Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.mft
File:                     lJtkel-MefbaSuNtngDETgKpp6Q.mft (raw, json)
Hash identifier:          pwAcw+qVaslfxJ9FcxNGSlRuQ/u3lxE9rxHlOfPT3J4=
Subject key identifier:   20:21:79:52:16:F7:8C:28:CA:2F:10:0C:D5:E7:7E:AF:8D:B4:15:15
Authority key identifier: 94:9B:64:7A:5F:8C:79:F6:DA:4A:E3:6D:9E:00:C4:4E:02:A9:A7:A4
Certificate issuer:       /CN=A9175D84/serialNumber=949B647A5F8C79F6DA4AE36D9E00C44E02A9A7A4
Certificate serial:       0172
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJtkel-MefbaSuNtngDETgKpp6Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.mft
Manifest number:          016B
Signing time:             Sun 19 Oct 2025 06:36:42 +0000
Manifest this update:     Sun 19 Oct 2025 06:36:42 +0000
Manifest next update:     Sun 26 Oct 2025 06:36:42 +0000
Files and hashes:         1: lJtkel-MefbaSuNtngDETgKpp6Q.crl (hash: vVugG/eN67IrHMWylnt2dpLAQy9bNWAfZJ18D3/drk8=)
                          2: 1FB96962DA1311EE81216D86C4F9AE02.roa (hash: 322ioaBzAzi6yUpdAJJxn+TJMCIFPpfe4ryfjRmmpZg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.crl
                          rsync://rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJtkel-MefbaSuNtngDETgKpp6Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 06:36:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 370 (0x172)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175D84, serialNumber=949B647A5F8C79F6DA4AE36D9E00C44E02A9A7A4
        Validity
            Not Before: Oct 19 06:36:42 2025 GMT
            Not After : Oct 26 06:36:42 2025 GMT
        Subject: CN=68f486fa-856f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:65:16:9d:35:26:4e:bd:56:38:2a:31:69:f0:
                    8e:12:0c:a5:9e:6e:7a:ec:ba:d6:86:43:6b:a8:5d:
                    c6:63:70:34:b0:1e:4a:d1:78:2d:d2:76:36:5e:2d:
                    c8:d1:e9:12:3f:33:be:34:09:48:87:86:cc:16:df:
                    17:c0:31:36:b3:9b:00:6a:59:e3:ec:31:3c:ce:85:
                    5b:de:d5:7a:8d:b6:e6:0f:e8:52:05:de:13:00:e6:
                    d8:3a:eb:ea:db:29:b2:36:13:04:da:ed:0a:95:2e:
                    22:c9:6b:52:3d:b4:c0:65:e8:58:5e:90:18:d5:20:
                    cf:77:d6:ed:40:19:81:76:a5:40:80:22:0d:fe:b0:
                    0c:84:56:91:60:6a:9e:f2:de:af:9a:19:5a:74:62:
                    60:21:b5:ae:cf:d2:28:28:96:b2:20:96:6f:23:3c:
                    f3:79:d6:8f:be:5b:37:03:dc:4f:15:91:a1:29:73:
                    00:5f:c9:6d:e8:9c:ca:99:63:0d:06:19:10:37:c4:
                    fe:10:68:2e:fa:d3:58:5c:d7:42:fb:2e:d1:65:fd:
                    46:1d:27:6e:94:5b:2c:27:f1:92:b5:7e:b8:d0:78:
                    3b:da:45:20:2f:f2:c1:9d:b4:ba:59:be:2b:ba:90:
                    f5:66:9c:7a:e4:16:09:fc:46:27:dd:35:a1:ec:aa:
                    80:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:21:79:52:16:F7:8C:28:CA:2F:10:0C:D5:E7:7E:AF:8D:B4:15:15
            X509v3 Authority Key Identifier:
                keyid:94:9B:64:7A:5F:8C:79:F6:DA:4A:E3:6D:9E:00:C4:4E:02:A9:A7:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJtkel-MefbaSuNtngDETgKpp6Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:b2:86:94:3a:dc:f1:7a:d0:bd:cc:d5:51:ac:e6:26:73:86:
         4d:6c:db:f6:32:5f:28:a0:ca:f7:dd:8e:f9:6d:c0:b0:02:a6:
         17:0e:10:d1:a1:b0:a2:de:33:41:75:24:b2:1c:56:42:da:3d:
         2d:67:37:41:2d:77:42:3d:9e:7f:ed:82:b9:1c:00:18:c0:a2:
         8f:c1:6e:e7:f5:75:56:45:25:81:79:8c:75:0f:ac:2a:84:8f:
         9e:63:0d:14:ae:f7:dd:14:39:d4:5c:4b:c0:61:30:fd:be:73:
         87:c9:43:2b:ac:76:e1:0c:fc:f2:e2:b3:88:5c:ec:10:69:87:
         ae:ad:1d:29:11:b8:d3:2f:12:19:6b:d2:30:35:96:b2:22:2c:
         e8:ef:cd:cb:bf:2d:8c:fc:10:01:4c:18:a2:ec:0d:b3:0b:20:
         fd:b6:8e:aa:70:b2:a9:0a:4c:d8:97:10:8b:82:28:aa:bb:e1:
         3c:66:e1:98:1c:32:04:16:28:83:61:ce:f7:84:cf:41:83:2d:
         78:e0:f9:1f:71:2e:43:dc:a8:63:25:dc:75:65:a1:85:32:b8:
         86:a3:0a:0a:ba:a4:8f:bd:2f:d5:f4:1c:44:49:cd:b1:37:70:
         43:10:ec:78:c8:ff:88:f1:2b:9a:62:3e:4c:37:29:bd:33:19:
         0c:96:9c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:47:13 2025 by rpki-client