Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.mft
File:                     rpODqTtsWhNdJhOpfF3slgliM_E.mft (raw, json)
Hash identifier:          IujUUaeTHdIkm+D7LuZbkDCgua3VaatNRYtA6j+3Jks=
Subject key identifier:   C5:12:B8:44:49:31:9B:E3:96:DB:B0:C1:DB:99:38:13:47:C8:EA:DF
Authority key identifier: AE:93:83:A9:3B:6C:5A:13:5D:26:13:A9:7C:5D:EC:96:09:62:33:F1
Certificate issuer:       /CN=A917748E/serialNumber=AE9383A93B6C5A135D2613A97C5DEC96096233F1
Certificate serial:       0231
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rpODqTtsWhNdJhOpfF3slgliM_E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.mft
Manifest number:          0231
Signing time:             Sun 19 Oct 2025 04:08:17 +0000
Manifest this update:     Sun 19 Oct 2025 04:08:17 +0000
Manifest next update:     Sun 26 Oct 2025 04:08:17 +0000
Files and hashes:         1: rpODqTtsWhNdJhOpfF3slgliM_E.crl (hash: 8ANLdHnJ8Kk/eNY7FrvfhdaYr4cf/G7oidIxiQnBQWU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.crl
                          rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rpODqTtsWhNdJhOpfF3slgliM_E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 04:08:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 561 (0x231)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917748E, serialNumber=AE9383A93B6C5A135D2613A97C5DEC96096233F1
        Validity
            Not Before: Oct 19 04:08:17 2025 GMT
            Not After : Oct 26 04:08:17 2025 GMT
        Subject: CN=68f46431-05c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9c:fe:03:69:10:ab:58:76:d8:48:eb:4b:5a:
                    a2:33:07:b8:74:a0:b3:cb:8c:9b:7d:55:86:83:de:
                    a6:a1:f1:3a:fd:31:b6:49:17:ba:94:d9:31:1d:6d:
                    33:d2:d5:1c:d1:70:f0:67:63:0d:2d:ae:99:6d:19:
                    34:4a:d1:82:94:0a:a3:6a:44:a5:5e:c7:e7:5c:9c:
                    2c:ba:62:da:37:03:19:90:38:84:44:aa:26:76:89:
                    f0:57:7e:20:79:a5:75:62:52:77:0a:d9:60:ba:63:
                    91:0b:bb:d8:e8:ea:56:49:f4:37:59:55:f5:9c:11:
                    0a:f0:af:b0:60:ae:64:8d:60:17:4b:55:10:98:81:
                    0d:23:d6:05:5f:b1:a9:6f:62:38:a3:f2:a4:2d:a1:
                    a5:0c:6d:11:af:9a:2a:ae:57:9d:e1:2f:4b:e5:7a:
                    57:20:2b:a6:b7:cc:f3:3d:c8:7a:60:28:c3:38:67:
                    16:ea:f4:60:4d:09:d6:4d:60:ad:be:cf:d3:e0:3b:
                    56:64:8b:f3:b3:94:4d:d5:4b:16:c6:ba:cd:b1:df:
                    03:2b:31:b4:7e:ab:67:61:aa:ee:38:ec:d8:73:be:
                    b6:6e:66:6f:cb:a5:b0:57:64:d3:b8:82:80:f9:1a:
                    ef:ed:8a:91:cd:e2:5c:ec:f4:c8:b2:a1:3f:e1:1d:
                    cc:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:12:B8:44:49:31:9B:E3:96:DB:B0:C1:DB:99:38:13:47:C8:EA:DF
            X509v3 Authority Key Identifier:
                keyid:AE:93:83:A9:3B:6C:5A:13:5D:26:13:A9:7C:5D:EC:96:09:62:33:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rpODqTtsWhNdJhOpfF3slgliM_E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:5b:26:d8:07:26:b6:b6:4b:a2:fd:2f:4a:d1:d7:27:43:4e:
         db:e9:48:e5:db:fb:83:f5:c5:0f:85:30:ae:94:9a:d8:c7:1a:
         0f:85:f8:2a:7d:da:4e:3c:60:30:74:c5:0d:5b:e2:de:80:ae:
         c4:3f:86:96:3a:a1:1d:c5:9f:38:d7:71:8f:d2:19:d4:60:3f:
         51:11:94:fd:58:fa:af:7b:0b:93:66:d3:e8:c0:88:98:bb:ff:
         58:8e:e7:64:a7:9b:09:d8:ae:90:6a:4e:f3:b0:2d:9f:7c:f2:
         89:9f:9c:42:a3:b0:f9:c7:48:93:03:d8:83:24:95:cd:35:95:
         82:a9:73:33:78:83:bb:8c:d3:84:dd:8b:af:c1:bf:b0:a8:84:
         ed:92:ed:29:55:56:2a:b4:5b:d1:95:c5:b1:de:b4:d0:13:42:
         1b:90:b9:f1:bf:e3:7b:bf:86:80:95:25:2a:ec:30:fa:c2:60:
         cc:6d:cd:95:91:df:a2:7f:b0:d1:9d:03:0b:85:00:d0:2a:04:
         6c:99:83:f9:80:57:bb:a5:7c:82:54:84:c1:6c:cc:eb:d4:fc:
         e5:3c:aa:fd:3f:16:45:d4:25:25:88:78:b6:9a:27:42:d5:91:
         e5:85:84:74:7d:c3:5d:56:81:c4:d9:f5:be:9f:0a:e1:5f:b5:
         99:d1:7b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:29:00 2025 by rpki-client