Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft
File:                     1WeS1ZfpzdAr_BbQtJLaParggPw.mft (raw, json)
Hash identifier:          Yr1c8wkhKnUKAzWxZOtYewhqwwpsvef4aICbLK/OEE4=
Subject key identifier:   EA:A6:E4:1A:E5:DF:2D:9A:8C:FE:63:D1:AD:40:6B:29:73:ED:98:9D
Authority key identifier: D5:67:92:D5:97:E9:CD:D0:2B:FC:16:D0:B4:92:DA:3D:AA:E0:80:FC
Certificate issuer:       /CN=A91731EA/serialNumber=D56792D597E9CDD02BFC16D0B492DA3DAAE080FC
Certificate serial:       1F68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WeS1ZfpzdAr_BbQtJLaParggPw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft
Manifest number:          1F41
Signing time:             Sat 18 Oct 2025 16:18:22 +0000
Manifest this update:     Sat 18 Oct 2025 16:18:22 +0000
Manifest next update:     Sat 25 Oct 2025 16:18:22 +0000
Files and hashes:         1: 1WeS1ZfpzdAr_BbQtJLaParggPw.crl (hash: PhA6TMROqi99EwkZkGCDJhM2K224rLUQSZ3lkXqoGDc=)
                          2: 317CF2A634E811EFA8BEA738C4F9AE02.roa (hash: zBjYJnHa1n009AI95wfFYThs3iAA9crPH92IoCYjy4g=)
                          3: 500DFDA8578611EA8CC3B124C4F9AE02.roa (hash: U+HOR1WWM3bWUanGm2xW2p0h9XaY3gPXOWuTGfO7XNs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.crl
                          rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WeS1ZfpzdAr_BbQtJLaParggPw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 16:18:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8040 (0x1f68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91731EA, serialNumber=D56792D597E9CDD02BFC16D0B492DA3DAAE080FC
        Validity
            Not Before: Oct 18 16:18:22 2025 GMT
            Not After : Oct 25 16:18:22 2025 GMT
        Subject: CN=68f3bdce-2c89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:00:5c:0b:a3:a5:65:2b:60:bc:95:05:35:5f:
                    d2:2e:b3:df:77:52:48:ce:b1:a7:c1:0c:5f:15:fc:
                    47:10:da:98:65:38:c5:da:78:f4:a2:ef:4b:f4:09:
                    45:70:56:33:40:26:d8:00:c2:de:25:64:54:98:33:
                    45:1f:bf:75:fb:46:27:07:56:ae:88:8d:9c:b4:0c:
                    52:d6:78:5e:e8:e5:f4:bf:9c:18:4b:b6:f8:45:85:
                    75:44:74:3d:3f:51:8d:dc:6a:b0:bb:15:48:5a:c7:
                    fb:ec:ac:38:ab:14:da:dd:dd:f7:99:a7:5a:26:49:
                    5e:23:cb:92:1f:bc:db:83:24:92:b1:5e:24:5c:07:
                    bf:9e:b6:96:74:98:2c:fa:c0:ee:ad:77:35:65:3a:
                    0d:8a:9c:22:01:9e:98:91:6b:50:18:ad:c3:e3:5d:
                    11:68:a6:b3:cc:1d:db:4b:d2:a2:c8:4f:6a:b0:78:
                    57:6b:fc:5d:01:88:52:87:2c:f2:3a:1d:dd:8b:26:
                    f9:8d:a9:54:2b:2a:ce:0f:4e:39:9d:b2:5d:c8:c2:
                    91:77:5a:9e:c1:e9:c5:9e:87:c9:d4:8f:e6:95:02:
                    fe:a0:b0:f4:66:15:2f:ff:90:93:33:e9:6f:41:82:
                    6b:6e:ca:e2:c5:16:07:e3:ec:59:71:5d:04:b6:b1:
                    89:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:A6:E4:1A:E5:DF:2D:9A:8C:FE:63:D1:AD:40:6B:29:73:ED:98:9D
            X509v3 Authority Key Identifier:
                keyid:D5:67:92:D5:97:E9:CD:D0:2B:FC:16:D0:B4:92:DA:3D:AA:E0:80:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WeS1ZfpzdAr_BbQtJLaParggPw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:01:49:86:9c:cd:d5:b7:1b:ff:1f:b3:bd:57:de:60:13:fa:
         c0:41:b4:69:f6:d5:bd:84:9e:44:b0:3d:e2:ab:1f:20:eb:fc:
         ea:c8:4c:b5:ee:4c:91:2f:d1:2b:2d:fc:d7:8d:7c:e7:d2:5b:
         5f:49:7f:97:c6:aa:cc:8c:ca:75:17:4c:95:bf:7f:46:71:20:
         c9:06:cf:dc:ec:5c:3d:46:2f:2b:fa:07:ff:e5:d5:51:17:59:
         18:27:9e:f1:a6:48:97:30:bd:7e:48:14:d6:f2:54:fe:46:81:
         cd:92:c3:a9:ab:93:fe:84:dd:36:1d:5d:37:7a:2e:8c:7d:33:
         20:77:86:2f:f2:18:9c:b4:b3:2e:ee:60:3b:72:dc:1d:09:1e:
         7f:bf:7b:04:93:bd:e7:84:58:a7:4e:2d:d6:45:1d:01:3f:cc:
         6a:e5:fb:93:ee:8b:0c:af:92:0a:a7:fe:22:11:5a:1f:47:42:
         53:b4:4a:2d:f3:b8:28:26:79:ff:a0:a6:c8:03:fd:5c:ff:03:
         be:94:4c:68:b9:8f:ac:8d:f1:38:62:9f:de:92:c9:f3:9a:1b:
         7a:10:d1:69:34:12:4e:10:7f:d1:62:2f:6d:f6:97:06:93:a2:
         fa:96:45:c7:75:be:6c:de:84:cd:a8:b5:13:70:02:b5:47:53:
         57:24:05:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:26:18 2025 by rpki-client