXwfGlxqPqu7b393NAPdLMtIQdRhwXxgAFjX3VEBtag=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/EdV6dX7VZXXQSeQpyOxzelYFC3k.crl
                          rsync://rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/EdV6dX7VZXXQSeQpyOxzelYFC3k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdV6dX7VZXXQSeQpyOxzelYFC3k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 18:12:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3887 (0xf2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91672F2, serialNumber=11D57A757ED56575D049E429C8EC737A56050B79
        Validity
            Not Before: Oct 18 18:12:50 2025 GMT
            Not After : Oct 25 18:12:50 2025 GMT
        Subject: CN=68f3d8a2-9c13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:e3:53:b9:8a:c9:d6:34:b9:b4:a0:61:cf:12:
                    5d:49:14:52:0f:14:f1:dc:f7:9a:3d:c9:29:66:16:
                    26:7d:1e:9d:b0:b6:f2:f5:3d:89:fe:03:47:62:ff:
                    cc:9a:33:3f:01:f2:23:73:ed:97:8c:8b:7e:22:02:
                    d4:61:fb:2f:3b:89:1d:bd:b2:e1:84:ec:78:3c:08:
                    bf:35:b6:0e:75:49:81:66:e7:ab:aa:74:0e:23:34:
                    6c:10:6d:b1:3f:e1:6e:db:77:fa:47:63:5f:4c:2b:
                    c6:70:3f:e3:fb:3e:30:47:99:1a:fd:7a:69:34:b1:
                    ff:55:3b:18:00:1b:49:d3:c0:c6:a9:67:b8:1f:47:
                    0f:c9:08:01:d8:73:6b:14:ef:1b:8b:8f:a3:f4:ff:
                    6f:38:b5:4d:41:52:8e:e4:62:55:c6:35:ed:2c:bd:
                    db:61:ff:f6:38:76:e5:08:2e:5a:57:9b:a8:15:d6:
                    4e:94:80:d3:42:ef:f6:51:e1:f2:e2:f3:56:3f:e0:
                    ed:44:87:73:27:d0:35:1a:d3:91:ff:36:1c:4d:1e:
                    bf:c5:3b:10:9e:ff:b3:60:7c:ff:50:66:15:c5:64:
                    73:49:95:5f:56:29:67:69:e4:5c:a7:86:90:2d:7d:
                    a8:c5:22:71:f8:ce:cc:19:34:66:cb:52:89:42:a0:
                    7a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:CD:D6:D7:68:08:D5:7F:20:CB:96:A0:43:00:0E:45:8F:48:2F:A5
            X509v3 Authority Key Identifier:
                keyid:11:D5:7A:75:7E:D5:65:75:D0:49:E4:29:C8:EC:73:7A:56:05:0B:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/EdV6dX7VZXXQSeQpyOxzelYFC3k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdV6dX7VZXXQSeQpyOxzelYFC3k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/EdV6dX7VZXXQSeQpyOxzelYFC3k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:f4:85:6b:13:3d:89:7d:fb:be:8f:51:f4:04:2c:e6:3d:38:
         40:a8:d0:76:84:21:6f:d4:1a:ba:c7:28:33:a4:66:24:e7:51:
         52:da:24:b9:e2:0a:f6:82:6d:aa:c1:9b:da:0c:e5:67:a2:8a:
         89:f8:65:e1:13:3e:8c:b7:51:ed:bd:dc:1b:f2:31:d1:76:07:
         22:5f:93:aa:fc:75:9f:68:a6:61:ce:ad:e9:c7:96:0e:ff:62:
         fd:d6:46:70:bc:bf:29:0e:69:f0:0d:cd:82:49:af:99:5c:81:
         27:1c:dd:46:ee:c3:b2:d9:ad:19:8d:37:49:b2:9b:f2:f5:a7:
         88:b7:69:da:8d:7f:7c:f2:89:40:2c:c5:14:00:63:bd:ab:79:
         73:be:d8:67:9d:9a:05:33:c3:4b:7e:a1:2d:14:b7:06:a5:b1:
         8f:cf:8a:64:f3:7f:08:a7:c4:87:1e:e5:ba:3b:5c:64:bd:62:
         fa:43:cd:3c:05:b2:65:8b:53:84:96:bc:25:5f:db:33:ae:6e:
         d9:9b:d8:6e:08:73:e4:bb:73:16:e1:48:bf:ed:4f:dd:f0:11:
         2b:be:85:76:dd:2c:c5:13:ef:70:93:cf:3e:0b:db:97:ac:32:
         9b:a6:c5:e0:52:ad:b5:16:41:40:03:b5:54:87:51:54:62:3b:
         b8:5c:e5:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:42:43 2025 by rpki-client