Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft
File:                     azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft (raw, json)
Hash identifier:          G5b9ZD7o927uSzkmVENwQB0DpYlxWxwf3jTKbE+axXA=
Subject key identifier:   31:91:4A:E0:BF:A3:F0:64:2B:FA:25:34:BD:FE:FD:02:CD:5D:AD:E2
Authority key identifier: 6B:3B:E8:F3:4C:EA:69:4B:0D:64:BC:F8:57:85:D9:17:44:36:95:D4
Certificate issuer:       /CN=A917B1EE/serialNumber=6B3BE8F34CEA694B0D64BCF85785D917443695D4
Certificate serial:       0161
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azvo80zqaUsNZLz4V4XZF0Q2ldQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft
Manifest number:          015B
Signing time:             Sun 19 Oct 2025 06:53:23 +0000
Manifest this update:     Sun 19 Oct 2025 06:53:23 +0000
Manifest next update:     Sun 26 Oct 2025 06:53:23 +0000
Files and hashes:         1: azvo80zqaUsNZLz4V4XZF0Q2ldQ.crl (hash: H0EdBxyO8MQYg+WwYaa6PN4MLei5S53Nj3N3vRz1rrA=)
                          2: 0F7A0CD4C72E11EEAA6B423BC4F9AE02.roa (hash: lqNFFXORI79Tp9nH7sxtcuWMLXX1DbMNSF2W2W7xgQw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.crl
                          rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azvo80zqaUsNZLz4V4XZF0Q2ldQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 06:53:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 353 (0x161)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B1EE, serialNumber=6B3BE8F34CEA694B0D64BCF85785D917443695D4
        Validity
            Not Before: Oct 19 06:53:23 2025 GMT
            Not After : Oct 26 06:53:23 2025 GMT
        Subject: CN=68f48ae3-bab5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a6:40:4b:96:95:8f:78:6e:8b:ce:e1:d4:34:
                    95:8d:36:f7:aa:fe:30:fe:70:89:80:08:76:02:47:
                    27:a4:b8:9e:ab:fb:21:5c:7b:d2:37:02:2b:72:68:
                    ff:1e:65:3d:06:4b:bc:40:cd:d6:5c:87:6b:4a:cc:
                    08:fa:82:51:f8:f8:00:a7:a5:ea:29:1b:ba:2a:f3:
                    54:f5:2e:ee:99:98:8f:93:cc:ce:22:62:72:e1:69:
                    c3:b7:11:82:f0:83:d8:7c:79:97:66:ce:e4:09:55:
                    26:45:4a:35:30:ec:2f:fe:83:29:5c:b1:ac:bd:eb:
                    65:e2:6f:8b:73:cf:6f:d4:9f:2c:3d:ac:d9:cf:03:
                    6a:d1:1a:78:b3:93:83:15:67:75:bf:3e:08:30:63:
                    56:17:30:cd:7b:63:96:d8:1a:d5:c8:11:ef:4d:ac:
                    d1:4d:ce:6a:27:5b:d7:27:67:1f:f3:77:ff:a1:92:
                    6e:ba:f8:bb:25:12:35:e9:33:ba:df:a6:6e:90:2c:
                    d9:6f:44:53:09:7f:59:65:93:ea:29:2a:aa:69:06:
                    7d:ff:30:bc:c1:38:29:99:0f:1e:74:5b:8a:08:47:
                    9b:6c:52:17:5e:3d:87:22:cf:cf:02:ba:33:c2:78:
                    c1:f3:9a:a7:a8:a0:8b:02:74:ca:05:90:cb:e8:d4:
                    85:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:91:4A:E0:BF:A3:F0:64:2B:FA:25:34:BD:FE:FD:02:CD:5D:AD:E2
            X509v3 Authority Key Identifier:
                keyid:6B:3B:E8:F3:4C:EA:69:4B:0D:64:BC:F8:57:85:D9:17:44:36:95:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azvo80zqaUsNZLz4V4XZF0Q2ldQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:a9:95:5f:aa:3e:33:35:0f:80:6d:04:ce:61:75:7b:ac:75:
         74:22:62:f1:00:09:32:a2:4e:91:3f:73:fd:4d:55:ca:f4:3a:
         ae:29:d7:b1:6c:d5:4f:c5:52:c3:4a:3f:c5:72:ba:4a:0c:78:
         c2:78:fa:3a:4a:17:97:b4:77:0a:dc:e0:b7:e8:78:80:03:d2:
         7b:03:cc:14:f5:90:6f:b5:94:05:fe:13:77:cc:78:2e:9e:7c:
         e2:70:a8:d9:24:ec:40:8c:40:e8:7c:01:e6:f4:aa:12:35:e8:
         10:3f:1b:05:49:14:74:af:89:5f:3c:63:23:9e:e5:e1:25:fb:
         1a:b7:dc:5c:9b:43:7d:10:7b:19:b2:c1:4e:a5:71:27:2c:d8:
         25:2e:7b:2e:68:10:55:c1:68:c8:f9:38:30:b6:5a:a2:fe:2d:
         f6:05:0e:67:de:57:43:c5:a2:c7:3c:ec:e8:9e:81:f7:2a:80:
         b8:ca:c1:4b:a7:ef:b4:78:9c:02:ee:74:cd:e2:c5:c4:0e:99:
         51:15:f1:7c:cb:69:07:26:3b:65:c1:b5:05:8b:e4:3e:3d:9b:
         c7:60:d4:a0:81:14:56:84:b5:e4:b8:ad:18:b4:92:82:89:28:
         2d:03:29:3d:2e:31:de:aa:9b:df:b2:4e:d9:21:7a:1b:b7:77:
         a4:e6:ae:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:49:46 2025 by rpki-client