Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.mft
File:                     h-gMDkYzEKnTA4zgE88YU3SlxyI.mft (raw, json)
Hash identifier:          uoreKzq6ig41p3e1yuG/yYNTRULlJRiKZtYaGfNwz7M=
Subject key identifier:   8A:FD:9D:68:A6:66:BE:46:64:22:29:29:75:A3:D1:B3:C2:A2:A7:7F
Authority key identifier: 87:E8:0C:0E:46:33:10:A9:D3:03:8C:E0:13:CF:18:53:74:A5:C7:22
Certificate issuer:       /CN=A918524B/serialNumber=87E80C0E463310A9D3038CE013CF185374A5C722
Certificate serial:       0624
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h-gMDkYzEKnTA4zgE88YU3SlxyI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.mft
Manifest number:          061A
Signing time:             Sun 19 Oct 2025 00:27:27 +0000
Manifest this update:     Sun 19 Oct 2025 00:27:26 +0000
Manifest next update:     Sun 26 Oct 2025 00:27:26 +0000
Files and hashes:         1: h-gMDkYzEKnTA4zgE88YU3SlxyI.crl (hash: DNpmZmFN3thuoTPc6Ziy887rmtTBZ8e4gkZJn/RyX5M=)
                          2: C850F3BA89A511EEB6692E43C4F9AE02.roa (hash: uJ34QZzPWsLiblBgV7Ywgb0TXxMUSuEWmFUneXtmF9w=)
                          3: C49CE482BEA411EB85828650C4F9AE02.roa (hash: tWGIt1j5EvwGUw+Sd+nJTxQY0ACb+5Zewj9NqITpqME=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.crl
                          rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h-gMDkYzEKnTA4zgE88YU3SlxyI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 00:27:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1572 (0x624)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918524B, serialNumber=87E80C0E463310A9D3038CE013CF185374A5C722
        Validity
            Not Before: Oct 19 00:27:26 2025 GMT
            Not After : Oct 26 00:27:26 2025 GMT
        Subject: CN=68f4306f-834c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1b:79:12:f0:6a:d8:73:bb:52:6b:28:d2:01:
                    a5:a2:af:62:b0:66:91:a8:5f:03:07:68:53:aa:2d:
                    26:cc:27:58:14:7e:19:ed:0c:14:be:ec:a8:c5:7b:
                    db:cb:c2:07:5f:42:e6:ff:33:0a:3d:e5:c7:12:2e:
                    5f:cf:4b:3f:5d:50:18:64:54:4b:6c:08:c0:ee:6c:
                    73:cf:4a:9a:0b:8c:7d:d0:61:79:61:31:d7:59:d9:
                    0f:7f:3c:b0:f5:ec:0e:15:fe:b8:27:74:51:26:b3:
                    1f:a0:11:83:94:6f:8b:50:5c:b1:0b:08:6f:af:b3:
                    51:0c:65:28:f6:d5:8d:8a:a8:af:26:d6:cf:13:10:
                    fc:b8:ea:9d:d9:01:d3:00:ef:b4:74:0d:8f:2f:90:
                    80:b8:f1:cf:ee:d1:e4:50:76:15:a4:23:11:3f:88:
                    b6:a0:bf:b7:29:6b:dd:ac:5e:ac:f0:a4:e1:82:5a:
                    c7:13:ad:32:c6:6c:dd:55:95:81:53:f0:e6:78:0c:
                    9b:2a:c3:80:74:76:b8:d2:31:61:15:cf:35:30:0a:
                    38:bf:39:76:cc:b0:ce:08:33:eb:bd:83:3a:b5:a2:
                    95:0a:cd:0e:42:07:9c:19:25:76:12:c5:80:06:a2:
                    ac:fd:c9:35:20:69:79:aa:2b:cc:f3:5d:ed:a5:ff:
                    ba:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:FD:9D:68:A6:66:BE:46:64:22:29:29:75:A3:D1:B3:C2:A2:A7:7F
            X509v3 Authority Key Identifier:
                keyid:87:E8:0C:0E:46:33:10:A9:D3:03:8C:E0:13:CF:18:53:74:A5:C7:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h-gMDkYzEKnTA4zgE88YU3SlxyI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:64:71:57:8d:45:76:44:a9:7f:c3:43:db:85:fa:79:a9:6d:
         59:d8:e8:7b:7f:77:8a:18:10:02:85:15:15:fd:bb:e8:99:66:
         67:0a:a6:65:49:19:6e:d8:4e:88:16:64:03:53:f4:e7:cc:20:
         ae:e2:04:4c:94:93:4d:8e:95:06:a4:98:71:12:90:3f:dc:a2:
         bc:8c:f3:2b:8a:ec:16:2e:dd:29:4a:b5:bc:22:c4:0d:ec:cd:
         c4:33:5b:43:8a:41:6c:e2:ae:f8:00:ad:c5:5f:04:a9:5f:78:
         dc:bd:54:66:03:54:63:e1:be:4c:2b:74:c8:f9:60:5f:8b:03:
         8f:9e:ec:3a:19:9b:34:6c:8c:c5:24:8c:57:3e:27:87:38:4f:
         e4:56:0f:be:8e:df:89:ab:52:26:03:66:c6:08:c5:6a:01:3d:
         91:c3:a2:16:e0:55:fb:11:57:2c:89:2e:ce:22:f2:7a:ed:4b:
         ae:60:f1:b8:92:50:80:13:25:dd:e9:48:46:2a:28:89:c4:7d:
         ba:e4:8f:47:57:db:41:e4:70:a4:72:3a:97:4e:4f:05:87:c9:
         52:27:75:5a:4c:52:49:24:ee:11:fe:8b:da:8c:11:ea:8b:44:
         15:29:0f:8a:50:92:23:03:ae:34:4d:8b:74:cb:a1:7e:ab:b9:
         03:c6:3d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:45:58 2025 by rpki-client