Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.mft
File:                     vTfx1AdHvmxfXGujMH32Vgq2gaM.mft (raw, json)
Hash identifier:          uTUwkWWIzrHSm9F9KTzjAOb5zXUULwlVuPAAjU3fofM=
Subject key identifier:   F0:7A:FD:F7:31:89:62:A4:45:98:43:B7:EE:09:ED:E0:6B:01:EB:0C
Authority key identifier: BD:37:F1:D4:07:47:BE:6C:5F:5C:6B:A3:30:7D:F6:56:0A:B6:81:A3
Certificate issuer:       /CN=A91817E6/serialNumber=BD37F1D40747BE6C5F5C6BA3307DF6560AB681A3
Certificate serial:       A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vTfx1AdHvmxfXGujMH32Vgq2gaM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.mft
Manifest number:          0B1C
Signing time:             Sat 18 Oct 2025 21:24:31 +0000
Manifest this update:     Sat 18 Oct 2025 21:24:30 +0000
Manifest next update:     Sat 25 Oct 2025 21:24:30 +0000
Files and hashes:         1: vTfx1AdHvmxfXGujMH32Vgq2gaM.crl (hash: ueyCHGDAYp60g83ZHQEUsHYeXRFRNKBpjnyzgwZDd3Q=)
                          2: 28C454FCB41211EF8D2EC946C4F9AE02.roa (hash: A1jEmvYmaWLQVLC3lKrKCjgOEWn5/laaNWB/FSQRMc0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.crl
                          rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vTfx1AdHvmxfXGujMH32Vgq2gaM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 21:24:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 167 (0xa7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91817E6, serialNumber=BD37F1D40747BE6C5F5C6BA3307DF6560AB681A3
        Validity
            Not Before: Oct 18 21:24:30 2025 GMT
            Not After : Oct 25 21:24:30 2025 GMT
        Subject: CN=68f4058f-1118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bd:9c:e1:4a:ce:cb:71:bc:7f:0d:18:10:84:
                    82:04:ce:bd:65:1f:f0:b6:6b:80:81:70:97:6c:51:
                    5a:cf:69:94:f6:17:92:de:d9:8b:aa:d3:8a:70:92:
                    57:d7:34:a4:e9:4b:ce:a1:9b:98:ab:d2:be:1c:e4:
                    4d:52:d5:f0:e6:ee:44:6d:12:13:63:3b:77:0e:7e:
                    ac:07:06:86:52:67:f7:9d:6c:a6:75:ae:03:6e:a2:
                    b0:75:8f:e0:b8:5a:59:10:08:3e:95:32:15:c3:dc:
                    b3:07:4d:3b:b0:3a:e9:85:0d:56:39:5b:7b:62:93:
                    e2:51:c3:48:c9:0b:b2:85:ab:5e:4a:e5:06:bf:22:
                    2f:57:a4:3f:b1:62:4b:4f:39:3e:40:25:42:ec:93:
                    d0:fb:55:6f:3f:6a:e1:7d:30:a7:39:72:f1:87:fd:
                    35:91:0a:6b:55:20:03:46:0e:0f:77:22:b5:fd:c7:
                    6a:71:db:a4:e0:d0:be:6f:5a:c4:37:3d:04:99:3f:
                    d9:b8:05:6e:b5:3c:ae:32:db:13:10:6f:27:b6:46:
                    e8:92:21:40:61:23:8b:8e:f9:15:d6:4f:32:67:ce:
                    63:62:c1:c1:ed:ab:cc:67:f4:f7:79:54:94:58:cf:
                    56:c0:6d:ee:48:25:0a:30:bc:f5:56:e6:bd:2d:32:
                    df:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:7A:FD:F7:31:89:62:A4:45:98:43:B7:EE:09:ED:E0:6B:01:EB:0C
            X509v3 Authority Key Identifier:
                keyid:BD:37:F1:D4:07:47:BE:6C:5F:5C:6B:A3:30:7D:F6:56:0A:B6:81:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vTfx1AdHvmxfXGujMH32Vgq2gaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:30:03:a5:a8:18:f5:d5:4b:1b:e1:55:b9:88:bb:78:af:b9:
         1a:cd:66:05:c0:47:f5:e6:45:e2:59:e8:d9:42:e0:f3:88:05:
         23:f2:2d:3f:ed:96:b1:b8:d7:d8:c4:d5:19:c7:6f:f6:67:ed:
         d9:32:d7:53:80:4c:6c:fb:ee:26:a2:24:f3:5f:8d:b7:bc:d5:
         fe:b2:c8:bb:e6:55:4d:ec:57:c6:2d:49:a8:61:a6:eb:cf:fb:
         95:dc:4d:0f:33:f7:f2:24:24:c8:73:c1:29:b2:6e:ee:9f:9b:
         e5:62:73:37:cd:01:7a:89:1a:6c:cf:12:e6:f5:0e:1d:51:af:
         f5:05:16:3e:ea:a5:7f:40:8e:3a:b4:f9:9d:d8:46:8c:21:75:
         a0:2d:b9:a4:61:ba:a0:b7:7c:1d:f3:34:7f:da:85:5a:e2:66:
         9d:45:44:cd:6f:3c:80:e4:cf:de:ec:05:83:80:e5:44:84:32:
         f6:04:e7:1d:60:98:24:9d:01:8c:96:7a:42:fd:4e:5f:1a:d0:
         f0:24:9a:ca:af:c2:9c:b6:c1:be:99:4b:f4:f2:cb:df:d8:d1:
         9d:61:bc:cd:d8:d3:cb:eb:d2:fb:30:d8:b1:18:88:d9:a2:d1:
         c8:58:81:bb:01:78:e0:83:74:7a:06:04:8f:de:44:23:98:b5:
         b1:28:67:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:32:24 2025 by rpki-client