Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172D65/4F421F523B0B11ECAA25E33AC4F9AE02/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.mft
File:                     1xUY_G5Wx8TsqeoYsbVB2LDCyiI.mft (raw, json)
Hash identifier:          Hv9Eui8ka1hBwXUM7ZhiklG6V0fTyCrupZoukJ5xGXE=
Subject key identifier:   77:30:4F:7F:FF:46:BE:6B:63:28:90:38:0A:28:D9:C2:35:1E:33:57
Authority key identifier: D7:15:18:FC:6E:56:C7:C4:EC:A9:EA:18:B1:B5:41:D8:B0:C2:CA:22
Certificate issuer:       /CN=A9172D65/serialNumber=D71518FC6E56C7C4ECA9EA18B1B541D8B0C2CA22
Certificate serial:       04E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172D65/4F421F523B0B11ECAA25E33AC4F9AE02/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.mft
Manifest number:          04DD
Signing time:             Sun 19 Oct 2025 01:35:33 +0000
Manifest this update:     Sun 19 Oct 2025 01:35:32 +0000
Manifest next update:     Sun 26 Oct 2025 01:35:32 +0000
Files and hashes:         1: 1xUY_G5Wx8TsqeoYsbVB2LDCyiI.crl (hash: HTThLUU3TiVWVIzUSIXVBp5M6TsckIXKO2QZ8b7Y/xE=)
                          2: 56530120D47E11EFB2639C53C4F9AE02.roa (hash: P53OZfOgjzKWRl/N07BBbaXeKGlafyTyi7q63CLwsiA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172D65/4F421F523B0B11ECAA25E33AC4F9AE02/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.crl
                          rsync://rpki.apnic.net/member_repository/A9172D65/4F421F523B0B11ECAA25E33AC4F9AE02/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 01:35:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1251 (0x4e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172D65, serialNumber=D71518FC6E56C7C4ECA9EA18B1B541D8B0C2CA22
        Validity
            Not Before: Oct 19 01:35:32 2025 GMT
            Not After : Oct 26 01:35:32 2025 GMT
        Subject: CN=68f44065-dacc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ea:65:9b:06:ce:93:55:80:a0:98:91:e6:2f:
                    a8:ff:c5:a6:da:32:64:f4:54:d3:49:34:e9:3c:48:
                    b0:43:06:c5:f6:78:53:1f:2b:72:ed:ae:e4:a5:fc:
                    63:54:ed:25:00:8d:cd:af:4d:8b:44:0d:77:b4:b4:
                    e8:b8:23:66:28:7b:3b:12:c4:b5:be:0b:a0:ae:da:
                    0c:59:cd:d0:d7:c3:7e:8b:92:a8:34:09:4c:d4:1b:
                    fd:13:51:8b:3c:50:e6:08:a5:c0:7f:9a:2e:d9:a4:
                    dd:cc:af:d5:f2:ce:f1:92:5d:30:47:94:b0:e7:2a:
                    75:20:3f:41:70:e9:cb:28:5f:a1:b1:e3:0f:71:5c:
                    35:68:9b:d1:51:32:61:8f:ea:3b:3c:ed:d7:64:f0:
                    ec:23:5e:82:13:23:4a:9f:2e:7d:8d:c6:ec:29:d9:
                    9a:90:8e:36:6b:ed:00:16:46:4c:e0:2f:eb:95:3b:
                    14:ab:5a:42:78:1d:0c:c1:82:05:9b:7d:20:d0:81:
                    72:17:8b:63:cc:18:6a:20:3c:4d:05:5e:67:38:47:
                    1c:2d:64:72:a6:94:13:c8:50:ba:bd:bb:1e:52:13:
                    6f:a9:34:85:b4:85:33:50:c5:7c:43:11:3c:31:bc:
                    3d:62:7a:c6:16:be:23:17:2b:de:13:79:58:dc:2c:
                    3f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:30:4F:7F:FF:46:BE:6B:63:28:90:38:0A:28:D9:C2:35:1E:33:57
            X509v3 Authority Key Identifier:
                keyid:D7:15:18:FC:6E:56:C7:C4:EC:A9:EA:18:B1:B5:41:D8:B0:C2:CA:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172D65/4F421F523B0B11ECAA25E33AC4F9AE02/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172D65/4F421F523B0B11ECAA25E33AC4F9AE02/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:16:e2:5e:50:1d:3a:0d:0f:03:5d:45:23:69:c2:cc:20:ec:
         ef:97:4c:c1:c5:7e:2d:45:59:1c:c5:7a:7c:32:e8:06:39:ef:
         1c:f4:b0:49:4c:34:98:2c:d1:c3:44:2f:99:9d:02:ca:30:f6:
         60:39:5f:ef:b4:3a:94:3f:e1:e2:0b:32:de:5d:1b:c0:12:82:
         14:8f:69:ca:fe:78:12:e1:bc:7b:4d:b5:ee:57:14:b1:97:65:
         f1:27:4a:40:dc:7b:58:63:25:59:04:09:21:f5:82:8a:ee:16:
         37:0d:e5:80:0f:ef:df:13:30:db:ca:af:a5:a0:f2:e9:4d:30:
         6a:40:97:48:3f:f6:10:9e:44:68:ce:b6:76:b6:74:d2:86:7e:
         9d:84:0b:ed:07:7c:e8:9c:c9:5d:c4:56:aa:f7:69:fb:89:c6:
         6c:ff:60:af:18:9a:06:22:89:be:c1:24:63:7b:55:8f:86:8d:
         43:ee:04:e4:93:7b:26:80:8c:e3:13:ff:14:87:9d:40:03:9e:
         da:f5:f6:2c:75:17:51:bf:15:39:fe:cd:b8:4c:97:da:0f:0b:
         af:ae:c1:5a:52:1a:68:f2:5a:91:19:1d:a9:2f:27:7c:3f:1d:
         aa:38:5b:e9:d7:11:60:df:89:53:ed:92:df:b5:dc:84:f8:c7:
         66:ec:1c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:47:35 2025 by rpki-client