Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft
File:                     33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft (raw, json)
Hash identifier:          I8jUZ2OdOqRWHs5maIMm/3akYH6JIiMp128FmRWQ0QY=
Subject key identifier:   3E:A8:AB:A6:B5:EF:7C:19:69:D5:B1:E1:4B:7D:68:06:03:DF:67:A3
Authority key identifier: DF:75:26:A8:8E:A7:70:94:A6:2F:14:39:FF:B4:20:8F:50:2F:4F:EC
Certificate issuer:       /CN=A9179F6E/serialNumber=DF7526A88EA77094A62F1439FFB4208F502F4FEC
Certificate serial:       0494
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft
Manifest number:          048F
Signing time:             Sun 19 Oct 2025 01:53:13 +0000
Manifest this update:     Sun 19 Oct 2025 01:53:12 +0000
Manifest next update:     Sun 26 Oct 2025 01:53:12 +0000
Files and hashes:         1: 33UmqI6ncJSmLxQ5_7Qgj1AvT-w.crl (hash: OYPZn/upEsEvRQAABZn5liatdz1yEuWuJDcUQm9+gKc=)
                          2: F5DED02A588511ECAC342433C4F9AE02.roa (hash: H8OBeRqs2B2zDmPzaFX4iRN3UQF65d9TwV3ksnnmLrw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.crl
                          rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 01:53:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1172 (0x494)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179F6E, serialNumber=DF7526A88EA77094A62F1439FFB4208F502F4FEC
        Validity
            Not Before: Oct 19 01:53:12 2025 GMT
            Not After : Oct 26 01:53:12 2025 GMT
        Subject: CN=68f44488-7db4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7e:5c:f9:31:d5:28:d4:24:4f:33:e6:9a:f7:
                    07:c4:50:91:e4:89:02:b4:73:c0:5c:b4:bd:84:25:
                    0e:33:7e:6b:8a:f1:b2:dd:4f:80:6a:c3:2b:fb:c9:
                    a5:78:89:a5:40:77:22:e3:1f:a3:5f:fc:6c:56:4e:
                    82:21:27:6b:53:bc:c2:b2:1a:99:3d:0c:62:3d:be:
                    78:39:89:ff:b1:15:b3:04:87:17:51:88:26:59:35:
                    95:70:62:91:95:82:2c:5a:31:06:79:a4:df:c4:44:
                    3e:e7:13:5a:a0:74:a4:36:c7:87:a1:d1:cf:99:1f:
                    af:14:1d:cf:8d:d3:47:38:20:f9:9f:34:93:f1:ca:
                    94:1d:a8:54:90:c9:ae:82:0b:af:b1:18:57:e8:73:
                    5f:96:fd:2d:96:64:62:bc:2d:6f:81:c8:e9:fe:0c:
                    cf:28:3c:9e:5f:72:2a:5f:d8:6c:1c:3d:00:49:b6:
                    64:28:f5:ff:e4:33:18:22:29:6a:91:4d:02:f7:9e:
                    2c:aa:a4:2c:6c:12:38:79:a4:85:61:f1:f9:7f:16:
                    91:8b:6d:ce:29:e9:a7:6d:dd:36:36:fc:22:86:c5:
                    68:35:e1:ca:e0:92:9a:f1:07:f0:91:58:cd:e0:7e:
                    96:c1:7d:c9:50:06:03:30:09:81:83:5e:43:a6:f2:
                    29:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:A8:AB:A6:B5:EF:7C:19:69:D5:B1:E1:4B:7D:68:06:03:DF:67:A3
            X509v3 Authority Key Identifier:
                keyid:DF:75:26:A8:8E:A7:70:94:A6:2F:14:39:FF:B4:20:8F:50:2F:4F:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:1b:72:4e:6a:a4:8d:26:4d:98:82:0d:5f:78:96:07:54:35:
         84:fb:ca:6b:58:c2:d2:dc:d2:02:42:d4:46:a4:fc:6b:9c:1c:
         6f:86:43:9c:d0:1b:18:73:6d:ac:14:67:ea:75:58:00:0f:79:
         6b:10:07:84:bb:c3:7b:68:c0:0d:de:ba:51:a9:cf:14:51:58:
         ec:7c:f1:9e:48:ca:2c:4f:4b:3d:48:f1:85:f2:e1:92:ac:17:
         74:f1:a0:c2:00:8f:02:f6:a5:ff:50:4b:e9:24:6a:82:57:3f:
         87:6f:28:89:8f:8d:d4:32:2d:59:5f:d0:f3:f6:e8:a7:cc:1a:
         b9:c7:f3:32:2d:b8:5b:0c:1c:43:c5:a3:b3:05:e9:97:8e:49:
         13:50:ad:48:a0:ae:f8:32:08:f7:bc:1c:20:f6:69:43:56:2c:
         23:21:88:91:0b:1e:31:ec:b6:e0:23:d3:2a:10:5e:43:2e:4d:
         b5:71:f2:00:74:55:3a:58:1a:58:13:cc:cf:fa:b1:6a:51:1f:
         77:f0:8e:f6:c9:3b:82:0c:f9:69:e1:14:08:bc:df:d9:63:f8:
         1f:56:e8:04:c6:84:92:58:3c:17:7c:ca:dd:a5:4e:03:76:1d:
         9a:28:02:27:28:6b:c4:35:18:5e:9a:76:b3:08:18:e2:70:1a:
         ed:b8:a3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:51:12 2025 by rpki-client