Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft
File:                     aRgc9FH4s_7GT8gpi1ItSIylyeY.mft (raw, json)
Hash identifier:          a6+Gq5wkR5c8BiNskfY1oqsdgUHAfRghmTNX89L6s20=
Subject key identifier:   A6:24:B2:E3:A4:74:9E:80:9D:23:D1:25:74:05:B1:5A:B3:1A:B1:CF
Authority key identifier: 69:18:1C:F4:51:F8:B3:FE:C6:4F:C8:29:8B:52:2D:48:8C:A5:C9:E6
Certificate issuer:       /CN=A916DE3D/serialNumber=69181CF451F8B3FEC64FC8298B522D488CA5C9E6
Certificate serial:       96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft
Manifest number:          8F
Signing time:             Sun 19 Oct 2025 09:52:35 +0000
Manifest this update:     Sun 19 Oct 2025 09:52:34 +0000
Manifest next update:     Sun 26 Oct 2025 09:52:34 +0000
Files and hashes:         1: aRgc9FH4s_7GT8gpi1ItSIylyeY.crl (hash: zU6KuLvZYGCTP3kYuA9eVKqoygtIWZqdJXXfoiuepnE=)
                          2: 3AA17754FD8211EFB5BB677AC4F9AE02.roa (hash: imHJlERFiYSGRBFLnXEmas2EVRVLv/9+zOxRclw7D8g=)
                          3: B3266880FD8511EFA4783083C4F9AE02.roa (hash: W6yWEruXPIDPoCs6QL8pnWnNjj8hPqXcENkKFmbbFhk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.crl
                          rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 09:52:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 150 (0x96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DE3D, serialNumber=69181CF451F8B3FEC64FC8298B522D488CA5C9E6
        Validity
            Not Before: Oct 19 09:52:34 2025 GMT
            Not After : Oct 26 09:52:34 2025 GMT
        Subject: CN=68f4b4e3-df79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:af:fb:ab:1b:e4:12:45:54:3d:be:4b:16:1d:
                    40:07:93:aa:fe:ba:30:6f:84:86:21:6e:df:f9:ac:
                    b2:d3:09:56:66:7c:e0:45:66:98:ca:1b:04:f9:89:
                    70:55:cf:3a:a0:ff:da:ff:da:60:54:65:76:81:2a:
                    fb:04:8c:46:77:f7:6e:78:03:28:c9:52:7e:2f:eb:
                    ca:14:6a:5c:be:58:52:29:06:f2:ba:29:83:f4:3a:
                    54:f5:09:ec:cb:69:d3:31:b7:09:7c:4a:ad:13:9f:
                    86:88:6d:c3:aa:60:41:12:c2:30:83:c8:47:2e:87:
                    bd:30:28:cc:e4:b8:6d:79:10:fe:d7:2d:8c:f5:9c:
                    82:5e:28:54:f7:fa:5d:17:cb:20:ff:4a:b4:25:14:
                    d7:86:33:5f:76:e3:f2:be:b0:16:f3:ce:19:10:dc:
                    b9:c6:d4:fb:6a:2a:98:b7:e6:8e:62:7c:52:22:27:
                    b1:15:0e:ea:2f:73:31:44:53:5d:3a:97:d1:89:80:
                    d4:04:d4:d5:87:d6:67:e2:6c:be:7d:62:1b:ee:44:
                    e9:70:d4:2e:9b:2d:c3:84:c1:9f:e7:9c:41:4d:bf:
                    c4:e5:f4:b6:11:75:49:ee:89:eb:35:04:d7:e3:80:
                    27:c4:3e:2a:bb:52:42:f0:b3:1c:97:02:e6:c9:ba:
                    aa:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:24:B2:E3:A4:74:9E:80:9D:23:D1:25:74:05:B1:5A:B3:1A:B1:CF
            X509v3 Authority Key Identifier:
                keyid:69:18:1C:F4:51:F8:B3:FE:C6:4F:C8:29:8B:52:2D:48:8C:A5:C9:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:f2:5c:b2:f1:ee:48:4d:6a:0e:d2:1c:72:00:61:66:ba:ec:
         21:51:bd:b4:ed:02:d3:ed:6f:31:81:d5:a5:35:2c:c4:db:5a:
         75:06:eb:57:cb:c9:ba:75:e8:53:ce:88:84:cf:71:9d:4d:ab:
         f5:7d:8d:91:e6:fe:0d:fd:3d:2e:e2:5d:10:e3:7a:34:79:0b:
         9b:7b:18:20:59:2e:32:9a:ce:fd:0f:a0:5d:ed:dd:ea:23:3b:
         ef:fc:7d:b2:64:93:90:c6:17:d7:24:9b:46:64:6c:22:f5:de:
         11:4c:1a:4c:20:f0:fb:25:e5:75:ce:78:4e:8d:58:5b:7b:6c:
         ab:d9:ee:db:39:28:d3:0a:a7:cd:80:42:80:b7:4a:f9:f3:96:
         fd:34:e2:ce:9e:f6:57:93:e0:06:ee:37:30:85:00:e0:61:05:
         eb:9f:ed:3d:bb:0a:ef:ec:49:8b:cd:95:fd:40:f5:d5:79:bf:
         bb:cd:2a:06:d1:56:bf:14:c6:a5:21:99:b9:12:80:63:71:1c:
         68:31:6d:8f:f0:ab:11:b2:4a:4f:32:6b:3e:00:ae:96:34:76:
         fb:f5:99:c3:c2:3e:c7:35:50:8b:d3:eb:09:8e:d7:b2:85:43:
         5f:9f:16:30:9b:48:ac:4d:9b:c9:4b:40:03:e2:ea:34:c4:95:
         99:b5:ea:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:08:40 2025 by rpki-client