Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186584/53F0FEE0D66E11EAB7F33534C4F9AE02/MfUEGe8ZsP2mG2Y5DBLur27L50E.mft
File:                     MfUEGe8ZsP2mG2Y5DBLur27L50E.mft (raw, json)
Hash identifier:          UBc2dc6AOAohxbKimGb59ABByqUoVGL7S+nRGqOl8sg=
Subject key identifier:   82:73:99:8C:DD:17:45:C5:95:F0:00:AA:CF:04:10:EC:45:2C:D5:EA
Authority key identifier: 31:F5:04:19:EF:19:B0:FD:A6:1B:66:39:0C:12:EE:AF:6E:CB:E7:41
Certificate issuer:       /CN=A9186584/serialNumber=31F50419EF19B0FDA61B66390C12EEAF6ECBE741
Certificate serial:       0868
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfUEGe8ZsP2mG2Y5DBLur27L50E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186584/53F0FEE0D66E11EAB7F33534C4F9AE02/MfUEGe8ZsP2mG2Y5DBLur27L50E.mft
Manifest number:          0860
Signing time:             Sat 18 Oct 2025 21:48:00 +0000
Manifest this update:     Sat 18 Oct 2025 21:47:59 +0000
Manifest next update:     Sat 25 Oct 2025 21:47:59 +0000
Files and hashes:         1: MfUEGe8ZsP2mG2Y5DBLur27L50E.crl (hash: RixP+eWmZp8AIE6merPAn0R80GfbAbxbiFtQmp16F8g=)
                          2: 1F820766D66F11EAB2766134C4F9AE02.roa (hash: FxDMGItivgHcpDIQVI/wEfT2xKykaCPSfnkqAOljfEM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186584/53F0FEE0D66E11EAB7F33534C4F9AE02/MfUEGe8ZsP2mG2Y5DBLur27L50E.crl
                          rsync://rpki.apnic.net/member_repository/A9186584/53F0FEE0D66E11EAB7F33534C4F9AE02/MfUEGe8ZsP2mG2Y5DBLur27L50E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfUEGe8ZsP2mG2Y5DBLur27L50E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 21:47:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2152 (0x868)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186584, serialNumber=31F50419EF19B0FDA61B66390C12EEAF6ECBE741
        Validity
            Not Before: Oct 18 21:47:59 2025 GMT
            Not After : Oct 25 21:47:59 2025 GMT
        Subject: CN=68f40b0f-566c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e8:57:d6:c7:f1:5f:6e:9f:28:3e:97:20:09:
                    0e:97:1e:22:89:ad:f9:cb:88:5b:6a:46:07:71:d6:
                    d9:86:c0:be:f9:9b:1d:60:73:74:b8:a2:c2:3c:38:
                    9b:2a:5f:df:3c:df:a5:a2:4b:d5:13:6f:71:f5:bf:
                    43:3b:ad:2c:7c:71:da:cc:95:a7:6e:4c:58:18:c7:
                    c8:59:0d:38:b9:be:50:f4:67:e8:0b:45:c3:0c:22:
                    eb:c9:4b:71:87:ed:2c:5d:92:3b:e6:88:8c:eb:ca:
                    a4:0e:66:73:82:39:7e:0e:63:e1:e6:94:27:d9:46:
                    53:d8:bf:f8:6f:59:7e:ec:64:fd:9d:c8:8b:7b:0d:
                    a5:ed:f9:b7:3f:74:61:0e:ad:be:4e:2b:19:4a:96:
                    44:4f:41:2a:cc:64:01:ab:6c:a9:66:f3:62:bd:c5:
                    dc:ef:1e:9a:67:12:3a:5b:21:e0:a0:e5:54:cd:63:
                    ff:fb:c9:b2:75:be:92:af:f3:42:6e:ea:46:fc:53:
                    4d:34:27:8e:fc:12:86:f5:84:29:0a:fe:4b:d3:f7:
                    be:bc:f9:d4:67:5f:12:71:20:ff:0f:eb:86:6d:b5:
                    65:d7:90:9e:6c:35:98:ee:b5:80:b0:4f:15:6c:18:
                    8c:e7:c3:98:21:d6:8c:d3:c4:58:f2:a5:af:82:d0:
                    c0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:73:99:8C:DD:17:45:C5:95:F0:00:AA:CF:04:10:EC:45:2C:D5:EA
            X509v3 Authority Key Identifier:
                keyid:31:F5:04:19:EF:19:B0:FD:A6:1B:66:39:0C:12:EE:AF:6E:CB:E7:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186584/53F0FEE0D66E11EAB7F33534C4F9AE02/MfUEGe8ZsP2mG2Y5DBLur27L50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfUEGe8ZsP2mG2Y5DBLur27L50E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186584/53F0FEE0D66E11EAB7F33534C4F9AE02/MfUEGe8ZsP2mG2Y5DBLur27L50E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:ff:ac:03:41:39:71:c6:a1:8b:d9:f9:95:30:a1:39:48:f9:
         18:bd:d2:9e:26:77:42:a2:4b:a6:78:a9:3f:73:e7:7f:ca:24:
         01:67:72:38:cb:c7:6a:f6:b4:dd:6d:1e:b6:7c:99:5b:c5:9c:
         7a:83:7a:3c:00:e8:5e:ab:21:43:b1:e7:36:f7:b6:f2:2a:b4:
         4f:74:a3:44:ba:91:6e:eb:88:7b:ac:ce:2e:76:b4:30:27:a5:
         13:ec:8f:c4:a4:99:d5:c6:e4:20:c6:6b:f7:e5:73:9d:1b:cf:
         e0:cf:ec:e7:77:44:8e:00:b8:dd:17:96:bb:f5:59:6c:41:b9:
         b6:f8:90:cf:5c:cc:1a:0d:73:a9:43:48:d2:b5:21:62:d6:c2:
         56:17:ba:c1:26:af:a2:8b:0e:18:cb:a6:ec:df:8a:6f:fa:79:
         f3:1e:1d:d3:35:48:60:85:8f:6b:47:b7:a8:e3:db:6d:ac:ac:
         d0:83:15:7e:07:64:db:94:d8:7c:76:93:e0:1a:2d:88:7d:91:
         73:1e:5b:66:f4:99:a8:8f:80:82:a8:fa:22:db:af:75:43:ca:
         f7:2f:54:f5:b0:21:42:fe:5c:e6:95:9e:5a:1a:63:78:08:5b:
         77:ee:9a:32:ba:66:f7:e0:e7:04:71:8d:4c:20:d9:7a:4f:81:
         d0:37:64:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:31:51 2025 by rpki-client