Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A2FB/9F8F9D00468711F0AF642744C4F9AE02/P0isoSpZJ6cC7O4kQVGJGU7UqoA.mft
File:                     P0isoSpZJ6cC7O4kQVGJGU7UqoA.mft (raw, json)
Hash identifier:          yV4ZP4QymEALzke8lIQjmQSaP2RVUej+E1osZjU4law=
Subject key identifier:   6B:58:A8:B2:8E:29:D7:AC:91:CF:76:4F:4E:59:65:1D:E5:8F:E0:22
Authority key identifier: 3F:48:AC:A1:2A:59:27:A7:02:EC:EE:24:41:51:89:19:4E:D4:AA:80
Certificate issuer:       /CN=A916A2FB/serialNumber=3F48ACA12A5927A702ECEE24415189194ED4AA80
Certificate serial:       44
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0isoSpZJ6cC7O4kQVGJGU7UqoA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A2FB/9F8F9D00468711F0AF642744C4F9AE02/P0isoSpZJ6cC7O4kQVGJGU7UqoA.mft
Manifest number:          44
Signing time:             Sun 19 Oct 2025 10:51:16 +0000
Manifest this update:     Sun 19 Oct 2025 10:51:16 +0000
Manifest next update:     Sun 26 Oct 2025 10:51:16 +0000
Files and hashes:         1: P0isoSpZJ6cC7O4kQVGJGU7UqoA.crl (hash: P35FLFJ7ZFAWwz1A7dryqtV1BMlk4EXE4a/lCqU8WYk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A2FB/9F8F9D00468711F0AF642744C4F9AE02/P0isoSpZJ6cC7O4kQVGJGU7UqoA.crl
                          rsync://rpki.apnic.net/member_repository/A916A2FB/9F8F9D00468711F0AF642744C4F9AE02/P0isoSpZJ6cC7O4kQVGJGU7UqoA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0isoSpZJ6cC7O4kQVGJGU7UqoA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 10:51:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68 (0x44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A2FB, serialNumber=3F48ACA12A5927A702ECEE24415189194ED4AA80
        Validity
            Not Before: Oct 19 10:51:16 2025 GMT
            Not After : Oct 26 10:51:16 2025 GMT
        Subject: CN=68f4c2a4-85d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:65:1e:5a:55:3a:ba:4a:58:22:56:0e:ce:3f:
                    1a:cd:83:72:d3:b1:eb:ea:c9:ad:03:65:dc:bd:19:
                    7b:12:b7:49:d0:10:ca:af:87:dc:18:ab:85:e2:f6:
                    1f:37:71:95:6e:04:d0:79:9c:63:98:09:9c:b2:b7:
                    fc:ba:6a:ec:6a:4e:85:bd:c2:ed:de:6b:e9:3d:21:
                    0b:23:cc:08:66:90:b8:73:c3:48:64:d7:d7:77:13:
                    ae:89:9e:13:e8:1b:1d:d2:c8:d1:ab:b8:5e:0f:38:
                    d8:54:6c:f7:bb:e8:dc:45:8a:e3:f8:5f:98:28:27:
                    99:35:c2:13:fa:05:24:02:51:ea:25:2a:1f:ea:27:
                    9d:eb:52:a6:8c:a4:ab:f2:80:75:64:16:d2:a2:cb:
                    75:4a:d3:44:63:78:ba:b1:30:45:91:34:d3:3a:51:
                    a5:74:c2:55:69:62:98:89:55:42:97:e3:79:be:36:
                    a9:73:2b:ee:cc:fa:d3:2e:b7:7f:2a:f8:bc:98:59:
                    44:9c:07:12:5f:a2:7d:8a:8f:63:32:39:8d:ea:06:
                    e7:ba:51:b4:30:a7:75:d6:2b:f3:df:31:8f:3e:20:
                    c6:ca:23:ab:aa:ae:6d:74:3f:ce:b4:4e:38:b7:09:
                    5a:a4:f0:da:a5:82:df:7e:a1:01:44:82:44:2c:15:
                    13:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:58:A8:B2:8E:29:D7:AC:91:CF:76:4F:4E:59:65:1D:E5:8F:E0:22
            X509v3 Authority Key Identifier:
                keyid:3F:48:AC:A1:2A:59:27:A7:02:EC:EE:24:41:51:89:19:4E:D4:AA:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A2FB/9F8F9D00468711F0AF642744C4F9AE02/P0isoSpZJ6cC7O4kQVGJGU7UqoA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0isoSpZJ6cC7O4kQVGJGU7UqoA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A2FB/9F8F9D00468711F0AF642744C4F9AE02/P0isoSpZJ6cC7O4kQVGJGU7UqoA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:39:7c:ed:44:ea:17:d2:55:f8:98:ae:b6:da:70:37:26:1b:
         15:0c:d8:e0:51:f7:98:7d:65:02:c9:33:3a:ec:e4:56:f4:d9:
         42:f5:00:b6:7f:8d:d2:d7:54:80:34:b4:0c:36:ca:2a:83:d0:
         54:f0:0e:b6:9a:44:22:fc:c0:ce:19:74:e1:4d:d8:3e:a5:e5:
         a0:63:9c:52:91:fe:a2:3b:22:fe:ed:ba:86:c0:fb:da:8d:66:
         5c:84:5a:1c:79:fe:21:34:6e:b9:ea:5d:2c:b4:8c:2e:ad:1e:
         00:36:54:fa:0d:98:27:57:8f:be:0c:9e:e3:ae:f0:62:a7:f6:
         cb:a2:a3:ed:9c:65:06:03:44:de:de:88:44:56:19:e7:1a:8e:
         3c:7a:2e:73:fc:da:38:82:44:ca:fb:2c:0b:50:3a:3a:16:0c:
         80:21:75:3e:8a:2c:b1:00:4f:2a:74:4d:ea:1c:fe:95:8e:63:
         04:78:3c:9c:d5:16:9d:fc:80:af:74:0e:16:0e:04:95:e5:bc:
         64:6e:c7:81:ad:4a:02:e3:2e:da:1e:25:a6:db:87:16:fa:f2:
         63:c8:8b:4c:99:8f:31:57:77:64:b4:b3:3f:50:ff:84:81:aa:
         b9:8c:b0:9b:a1:8d:aa:59:14:bc:81:0b:d2:40:73:35:3f:1f:
         11:59:c7:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:35:49 2025 by rpki-client