Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/L927RfNPJhkzrCt9Z6xz05Op0WQ.mft
File:                     L927RfNPJhkzrCt9Z6xz05Op0WQ.mft (raw, json)
Hash identifier:          hhsDUB6CaauMxWyXLQcZOaeA3wSUH3aZONNnOLdIrOY=
Subject key identifier:   92:94:13:1F:6A:52:74:08:46:45:48:35:49:E9:14:85:BE:F0:7D:E1
Authority key identifier: 2F:DD:BB:45:F3:4F:26:19:33:AC:2B:7D:67:AC:73:D3:93:A9:D1:64
Certificate issuer:       /CN=A917ECB0/serialNumber=2FDDBB45F34F261933AC2B7D67AC73D393A9D164
Certificate serial:       039A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L927RfNPJhkzrCt9Z6xz05Op0WQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/L927RfNPJhkzrCt9Z6xz05Op0WQ.mft
Manifest number:          0396
Signing time:             Sun 19 Oct 2025 02:46:17 +0000
Manifest this update:     Sun 19 Oct 2025 02:46:16 +0000
Manifest next update:     Sun 26 Oct 2025 02:46:16 +0000
Files and hashes:         1: L927RfNPJhkzrCt9Z6xz05Op0WQ.crl (hash: FbyA7a6zDIdpHKnxKn7aq7af+kH5pvE1NV2GXCvYFCA=)
                          2: 2C7BB8BAB92411EC8E787A55C4F9AE02.roa (hash: +dFNC6bX5H+V6njzLbV2Ca6KkTrT3TtAm0EkKfPs5f0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/L927RfNPJhkzrCt9Z6xz05Op0WQ.crl
                          rsync://rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/L927RfNPJhkzrCt9Z6xz05Op0WQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L927RfNPJhkzrCt9Z6xz05Op0WQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 02:46:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 922 (0x39a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ECB0, serialNumber=2FDDBB45F34F261933AC2B7D67AC73D393A9D164
        Validity
            Not Before: Oct 19 02:46:16 2025 GMT
            Not After : Oct 26 02:46:16 2025 GMT
        Subject: CN=68f450f9-739a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d7:f0:8d:fe:b5:06:4d:a5:27:8b:6a:66:6d:
                    f6:96:40:2f:fc:ba:d6:6d:3a:02:56:c5:17:55:61:
                    01:a9:94:a8:04:7a:19:d1:48:d5:91:a2:1b:b3:7e:
                    38:e5:ed:19:02:dc:ad:df:2d:25:90:ee:87:45:6b:
                    11:96:d5:7d:ee:92:62:eb:13:4a:85:33:4e:6e:6e:
                    00:62:d3:c8:60:e1:18:5a:53:06:eb:22:64:64:f6:
                    ab:c0:d1:f9:c7:aa:39:db:c4:37:c4:b7:c4:d5:90:
                    4b:60:52:b9:c3:af:b9:72:4e:75:7c:37:1c:d3:95:
                    44:27:1e:61:a2:be:62:99:ed:f3:73:d7:37:ec:5b:
                    34:93:9d:76:b2:7e:28:75:35:e9:a4:ed:d5:4c:a0:
                    5e:dd:8f:1f:b7:2a:7b:37:8c:b5:45:c0:5b:f2:a7:
                    97:0a:b2:10:5f:aa:55:ea:8c:10:a8:9c:79:0d:07:
                    24:5a:a1:6c:72:31:3b:e3:ea:a2:1d:d9:92:70:8c:
                    ae:ef:a2:4d:71:ed:8d:df:43:7e:44:48:ae:6c:28:
                    41:8a:ea:41:28:5d:5a:5a:41:b0:d2:a5:9e:2a:a5:
                    b0:64:13:77:38:d0:d4:4d:06:2a:a5:2c:06:f5:13:
                    d6:97:bd:a5:ea:cf:7f:85:35:96:85:0d:07:76:df:
                    22:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:94:13:1F:6A:52:74:08:46:45:48:35:49:E9:14:85:BE:F0:7D:E1
            X509v3 Authority Key Identifier:
                keyid:2F:DD:BB:45:F3:4F:26:19:33:AC:2B:7D:67:AC:73:D3:93:A9:D1:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/L927RfNPJhkzrCt9Z6xz05Op0WQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L927RfNPJhkzrCt9Z6xz05Op0WQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/L927RfNPJhkzrCt9Z6xz05Op0WQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:c2:b1:6e:6f:8a:3c:b2:1b:32:bb:63:66:39:3d:1d:48:ce:
         2f:ea:08:f4:40:58:b7:c9:a3:bd:11:33:c1:37:70:b0:53:cd:
         72:12:d8:cc:ca:13:6e:78:15:79:ba:f5:72:ad:90:10:44:87:
         dc:02:6a:f6:1c:b6:59:9c:0a:03:f2:4a:bb:40:77:7d:13:2b:
         51:11:2f:0a:ff:bd:15:90:67:38:fa:5e:74:cf:b8:b4:3f:77:
         a0:6b:74:cc:8c:82:6f:f4:e2:70:54:00:d1:09:cc:f3:6e:6f:
         6f:af:a5:2f:71:c2:49:07:33:6b:57:c1:14:9c:13:ca:bf:73:
         ce:8f:2f:32:0b:f5:b8:69:64:5f:84:ff:2c:65:f5:39:7a:8e:
         c9:5d:e8:c8:e2:ee:c7:91:9c:8f:2e:90:59:eb:a8:91:2f:f9:
         a0:fc:d6:17:f9:65:4d:bc:5c:fb:0b:38:e1:34:98:16:32:a4:
         a5:7b:15:78:bc:35:05:34:4a:d6:ce:7d:b5:b2:a2:0b:94:75:
         a4:fd:1e:c9:29:57:d9:63:74:2a:e7:01:cd:c2:e5:a0:e6:8e:
         14:b9:80:93:99:88:e1:83:37:09:93:6c:66:ee:65:49:ad:a8:
         f5:9a:a7:4f:20:3f:dd:36:12:b9:36:e6:f3:bb:82:58:99:55:
         2b:5d:a4:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:32:29 2025 by rpki-client