Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft
File:                     T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft (raw, json)
Hash identifier:          dZu/VTmGLmOrucgPb+7dBy1ktFXZGUbUP2BdlUaoNdg=
Subject key identifier:   F2:DE:2E:D8:CD:6C:8B:50:52:64:B5:FE:FB:87:B8:1D:71:D8:99:F4
Authority key identifier: 4F:83:00:E1:0D:CA:24:D5:65:D3:3F:02:AD:38:6E:6F:57:38:F9:0A
Certificate issuer:       /CN=A916DC7C/serialNumber=4F8300E10DCA24D565D33F02AD386E6F5738F90A
Certificate serial:       03C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft
Manifest number:          03BC
Signing time:             Sun 19 Oct 2025 02:39:36 +0000
Manifest this update:     Sun 19 Oct 2025 02:39:36 +0000
Manifest next update:     Sun 26 Oct 2025 02:39:36 +0000
Files and hashes:         1: T4MA4Q3KJNVl0z8CrThub1c4-Qo.crl (hash: D5E5JKQP9XVbDVQknoElIsDBkLlbrjlG3pTz1jBcti8=)
                          2: 82FF48B4AB3C11EC9D6C1668C4F9AE02.roa (hash: rWvQOGaQUF4KDCbeAOUg2IDrYzmM2mMdECYdn3UKK/I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.crl
                          rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 02:39:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 961 (0x3c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DC7C, serialNumber=4F8300E10DCA24D565D33F02AD386E6F5738F90A
        Validity
            Not Before: Oct 19 02:39:36 2025 GMT
            Not After : Oct 26 02:39:36 2025 GMT
        Subject: CN=68f44f68-5972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:9d:70:02:d8:24:a3:ab:b0:2f:4d:4c:57:30:
                    32:cf:58:e0:1b:6a:7e:81:ed:1f:3d:5e:61:da:c5:
                    b9:07:81:e8:39:23:ab:b3:d3:60:89:56:fd:17:c5:
                    1e:31:47:f0:3f:6f:4f:4a:a7:e3:f3:c6:ea:73:13:
                    e2:0d:d8:28:4a:59:69:12:a9:01:68:9a:26:a8:0c:
                    03:7b:9b:48:e8:a6:bf:f8:ed:31:c8:8d:da:22:1d:
                    84:6f:11:ed:01:61:75:4f:4c:2e:73:d9:f7:57:9d:
                    90:b3:d6:df:82:ca:b4:16:21:1c:9b:0f:49:53:be:
                    ad:35:65:63:fe:66:15:cc:16:03:21:dd:74:74:b5:
                    2f:ec:17:42:e1:58:d1:be:46:15:e8:84:dc:8b:3b:
                    57:e6:61:36:fb:33:e7:fc:60:93:7f:75:63:a2:e4:
                    3d:7f:8a:de:63:3f:c9:8d:35:57:bd:27:b9:61:96:
                    1d:62:16:1f:06:e8:6c:b8:88:49:6a:ff:c3:00:89:
                    83:2b:9d:04:9e:7b:89:39:99:59:80:b1:bc:51:ea:
                    11:7e:ae:7c:1d:f9:55:b5:df:d8:e0:58:6b:73:93:
                    13:81:e2:96:7f:40:8a:ec:78:e5:f6:f0:7f:9a:49:
                    bc:7b:25:f8:b0:46:11:97:b8:ce:1e:8b:f6:92:d7:
                    c9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:DE:2E:D8:CD:6C:8B:50:52:64:B5:FE:FB:87:B8:1D:71:D8:99:F4
            X509v3 Authority Key Identifier:
                keyid:4F:83:00:E1:0D:CA:24:D5:65:D3:3F:02:AD:38:6E:6F:57:38:F9:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:5b:b8:a0:c5:b7:94:71:d9:f4:b6:43:1b:88:71:a5:c8:8b:
         ea:d2:6c:a6:c5:46:c3:d5:ec:e4:1d:3c:55:d3:89:8e:8e:cd:
         bf:e2:3b:d4:4a:ce:6c:01:d2:e2:fe:aa:15:98:b6:d7:ab:f6:
         8b:24:46:be:8c:b1:60:a2:47:33:9d:99:76:66:26:2f:a8:92:
         7e:d6:ba:3f:9d:b4:ac:5c:22:a8:7b:cc:e4:0e:ce:2b:ff:4e:
         ed:53:1b:c5:61:02:a7:c0:25:76:b6:28:06:70:80:41:14:8f:
         ec:fa:f2:53:ea:b1:00:0f:7c:79:af:c4:0c:c6:6a:0e:68:2f:
         ca:26:66:47:20:f7:38:60:5c:be:f1:24:96:eb:fa:96:47:0b:
         3a:9c:ab:b5:0d:9b:96:b3:4b:3e:47:46:92:38:be:9d:b4:56:
         b6:23:1a:35:21:48:3a:1b:b7:20:ff:62:bf:b7:90:9b:17:8d:
         59:33:e2:4e:0c:6e:26:86:b2:b0:b4:2d:d7:69:b4:ec:88:ea:
         00:b9:26:d1:a2:8c:ac:0a:11:0f:2e:73:05:41:a0:4c:25:a8:
         f9:e8:46:42:cc:fb:1e:2c:19:85:96:ed:22:fb:e1:be:aa:69:
         08:ae:bf:d8:36:dc:35:67:45:29:60:ea:11:7b:16:4a:e5:da:
         67:b4:a5:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:49:16 2025 by rpki-client