Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916BACE/A662723C8AF111E899A7CE6DC4F9AE02/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.mft
File:                     -JMhUBwHZeNRR6Vcfn2lywbCnAQ.mft (raw, json)
Hash identifier:          1UdJCyPfUWWjXyfMuQPXG4irhJCibSc92eHVZcwUluE=
Subject key identifier:   55:43:C4:A4:7C:D7:F2:9F:85:5D:94:8B:91:D0:58:3D:53:FA:3F:21
Authority key identifier: F8:93:21:50:1C:07:65:E3:51:47:A5:5C:7E:7D:A5:CB:06:C2:9C:04
Certificate issuer:       /CN=A916BACE/serialNumber=F89321501C0765E35147A55C7E7DA5CB06C29C04
Certificate serial:       1419
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916BACE/A662723C8AF111E899A7CE6DC4F9AE02/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.mft
Manifest number:          1410
Signing time:             Sat 18 Oct 2025 17:23:50 +0000
Manifest this update:     Sat 18 Oct 2025 17:23:49 +0000
Manifest next update:     Sat 25 Oct 2025 17:23:49 +0000
Files and hashes:         1: -JMhUBwHZeNRR6Vcfn2lywbCnAQ.crl (hash: egTtfuPqXVmIMvgSEPLURL3E/gYzLNgv1l4K/pLRKLw=)
                          2: 1774301E8AF211E89749376EC4F9AE02.roa (hash: 6bfHO59shnVhLVfkZQ/tBBlzPOnqeYneOazsjO1NW44=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916BACE/A662723C8AF111E899A7CE6DC4F9AE02/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.crl
                          rsync://rpki.apnic.net/member_repository/A916BACE/A662723C8AF111E899A7CE6DC4F9AE02/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 17:23:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5145 (0x1419)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916BACE, serialNumber=F89321501C0765E35147A55C7E7DA5CB06C29C04
        Validity
            Not Before: Oct 18 17:23:49 2025 GMT
            Not After : Oct 25 17:23:49 2025 GMT
        Subject: CN=68f3cd25-1eab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bd:c7:be:e0:dd:e4:d9:8a:5c:ed:0e:bb:09:
                    60:b9:fe:73:78:aa:48:7c:58:53:bd:8b:3e:d8:2a:
                    08:0c:c3:09:31:8a:e3:31:6d:4e:cc:54:20:92:cd:
                    75:bd:91:66:2c:81:dd:83:e2:a1:4e:38:e7:31:d7:
                    60:dd:99:16:62:ec:7e:93:1b:15:67:cb:09:53:39:
                    ea:9b:27:e1:a4:4d:de:31:a5:3b:4d:54:48:76:1a:
                    d2:56:d0:02:28:20:23:22:dd:5a:3a:b9:f1:d1:70:
                    1a:2e:70:cd:16:6f:b4:3f:da:66:ac:f1:5e:cd:41:
                    70:92:6f:f9:56:61:6e:22:40:b2:74:cb:e6:58:92:
                    0a:75:7a:01:4d:20:76:f2:21:d3:20:01:8b:8c:c7:
                    d5:51:ab:91:5b:eb:f6:53:fb:5c:bd:42:58:6e:62:
                    0a:a1:73:c8:83:57:c5:88:6f:04:de:68:8e:4e:16:
                    6a:d6:71:c2:5e:57:0e:5c:40:6f:e8:92:22:f9:74:
                    49:e3:b6:0b:93:ca:2f:8e:54:ad:82:c1:2a:38:7a:
                    bd:74:62:81:67:7e:ef:7e:0a:33:58:12:02:65:00:
                    17:5c:95:58:16:be:5a:da:94:2b:03:27:d2:4e:cc:
                    52:f8:40:84:c0:fc:85:76:05:2e:94:61:be:69:de:
                    e1:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:43:C4:A4:7C:D7:F2:9F:85:5D:94:8B:91:D0:58:3D:53:FA:3F:21
            X509v3 Authority Key Identifier:
                keyid:F8:93:21:50:1C:07:65:E3:51:47:A5:5C:7E:7D:A5:CB:06:C2:9C:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916BACE/A662723C8AF111E899A7CE6DC4F9AE02/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BACE/A662723C8AF111E899A7CE6DC4F9AE02/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:7a:0a:bc:39:a1:bf:01:75:24:0e:fe:69:b7:65:f4:2b:f5:
         49:65:c5:a8:be:07:72:5a:31:73:f4:a1:72:22:8d:73:26:38:
         e9:7b:53:16:27:5e:fd:fa:ce:36:ea:6d:66:16:95:3e:d5:b8:
         ad:1f:a3:d5:1f:58:44:36:39:68:79:3f:1c:b6:e0:be:d8:1a:
         3e:41:94:e3:3a:a8:83:eb:e4:79:1e:ce:08:75:e8:a1:fa:39:
         01:bd:7f:c6:b0:6b:f8:31:70:02:40:99:ea:ef:46:fe:95:30:
         d8:12:2d:f8:33:c7:13:b1:af:2d:27:fc:53:fa:9e:a2:da:bd:
         1d:01:f1:d0:0c:cf:c2:64:13:4d:c4:92:60:54:64:d0:4c:32:
         00:31:4a:0f:78:0f:4b:57:ef:ff:f6:3c:d0:be:18:dd:f5:a8:
         f4:73:01:28:97:d9:6b:7c:60:61:2b:8e:67:4e:25:14:47:10:
         91:71:a8:03:82:0f:f3:0e:d3:f9:93:7a:e9:e9:e8:13:16:99:
         58:92:d9:8d:77:1d:e0:84:66:74:ed:1c:f5:da:72:2f:ef:c2:
         02:05:bf:24:46:cf:42:82:40:b3:1d:47:8e:b2:62:4b:fb:8d:
         40:2a:74:be:85:6a:4e:11:ee:fc:1a:14:f3:76:26:e3:2a:0e:
         6a:52:e0:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:47:38 2025 by rpki-client