Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft
File:                     C41jj_04sfd-SOG7XfKZKc59eLU.mft (raw, json)
Hash identifier:          jZggGrewSWKtyv37Qria7CPZsAZrC9daZ4N+T0bUPQM=
Subject key identifier:   40:0C:CC:D1:95:B4:77:6E:F3:D8:BB:33:3C:5C:C3:45:9B:CE:77:35
Authority key identifier: 0B:8D:63:8F:FD:38:B1:F7:7E:48:E1:BB:5D:F2:99:29:CE:7D:78:B5
Certificate issuer:       /CN=A917BEA7/serialNumber=0B8D638FFD38B1F77E48E1BB5DF29929CE7D78B5
Certificate serial:       01F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft
Manifest number:          01D5
Signing time:             Sun 19 Oct 2025 05:36:42 +0000
Manifest this update:     Sun 19 Oct 2025 05:36:41 +0000
Manifest next update:     Sun 26 Oct 2025 05:36:41 +0000
Files and hashes:         1: C41jj_04sfd-SOG7XfKZKc59eLU.crl (hash: 9QhYziOoUKlDnEDKHCLTTTz3/qHaNdgvC+VAYIJ+9bc=)
                          2: AA398864B96611EF8161BF51C4F9AE02.roa (hash: TD7salmLrRM34euIo8G4Ct9yO9PS+fagaxM6vGI2MEw=)
                          3: 8FD9EFB21C4B11EFA5B6383EC4F9AE02.roa (hash: fSxpUr+WUEiMsQuXQ14Z3BJW2UDp3SS+KK2DrcMSuYE=)
                          4: 899BFC6C533C11EF8B23DB12C4F9AE02.roa (hash: ihXElke8srSYYptYUqBX48/+59ysvth9EZ73na0o1PM=)
                          5: 99DA0A4C533C11EF92170913C4F9AE02.roa (hash: uvhIRu3Zl3QRrUhy2ZG8t4bZnlI9E1gwDxFwYKld2lg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.crl
                          rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 05:36:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 497 (0x1f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917BEA7, serialNumber=0B8D638FFD38B1F77E48E1BB5DF29929CE7D78B5
        Validity
            Not Before: Oct 19 05:36:41 2025 GMT
            Not After : Oct 26 05:36:41 2025 GMT
        Subject: CN=68f478e9-41f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d7:fe:19:5f:19:c9:5a:05:ce:e6:d2:a4:53:
                    d3:04:c3:07:dc:cb:79:17:7f:4a:4e:77:36:9c:0e:
                    34:f4:ad:ae:9e:f9:87:40:2f:17:47:2c:f1:e9:65:
                    30:5e:86:f2:fd:4f:79:70:c1:fa:d6:f4:bd:83:d7:
                    91:21:65:7f:5a:40:76:6a:a8:df:29:93:4b:16:9d:
                    3b:b9:5d:71:3a:4a:0a:5d:4c:e3:3e:4a:5d:fc:cf:
                    47:00:63:dd:57:f0:1b:ea:4f:69:66:41:06:aa:d0:
                    a9:65:05:d8:2a:f0:57:d2:fc:3e:dd:3d:d7:7e:b2:
                    cd:26:d7:82:46:a9:02:7f:60:7b:ea:a1:f2:f2:76:
                    5d:94:04:23:9c:15:7f:eb:88:bb:a3:94:6d:24:ec:
                    aa:49:b2:71:c7:60:8f:7d:e5:a5:dc:23:d4:de:4a:
                    1c:52:80:72:4e:1a:21:34:b9:73:2d:78:25:4e:50:
                    81:e4:dc:72:9c:bf:f2:46:ef:a5:cb:53:81:34:07:
                    a8:3e:d2:8f:4e:ca:37:98:35:f1:1e:3e:3a:b4:87:
                    8b:23:a2:8d:45:94:07:8f:15:6a:fa:cd:73:d2:83:
                    f9:a7:7a:cb:f2:2a:1e:2c:eb:cb:08:79:85:cb:9c:
                    40:13:38:84:70:95:b2:6b:cf:49:88:75:ad:9f:ed:
                    15:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:0C:CC:D1:95:B4:77:6E:F3:D8:BB:33:3C:5C:C3:45:9B:CE:77:35
            X509v3 Authority Key Identifier:
                keyid:0B:8D:63:8F:FD:38:B1:F7:7E:48:E1:BB:5D:F2:99:29:CE:7D:78:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:b6:e7:36:e8:57:5e:fa:ce:04:d6:2b:05:28:57:2c:f4:7c:
         49:4e:f5:fa:98:1e:6c:b3:02:9a:a8:d5:8f:94:43:10:aa:fc:
         bf:62:1b:d3:55:38:43:cd:7e:ac:78:80:18:1d:fb:3d:08:5e:
         05:90:8b:80:1e:6a:a0:39:9b:69:6b:81:64:65:ca:26:aa:bf:
         c6:cc:cc:6b:09:cf:57:56:fa:8a:60:0c:f4:e0:16:46:fd:e1:
         6d:b4:6a:62:1c:53:32:84:4a:49:09:ea:38:98:ed:9a:d9:32:
         ee:5a:8d:f5:df:b4:f0:dd:52:d3:c9:ce:82:ef:dd:bb:db:a5:
         90:8d:1d:1a:de:c3:da:1a:f1:c0:00:5c:78:29:63:61:0b:12:
         eb:1f:b9:d3:3b:76:bd:17:25:2b:66:1d:d0:db:23:89:06:f5:
         6c:54:ab:7d:33:53:10:fe:b1:a2:ab:84:9c:1f:79:cd:31:ea:
         ef:c0:32:af:3c:82:88:3b:42:46:5f:14:ac:80:a2:da:e5:8f:
         c8:5f:15:97:85:ca:11:be:58:37:e7:f0:a1:80:d2:fe:2d:15:
         11:5d:47:ee:aa:61:9c:6a:37:01:7d:71:16:82:2c:42:d7:da:
         d5:2a:68:c3:74:6b:36:3d:78:ee:27:6b:4b:cb:b7:a8:fd:22:
         13:c8:b0:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:43:27 2025 by rpki-client