Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft
File:                     25LUPJBhJQWzr0bpZKaMyfXzsq8.mft (raw, json)
Hash identifier:          YzzYjuvEBs+mu+F6d9T7Y8PdsnmBUKhDtMKTULFgHxw=
Subject key identifier:   DB:17:73:34:B8:D5:58:3B:0B:7C:76:98:E5:20:ED:3A:6B:86:FB:F7
Authority key identifier: DB:92:D4:3C:90:61:25:05:B3:AF:46:E9:64:A6:8C:C9:F5:F3:B2:AF
Certificate issuer:       /CN=A918213B/serialNumber=DB92D43C90612505B3AF46E964A68CC9F5F3B2AF
Certificate serial:       0384
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft
Manifest number:          0368
Signing time:             Sun 19 Oct 2025 03:04:27 +0000
Manifest this update:     Sun 19 Oct 2025 03:04:26 +0000
Manifest next update:     Sun 26 Oct 2025 03:04:26 +0000
Files and hashes:         1: 25LUPJBhJQWzr0bpZKaMyfXzsq8.crl (hash: AM9sINLBPbDrGcpwfvWDjbxk9MbRjLtlDNcWBETKP3o=)
                          2: B2FCF1C07FF911F08FAAC57FC4F9AE02.roa (hash: MnpTevKrhY7L4cqXUyU9PXlqHjDSUZYAGeApiPXwlBI=)
                          3: 299F07F2E15611EFA15DF23DC4F9AE02.roa (hash: fuFQR3XBNeUBp3GuT5Rq8XdFNfctvFuOXUDcjAZyCQA=)
                          4: 9ABE08C606F311F08407D351C4F9AE02.roa (hash: Oo/z3Tl848fDTqTqN7CA+y187n0AUvuUe1PsbRy+loY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.crl
                          rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 03:04:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 900 (0x384)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918213B, serialNumber=DB92D43C90612505B3AF46E964A68CC9F5F3B2AF
        Validity
            Not Before: Oct 19 03:04:26 2025 GMT
            Not After : Oct 26 03:04:26 2025 GMT
        Subject: CN=68f4553a-36cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:95:9c:7b:07:2f:56:35:34:82:90:98:0c:e1:
                    ba:52:26:bc:34:bb:01:d9:b8:fc:91:48:e3:db:53:
                    1d:76:73:da:c8:91:9e:2b:27:0a:eb:80:30:ef:49:
                    d0:c7:cd:57:8a:04:60:66:f3:6b:ff:50:73:17:93:
                    6e:47:42:79:70:7e:b0:e0:01:3b:4e:e7:f8:78:ce:
                    14:e5:29:d8:c3:93:08:11:30:18:7d:29:c8:63:27:
                    56:a4:72:cf:57:67:df:a5:0d:aa:c3:10:ea:1c:45:
                    2e:2c:cc:6e:ba:14:df:8e:b8:09:a3:a8:0e:fe:b6:
                    e1:38:49:62:8c:e9:a6:c4:89:7c:1c:d6:ec:1d:42:
                    0b:69:04:f8:f1:6b:4a:bb:41:92:ac:44:8c:75:9a:
                    8f:df:63:36:3e:92:be:3b:77:29:1d:49:e1:09:29:
                    de:9f:b3:8e:ee:9d:0e:cf:4f:14:ff:6b:d8:c0:6a:
                    2d:60:bf:ef:fe:8c:26:50:54:1a:1c:ae:2a:41:8f:
                    55:35:67:d4:ca:2a:7b:d1:5c:0e:4d:a7:b5:b8:c8:
                    e9:2f:14:67:97:7b:ca:4f:b6:12:28:fd:d0:f6:e8:
                    8b:a5:f4:56:fc:a3:1b:ac:0f:b3:e7:77:ff:ae:f0:
                    c1:28:ba:7f:22:d1:f2:fc:50:99:9e:32:9e:a5:9d:
                    58:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:17:73:34:B8:D5:58:3B:0B:7C:76:98:E5:20:ED:3A:6B:86:FB:F7
            X509v3 Authority Key Identifier:
                keyid:DB:92:D4:3C:90:61:25:05:B3:AF:46:E9:64:A6:8C:C9:F5:F3:B2:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:da:36:d0:13:12:14:b1:13:94:69:d6:cf:94:12:4f:fa:00:
         cf:f1:37:cc:96:1e:11:e6:ca:0d:0d:1d:d3:df:9e:08:9c:9e:
         fa:3a:84:a6:84:e2:ef:d9:f5:51:ea:31:07:d2:2d:59:25:14:
         ce:3a:8f:d0:0e:49:47:b7:0f:e3:35:94:76:f5:70:26:9b:c9:
         c1:63:ec:d0:0f:9d:b1:ba:9a:b9:dd:19:92:8f:3a:b7:d1:1e:
         93:6c:8f:ab:71:c1:55:24:aa:1f:86:b1:17:b0:ae:41:29:58:
         64:e6:e6:d9:cb:d0:2d:bb:25:10:15:61:bb:98:00:f9:f9:5d:
         0d:23:66:33:3a:ce:80:54:b8:ad:84:86:79:a0:fb:10:7f:45:
         69:4b:4f:fe:4b:c3:ad:79:fd:ab:da:e5:ed:b9:21:d9:81:81:
         03:bd:f5:de:00:45:8f:46:80:0c:66:60:d4:e2:4b:74:ae:a4:
         29:2f:d3:6f:24:93:13:eb:0c:76:d2:24:f0:01:f3:c6:19:b0:
         c1:e4:84:2f:fc:03:d5:7c:9c:c1:9d:3d:f9:33:e0:dc:ca:c6:
         62:da:71:77:02:93:4e:f7:6d:5e:a3:b1:3d:89:9a:78:1c:ac:
         a3:37:e2:db:38:1a:b2:36:4f:b3:80:8a:f4:8a:3c:09:7d:a5:
         a3:1f:73:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:45:41 2025 by rpki-client