Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.mft
File:                     fLDlglEBxmVEPyz6sZ6E0ad5dZc.mft (raw, json)
Hash identifier:          wltxcdHbnUdeOPYn+CAhnPWfp0/mTr5SsPxwdAunewY=
Subject key identifier:   8A:42:6B:7F:83:2E:8D:7D:87:68:E4:07:BA:D7:DF:D6:BF:11:DE:69
Authority key identifier: 7C:B0:E5:82:51:01:C6:65:44:3F:2C:FA:B1:9E:84:D1:A7:79:75:97
Certificate issuer:       /CN=A9187E80/serialNumber=7CB0E5825101C665443F2CFAB19E84D1A7797597
Certificate serial:       067D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLDlglEBxmVEPyz6sZ6E0ad5dZc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.mft
Manifest number:          066C
Signing time:             Sun 19 Oct 2025 00:07:44 +0000
Manifest this update:     Sun 19 Oct 2025 00:07:43 +0000
Manifest next update:     Sun 26 Oct 2025 00:07:43 +0000
Files and hashes:         1: fLDlglEBxmVEPyz6sZ6E0ad5dZc.crl (hash: WjMh+lD1E1kQlDRd/WlQKQDzNuKTPTkG5dNADAh8U7g=)
                          2: 9F68F54067EF11F09584C157C4F9AE02.roa (hash: KQvzfFoZ8+mG1PwqX29gc/leNzp6B+eUlYg2ecJeyn4=)
                          3: 1B120B6E563B11EE9C93E334C4F9AE02.roa (hash: cAf8Pq1ZJkKmC+TeXFz0VwR4TUY4CLV62jWZ7ILw/68=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.crl
                          rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLDlglEBxmVEPyz6sZ6E0ad5dZc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 00:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1661 (0x67d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187E80, serialNumber=7CB0E5825101C665443F2CFAB19E84D1A7797597
        Validity
            Not Before: Oct 19 00:07:43 2025 GMT
            Not After : Oct 26 00:07:43 2025 GMT
        Subject: CN=68f42bcf-efa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:7f:d9:df:f1:3c:d5:c0:2c:59:49:68:de:4b:
                    3b:6d:b6:ce:fc:11:63:43:0f:56:83:bb:00:1e:32:
                    d9:e4:a3:48:bd:0f:ff:57:dc:1f:dd:64:b5:fe:f4:
                    5a:59:27:b8:85:ab:58:e8:21:c8:a8:7b:15:a2:33:
                    8c:ab:e9:a4:55:9d:0d:46:77:dc:24:39:8e:7f:a3:
                    94:aa:62:f9:d9:22:4b:36:b7:67:87:44:f8:31:73:
                    ea:14:16:a8:62:c7:ae:24:b8:b8:21:d2:76:4f:23:
                    24:81:aa:de:8a:e6:81:5c:0d:7c:8d:c6:a2:4c:ab:
                    76:95:2d:ff:68:c3:84:39:57:f2:1a:26:3f:e1:13:
                    b5:a8:d8:50:e5:9f:35:b7:63:98:c8:c1:4b:63:c1:
                    39:f9:ba:9a:50:0f:e8:1d:7b:d7:e8:c8:a3:bd:83:
                    c4:03:1d:30:e0:92:ac:2e:d3:50:bf:d7:b0:b4:cb:
                    9c:dc:7c:13:60:60:67:9e:31:eb:74:f8:fa:19:19:
                    df:82:ac:ba:13:de:7c:ca:74:03:ed:03:11:1c:b5:
                    d4:e5:e2:a0:39:25:ee:40:14:f1:a2:39:0e:26:4d:
                    1f:bf:4d:68:10:58:82:13:03:52:07:d8:d8:d7:05:
                    83:ac:e6:d4:f8:18:0b:e3:7a:0d:71:b7:6a:37:a1:
                    b4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:42:6B:7F:83:2E:8D:7D:87:68:E4:07:BA:D7:DF:D6:BF:11:DE:69
            X509v3 Authority Key Identifier:
                keyid:7C:B0:E5:82:51:01:C6:65:44:3F:2C:FA:B1:9E:84:D1:A7:79:75:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLDlglEBxmVEPyz6sZ6E0ad5dZc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:63:af:13:75:a1:28:9a:88:ab:80:d8:0d:02:ba:92:4a:61:
         1e:87:7e:2b:2b:e7:6b:14:7c:da:f7:b4:e6:bb:c2:54:30:51:
         58:19:71:51:93:9e:bc:dc:2e:3b:9a:db:4b:03:74:a7:2f:75:
         5d:25:a6:7b:23:07:9d:ac:b5:76:10:d7:71:3b:41:b3:a4:d6:
         19:1b:a3:dd:80:82:98:0c:08:8c:7b:11:7e:fb:ea:93:1e:8c:
         2e:cf:22:29:13:e8:a4:1a:35:74:d3:72:e2:25:25:0c:16:6b:
         d2:87:05:c0:5f:a4:10:35:09:ef:ff:f8:e9:30:7d:b8:e1:ff:
         0b:a9:85:9e:4e:d6:ee:98:af:f8:3a:2b:1f:52:0f:12:48:37:
         22:79:e5:f4:58:fd:84:c2:de:56:ab:16:01:23:26:0b:37:a2:
         3e:98:b7:f6:92:f7:a7:ea:0f:a7:df:69:89:9f:3e:3c:e3:c2:
         9f:bc:b3:1c:b1:5e:48:c0:04:a2:05:5f:95:d4:62:5d:36:27:
         f8:54:5c:b4:c4:11:f2:d0:80:00:98:b5:38:a4:88:08:98:08:
         3c:51:96:15:13:5a:23:16:02:4c:39:d4:e1:c8:cd:e6:cf:13:
         a4:29:31:e0:9f:da:73:5b:f0:a6:f0:07:1d:dc:e6:4d:e4:6f:
         2e:13:83:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:43:29 2025 by rpki-client