Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.mft
File:                     5iRBKkJ5WJuewvqzIiurBibTElo.mft (raw, json)
Hash identifier:          qZQOUqepHA86IMaIIAKG/WBcDeWRm/c30TBSd9tfuUM=
Subject key identifier:   7C:2D:DA:1D:7F:5E:8C:9A:65:5E:3F:82:8A:EE:7F:CE:0B:C4:8A:DC
Authority key identifier: E6:24:41:2A:42:79:58:9B:9E:C2:FA:B3:22:2B:AB:06:26:D3:12:5A
Certificate issuer:       /CN=A9168336/serialNumber=E624412A4279589B9EC2FAB3222BAB0626D3125A
Certificate serial:       0CC4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iRBKkJ5WJuewvqzIiurBibTElo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.mft
Manifest number:          0CB3
Signing time:             Sat 18 Oct 2025 18:59:39 +0000
Manifest this update:     Sat 18 Oct 2025 18:59:39 +0000
Manifest next update:     Sat 25 Oct 2025 18:59:39 +0000
Files and hashes:         1: 5iRBKkJ5WJuewvqzIiurBibTElo.crl (hash: sOtGvTu/oSe6bPYKYlfqPvp0wBYYzDjFgATLnuTfNpI=)
                          2: 6B6223B294D011F08FAC1420C4F9AE02.roa (hash: wGiVNJvu1x0mb0lcvq6ZfLuhvFHz/xsUR50FVj7sl+Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.crl
                          rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iRBKkJ5WJuewvqzIiurBibTElo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 18:59:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3268 (0xcc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168336, serialNumber=E624412A4279589B9EC2FAB3222BAB0626D3125A
        Validity
            Not Before: Oct 18 18:59:39 2025 GMT
            Not After : Oct 25 18:59:39 2025 GMT
        Subject: CN=68f3e39b-a1fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c6:65:b8:2a:59:df:75:8a:12:09:96:1d:d2:
                    29:d3:9f:91:12:bb:27:fe:5a:36:a9:41:db:3b:da:
                    6f:27:d7:4d:60:d2:a2:21:ce:a4:fc:34:a3:e9:be:
                    79:84:42:07:0d:64:9d:48:27:ef:ea:19:20:48:6d:
                    8b:4d:13:a8:81:b7:c3:3b:3d:41:18:0e:19:6f:e4:
                    79:8e:a9:a1:99:e2:92:f4:dc:d4:4a:7a:d2:a0:2b:
                    78:83:f5:8c:37:79:bd:ed:fb:1e:9c:68:c6:8a:b0:
                    5e:bc:8d:00:77:81:7d:a0:20:04:6b:1a:48:52:88:
                    d7:b6:bd:b9:89:ba:77:35:af:02:d5:d6:f6:44:44:
                    b8:22:06:d4:ea:77:db:36:4c:cb:c0:3e:8f:6a:b8:
                    eb:85:9e:67:3e:1c:5a:df:2f:1c:2a:f8:a8:af:72:
                    1f:38:07:3b:6b:3c:52:6b:42:4d:d0:78:15:42:08:
                    e0:ed:6a:35:03:d7:4a:c2:91:4e:c5:fc:98:99:8d:
                    95:68:c5:95:55:ad:6c:36:9a:6c:d5:e9:a8:2d:46:
                    e2:59:59:ae:f2:cf:27:2c:43:34:0f:c2:4f:16:34:
                    34:ff:cb:ab:28:9c:47:c0:aa:54:97:85:22:e3:7f:
                    3e:5f:ca:af:10:6d:56:2f:0d:ac:80:d0:76:0a:d0:
                    0a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:2D:DA:1D:7F:5E:8C:9A:65:5E:3F:82:8A:EE:7F:CE:0B:C4:8A:DC
            X509v3 Authority Key Identifier:
                keyid:E6:24:41:2A:42:79:58:9B:9E:C2:FA:B3:22:2B:AB:06:26:D3:12:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iRBKkJ5WJuewvqzIiurBibTElo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:2c:63:d7:a5:45:d8:f3:e6:c7:bb:c2:45:c1:02:c6:aa:19:
         bf:ac:ca:e1:e0:ef:2d:ac:1a:78:06:57:8d:c4:e6:a7:d4:e4:
         d6:d3:d1:4d:f5:66:16:39:d2:ab:5b:c9:b5:64:74:f4:0f:24:
         9f:90:91:81:10:86:88:a6:48:65:4a:5d:97:65:a6:a5:a0:16:
         10:d1:b9:54:ad:47:33:f5:1f:4d:09:d2:10:02:1d:f7:c8:61:
         98:36:dc:ca:63:fa:1c:82:8b:0a:0d:65:21:cf:39:c0:18:b3:
         60:be:d0:2f:3e:e2:08:3d:92:b7:aa:29:dd:1a:e4:98:ff:fe:
         6c:50:d4:d3:37:0a:f5:66:1b:8f:f2:48:53:f8:2d:af:a2:62:
         d3:72:4c:a2:c3:88:26:8e:fe:af:52:a9:bc:02:79:d8:6e:10:
         62:bc:b5:2b:ff:4c:94:73:88:be:20:16:c9:c0:23:26:c5:d1:
         df:cd:3c:e5:74:9f:3b:2d:5c:bf:7d:be:ce:1f:90:b7:76:0d:
         f9:56:d3:48:0a:5f:6f:93:08:eb:ba:8c:79:77:59:6a:d1:76:
         f5:7e:5e:bf:5a:6b:e0:11:49:f6:c0:59:ec:87:02:c1:82:2b:
         28:58:06:86:bc:72:b4:a8:f5:d1:22:20:e8:31:a8:26:81:20:
         4a:f4:64:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:44:27 2025 by rpki-client