Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918232F/3345C4C6664C11E8B71AFE46C4F9AE02/pyf1mySxFKJR_fd_U7-g7GkeJaU.mft
File:                     pyf1mySxFKJR_fd_U7-g7GkeJaU.mft (raw, json)
Hash identifier:          QmV9VrJlVSNPH80o2S8SrNKghZDKc+Ai3uRsYMglG4o=
Subject key identifier:   FF:BE:C6:91:86:DC:60:DD:97:55:24:63:56:28:6B:02:2E:3D:02:4D
Authority key identifier: A7:27:F5:9B:24:B1:14:A2:51:FD:F7:7F:53:BF:A0:EC:69:1E:25:A5
Certificate issuer:       /CN=A918232F/serialNumber=A727F59B24B114A251FDF77F53BFA0EC691E25A5
Certificate serial:       14EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pyf1mySxFKJR_fd_U7-g7GkeJaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918232F/3345C4C6664C11E8B71AFE46C4F9AE02/pyf1mySxFKJR_fd_U7-g7GkeJaU.mft
Manifest number:          14D8
Signing time:             Sat 18 Oct 2025 17:18:41 +0000
Manifest this update:     Sat 18 Oct 2025 17:18:40 +0000
Manifest next update:     Sat 25 Oct 2025 17:18:40 +0000
Files and hashes:         1: pyf1mySxFKJR_fd_U7-g7GkeJaU.crl (hash: yfBZEKPYi+kJi3yofyzYG/1vo4K0a686hqguF6/ysXE=)
                          2: 530FB34C664D11E89967A549C4F9AE02.roa (hash: trf33MfZmwst14ncdp+0lftlqiI1atOh67rv0E0k0p4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918232F/3345C4C6664C11E8B71AFE46C4F9AE02/pyf1mySxFKJR_fd_U7-g7GkeJaU.crl
                          rsync://rpki.apnic.net/member_repository/A918232F/3345C4C6664C11E8B71AFE46C4F9AE02/pyf1mySxFKJR_fd_U7-g7GkeJaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pyf1mySxFKJR_fd_U7-g7GkeJaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 17:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5355 (0x14eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918232F, serialNumber=A727F59B24B114A251FDF77F53BFA0EC691E25A5
        Validity
            Not Before: Oct 18 17:18:40 2025 GMT
            Not After : Oct 25 17:18:40 2025 GMT
        Subject: CN=68f3cbf0-f6a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:7a:53:eb:d1:25:8d:31:87:93:0a:03:90:4e:
                    69:82:8b:8f:f4:a1:b2:01:a2:08:a0:13:33:04:98:
                    d2:04:60:33:c4:ef:57:d3:4d:cd:41:74:f2:15:bc:
                    7b:68:01:f1:c0:38:65:d0:53:ce:38:15:73:b6:b5:
                    93:25:59:ae:f8:9a:cb:ec:48:99:99:44:54:63:c0:
                    1b:2c:a1:a6:ee:75:86:c8:71:2d:f9:db:34:c3:e4:
                    53:13:01:62:b5:54:b4:fc:be:ad:5a:0f:24:e1:21:
                    29:ab:86:90:64:5d:7a:18:4b:3b:11:e8:b0:a9:fb:
                    f9:a0:63:3d:6b:70:af:22:bd:09:fb:a8:38:75:ab:
                    78:ce:cc:69:27:65:06:49:5a:0f:fa:87:fd:96:32:
                    07:83:90:a0:98:24:f8:66:e0:da:14:52:4e:69:b5:
                    03:d1:78:74:9e:72:54:c7:d8:ec:c5:62:21:61:b5:
                    75:33:5f:3d:67:04:e9:7b:93:a6:a4:81:e2:02:94:
                    6e:38:53:34:25:e0:ab:cc:6d:d9:45:75:4f:2e:17:
                    e1:cb:cb:5e:63:94:98:45:4f:c6:28:7d:f8:59:67:
                    30:6c:10:0f:e2:08:77:af:49:c5:c1:65:72:b7:5c:
                    c9:d5:c0:aa:e6:72:22:fb:56:15:21:c1:d6:7c:1c:
                    1c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:BE:C6:91:86:DC:60:DD:97:55:24:63:56:28:6B:02:2E:3D:02:4D
            X509v3 Authority Key Identifier:
                keyid:A7:27:F5:9B:24:B1:14:A2:51:FD:F7:7F:53:BF:A0:EC:69:1E:25:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918232F/3345C4C6664C11E8B71AFE46C4F9AE02/pyf1mySxFKJR_fd_U7-g7GkeJaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pyf1mySxFKJR_fd_U7-g7GkeJaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918232F/3345C4C6664C11E8B71AFE46C4F9AE02/pyf1mySxFKJR_fd_U7-g7GkeJaU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:39:15:30:33:14:72:34:8a:0c:9c:fc:ae:9f:d3:a1:bb:33:
         d8:64:38:75:31:be:9a:b2:e7:c5:01:00:45:9d:b0:5b:e7:96:
         2b:eb:fc:8a:3d:50:d8:61:5f:5d:4e:aa:ce:95:51:64:69:9c:
         79:0e:84:f4:54:71:3a:55:0e:a9:77:59:97:56:4e:6f:47:04:
         b4:13:08:43:37:58:77:af:0e:3d:40:75:c0:67:7e:a1:4a:76:
         5b:c4:b7:64:c4:60:6e:81:be:5b:c4:2f:77:61:81:1f:96:55:
         eb:2c:e4:85:3a:26:d2:55:5d:d9:61:e5:f4:c7:1f:6b:62:cc:
         5f:3a:85:e0:89:a3:fb:31:43:23:7e:0f:f1:1e:c5:9c:ce:4b:
         32:a0:fe:5b:22:02:fa:5d:3b:5c:63:73:2a:bd:17:fd:57:be:
         6c:b5:aa:a5:1b:fa:85:95:22:a4:38:76:ea:97:c8:7e:b2:f6:
         76:c1:6f:2b:bc:13:f1:39:b5:b0:a2:e5:e6:f0:be:23:b4:be:
         66:8c:7a:8e:67:21:c0:1a:42:ab:56:a9:d6:7d:71:5b:aa:e0:
         f1:f1:18:a4:2e:b2:d3:3f:ae:19:7b:30:3d:a0:ba:f1:1f:34:
         05:6b:da:36:77:7d:10:8a:6a:ad:95:b1:ab:b2:5b:58:e2:74:
         3d:8b:b5:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:47:52 2025 by rpki-client