Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft
File:                     M2YXmy18l7gmb5tDGASoxtLQkOs.mft (raw, json)
Hash identifier:          KcBQ+wmbfv1k7EIHrgxgJsRMHrgsU9VErvdf0U1NlMI=
Subject key identifier:   79:48:29:F7:C6:57:7F:9E:11:46:B5:FC:F4:73:A6:BC:83:39:D0:09
Authority key identifier: 33:66:17:9B:2D:7C:97:B8:26:6F:9B:43:18:04:A8:C6:D2:D0:90:EB
Certificate issuer:       /CN=A91852AB/serialNumber=3366179B2D7C97B8266F9B431804A8C6D2D090EB
Certificate serial:       01F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2YXmy18l7gmb5tDGASoxtLQkOs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft
Manifest number:          01ED
Signing time:             Sun 19 Oct 2025 04:55:35 +0000
Manifest this update:     Sun 19 Oct 2025 04:55:35 +0000
Manifest next update:     Sun 26 Oct 2025 04:55:35 +0000
Files and hashes:         1: M2YXmy18l7gmb5tDGASoxtLQkOs.crl (hash: UIrTxbm/vMlHSyBhscrC80MBPADoggkI1vqEex7qZ6s=)
                          2: E90A311AB8BE11ED83994B4AC4F9AE02.roa (hash: fdj786LqemSZiJSQFR5Ny/PwTC9eYDtT9LwHAqxwkRU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.crl
                          rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2YXmy18l7gmb5tDGASoxtLQkOs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 04:55:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 496 (0x1f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91852AB, serialNumber=3366179B2D7C97B8266F9B431804A8C6D2D090EB
        Validity
            Not Before: Oct 19 04:55:35 2025 GMT
            Not After : Oct 26 04:55:35 2025 GMT
        Subject: CN=68f46f47-0b04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:be:97:91:b1:e0:ba:b1:61:c8:df:35:54:eb:
                    43:8a:eb:a0:80:8b:9e:ea:26:b9:b9:89:5c:16:c5:
                    93:ac:34:db:98:f1:0e:da:46:c4:20:c4:5f:24:1b:
                    b9:aa:02:ee:d5:29:f9:72:5e:53:ce:28:f7:51:c3:
                    23:88:8d:6c:6d:f8:12:bf:cf:f6:27:c0:f7:50:dc:
                    50:bb:57:a5:54:3f:47:dc:16:2f:70:4f:c5:98:b5:
                    81:73:de:83:9d:52:c0:fe:14:e2:1e:5f:aa:ca:36:
                    d8:c0:f7:c8:ed:68:28:12:03:f2:67:27:24:6d:24:
                    23:0e:da:42:68:e2:d6:88:a9:dc:4b:7c:3b:a3:e3:
                    a3:26:18:60:be:e3:80:31:94:6e:0d:b3:9d:e0:5e:
                    c3:4a:cb:fb:23:12:54:fe:8f:7e:c9:b9:d4:98:5b:
                    25:68:e2:fb:15:16:ab:f5:2c:54:41:01:a7:2c:49:
                    56:a8:d8:56:e3:73:5d:8c:e0:ba:57:9d:aa:66:5f:
                    2e:e3:70:90:9b:f2:e2:6c:df:a8:da:51:82:5b:14:
                    5a:85:02:8a:b2:d4:64:ad:2c:2f:9c:99:9e:1d:d6:
                    6c:7c:5d:6a:7c:0a:14:3b:f7:5e:1e:6f:3c:c5:c9:
                    3b:ed:da:b0:47:09:db:b2:27:ef:d1:bf:33:27:c4:
                    33:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:48:29:F7:C6:57:7F:9E:11:46:B5:FC:F4:73:A6:BC:83:39:D0:09
            X509v3 Authority Key Identifier:
                keyid:33:66:17:9B:2D:7C:97:B8:26:6F:9B:43:18:04:A8:C6:D2:D0:90:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2YXmy18l7gmb5tDGASoxtLQkOs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:3e:42:c5:5c:61:b6:ec:96:03:69:6a:42:a8:19:ac:14:64:
         df:b5:2d:29:31:2e:38:6e:22:a5:5f:ab:3f:77:82:84:81:13:
         9c:07:cd:43:4a:fc:86:70:a7:72:89:5f:03:6c:c2:7a:d5:1b:
         8a:4d:66:e4:d5:1d:d8:18:9a:2f:cd:5b:92:2a:b3:69:6f:78:
         a5:5e:58:ac:ca:ce:f2:88:8f:c0:56:ab:34:11:7b:ca:88:c6:
         30:8f:1f:30:27:ca:4e:9e:81:f8:29:5f:7b:50:e1:c0:01:c2:
         0e:2d:5a:f6:15:b7:e4:5c:be:54:2a:c3:d4:c7:34:5e:bd:a8:
         97:66:71:52:d8:47:f2:d1:05:9b:67:0e:81:0e:1f:52:ec:e1:
         67:77:38:af:7a:01:57:b4:78:86:92:55:b9:3f:cf:2f:ff:fb:
         89:7b:c9:ab:90:c8:48:b6:17:b0:d6:ae:12:09:dc:ca:30:fa:
         fc:11:f8:cd:57:9f:22:45:a3:6b:e2:42:e4:b2:2f:53:05:98:
         46:a6:23:4c:0d:6f:9d:d6:bb:21:61:29:7e:ec:7f:b5:92:04:
         ee:3d:b9:67:cb:c3:f2:1d:db:54:7a:5a:b7:66:7e:36:26:08:
         91:56:6c:8d:b0:0f:ae:4f:cf:87:05:2b:83:0a:ed:e3:7b:d9:
         5e:c7:2d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:05:44 2025 by rpki-client