Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.mft
File:                     _Vo_Wh8zV0TAwUKsQhfsvD0gyg8.mft (raw, json)
Hash identifier:          jPvJLcDwDXz1A+ce8KsIsUGLjgnU3ynzQ90Y8trU/CY=
Subject key identifier:   ED:EC:21:8F:16:22:A0:EB:8A:E2:80:3A:17:87:C3:91:63:2E:83:19
Authority key identifier: FD:5A:3F:5A:1F:33:57:44:C0:C1:42:AC:42:17:EC:BC:3D:20:CA:0F
Certificate issuer:       /CN=A916ACF5/serialNumber=FD5A3F5A1F335744C0C142AC4217ECBC3D20CA0F
Certificate serial:       DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.mft
Manifest number:          D8
Signing time:             Sun 19 Oct 2025 08:46:22 +0000
Manifest this update:     Sun 19 Oct 2025 08:46:21 +0000
Manifest next update:     Sun 26 Oct 2025 08:46:21 +0000
Files and hashes:         1: _Vo_Wh8zV0TAwUKsQhfsvD0gyg8.crl (hash: esUzj8/Sb56R3laR7RlhBiCjf1am3ip8DBU9P2M5BxY=)
                          2: B538B552701211EFB6868329C4F9AE02.roa (hash: 5dSL8DOy/WJ/deJlqUIkaVszqeWmawzFbSAiDop9ztg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.crl
                          rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 08:46:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 220 (0xdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916ACF5, serialNumber=FD5A3F5A1F335744C0C142AC4217ECBC3D20CA0F
        Validity
            Not Before: Oct 19 08:46:21 2025 GMT
            Not After : Oct 26 08:46:21 2025 GMT
        Subject: CN=68f4a55e-da91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e4:ce:04:f2:6b:ef:83:e7:26:97:9e:8c:95:
                    cf:49:f4:41:4e:32:ab:f6:33:42:1d:80:bf:64:71:
                    3f:a1:37:c5:56:d0:30:3c:d9:d2:47:3a:1f:91:78:
                    95:45:fb:09:b2:3f:c6:63:22:6f:ef:97:02:dc:cc:
                    03:41:ae:e1:3f:c5:71:03:9e:8a:dc:50:47:e9:b6:
                    4c:ba:8b:31:b5:3d:43:6b:2e:ed:cf:d8:6d:ff:b1:
                    e7:e4:9b:59:84:66:9f:35:6b:a9:19:9a:ac:e6:b2:
                    87:d7:55:a0:11:29:9c:a4:a0:f8:7c:26:97:58:61:
                    6b:7a:83:2d:ea:07:ad:f9:84:33:ba:f1:8d:5a:d5:
                    bb:25:4c:98:42:db:85:90:e8:85:d0:00:c7:16:7b:
                    3b:7d:ef:c0:87:68:0d:ff:b0:1b:f4:4b:52:9b:93:
                    68:ac:2b:ef:81:2c:b3:69:d4:84:5b:b3:87:54:8b:
                    c1:b1:15:b5:fe:05:83:79:ae:10:21:5e:7a:af:1b:
                    be:d6:dc:46:fa:61:09:02:98:22:29:e7:59:cf:1b:
                    94:d2:ae:01:1f:e9:5f:81:e2:a4:be:56:21:a8:16:
                    24:2d:e3:f5:c8:bf:55:ab:9b:ca:38:cd:8a:50:0a:
                    11:91:16:7d:d5:4c:cf:4e:c9:b1:77:29:90:14:9c:
                    63:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:EC:21:8F:16:22:A0:EB:8A:E2:80:3A:17:87:C3:91:63:2E:83:19
            X509v3 Authority Key Identifier:
                keyid:FD:5A:3F:5A:1F:33:57:44:C0:C1:42:AC:42:17:EC:BC:3D:20:CA:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:30:e5:cf:30:90:dc:30:88:f6:a5:20:0b:4c:55:65:13:c8:
         13:24:a3:f2:c3:8b:39:07:45:2c:6c:ca:ba:a7:9d:2d:25:7a:
         dd:0e:b9:f9:21:70:40:5b:38:a5:99:33:9d:c9:a2:8b:30:28:
         61:f9:c1:ed:2a:cf:78:25:b7:df:77:7a:ba:8b:23:bf:c1:29:
         c5:74:82:2e:8a:cd:1c:98:b5:1e:07:58:08:80:71:8f:e1:17:
         88:e0:65:41:29:97:14:71:56:40:da:88:42:cf:b2:77:54:62:
         17:4c:14:35:24:be:ba:34:da:00:14:46:21:ae:e4:1c:ef:5f:
         3d:75:65:d3:c4:c9:f5:49:e7:ae:de:b6:ee:15:7e:96:8b:0b:
         e2:2e:39:ea:fa:a3:3e:38:33:02:a1:82:db:a0:6c:21:6f:00:
         e8:16:df:bd:8a:de:bf:81:2b:3a:02:41:44:ea:36:33:62:1a:
         7a:b4:37:0f:ac:4f:11:24:b2:d0:55:d9:c3:5c:31:9b:9d:95:
         6d:01:10:c6:27:9a:16:c9:39:db:ee:42:3a:6b:27:c0:7a:5a:
         d8:7a:d3:07:1a:7d:4e:8d:b4:d3:12:82:38:4d:18:cc:09:6e:
         38:5b:e9:c3:39:1c:b1:b3:d1:09:7e:29:30:e9:23:d1:11:92:
         93:91:0c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:42:59 2025 by rpki-client