Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft
File:                     7Yy8VM2G8sH5LexryQnbxvpjTIE.mft (raw, json)
Hash identifier:          pNuZsP6/yiuRI9fm+IHKc/J+YW1GFrpgWT09QkKwk/A=
Subject key identifier:   0A:09:A9:89:31:E8:CC:F6:71:9E:E0:CD:11:49:6B:A9:9C:2B:B1:AF
Authority key identifier: ED:8C:BC:54:CD:86:F2:C1:F9:2D:EC:6B:C9:09:DB:C6:FA:63:4C:81
Certificate issuer:       /CN=A918A3E6/serialNumber=ED8CBC54CD86F2C1F92DEC6BC909DBC6FA634C81
Certificate serial:       082E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft
Manifest number:          0821
Signing time:             Sat 18 Oct 2025 22:05:55 +0000
Manifest this update:     Sat 18 Oct 2025 22:05:55 +0000
Manifest next update:     Sat 25 Oct 2025 22:05:55 +0000
Files and hashes:         1: 7Yy8VM2G8sH5LexryQnbxvpjTIE.crl (hash: kJDjRkqJG7JUotz/BXnw83bIZhkspT6cbhwPlGer1wE=)
                          2: C130A016889811EE8EB03D6EC4F9AE02.roa (hash: A+8vz2aU+wC552KBg2dFDTbTWJJd1ELKdd2raygWGUA=)
                          3: 7ABD27E4889811EEB99AD46DC4F9AE02.roa (hash: Vo3PCsdHmPC7RHzYgOW5sXRasLzQm3wjobK8wMgaD5g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.crl
                          rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 22:05:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2094 (0x82e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A3E6, serialNumber=ED8CBC54CD86F2C1F92DEC6BC909DBC6FA634C81
        Validity
            Not Before: Oct 18 22:05:55 2025 GMT
            Not After : Oct 25 22:05:55 2025 GMT
        Subject: CN=68f40f43-3022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a7:3c:7b:0c:b9:e2:7b:84:f1:3b:ec:38:63:
                    64:10:c5:29:f7:f6:b5:b5:01:50:b7:71:a0:7d:9b:
                    69:71:f1:4d:b5:26:cc:f9:79:04:da:ee:5c:76:6d:
                    f9:8d:fb:f1:2f:3d:4a:83:92:e5:0a:5e:40:ee:e7:
                    01:e2:4f:e9:30:07:20:eb:9b:ad:18:65:08:ed:85:
                    32:8b:38:0e:5f:23:b8:06:f9:99:46:51:10:26:43:
                    fb:f0:e0:d1:9c:32:81:52:6f:04:8a:ec:d4:79:db:
                    01:c8:44:32:d3:4a:5b:78:d2:a1:e3:72:9d:7f:a5:
                    d7:94:24:ec:e9:07:f5:57:d7:cd:36:5f:30:a0:d8:
                    de:b3:87:1e:35:39:45:fe:78:13:63:2a:55:98:37:
                    a7:47:67:cd:16:ae:01:12:c5:88:83:25:81:b1:8b:
                    86:a7:16:cd:fd:a6:79:f8:07:1e:c8:3b:eb:2c:61:
                    fa:9c:7b:ca:16:14:cb:c4:0f:1f:dd:c6:48:65:64:
                    9d:a8:0e:4e:5d:6a:0f:87:8a:8f:de:24:01:3f:bd:
                    e2:eb:bf:3e:61:0b:74:b9:e4:6c:10:f6:0f:aa:12:
                    7e:40:6c:6a:ed:76:7b:9d:d2:a4:c3:6f:15:bc:8a:
                    38:8e:32:6a:81:2c:1d:cd:7d:3a:86:8a:3b:c2:25:
                    6e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:09:A9:89:31:E8:CC:F6:71:9E:E0:CD:11:49:6B:A9:9C:2B:B1:AF
            X509v3 Authority Key Identifier:
                keyid:ED:8C:BC:54:CD:86:F2:C1:F9:2D:EC:6B:C9:09:DB:C6:FA:63:4C:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:1c:71:b8:13:b8:f6:66:ab:28:b6:10:6e:13:9d:0d:aa:ff:
         62:ea:3a:86:de:2e:65:50:a8:47:6a:e6:09:44:8e:06:a7:0d:
         07:77:20:c8:7f:ea:31:47:b9:fe:12:b9:ec:6c:f8:ad:a6:b5:
         b5:8a:28:5f:8f:a8:ee:9e:c9:c5:10:b3:7a:30:d9:89:f8:e1:
         76:48:8e:1c:b3:5f:19:23:15:64:68:cd:4e:27:8c:0b:df:dc:
         fc:14:c4:9a:b7:7f:aa:ed:d6:a8:aa:63:80:00:f8:e6:c2:2e:
         db:4f:28:42:3b:ad:fe:85:96:b2:0b:fd:ec:5c:2d:c0:55:09:
         35:7e:8d:2f:45:f0:35:7d:8a:65:9e:ec:65:07:90:28:b8:3a:
         cf:95:ff:36:d9:66:96:8c:bb:59:47:18:67:ab:d7:f8:7d:16:
         8c:45:4e:49:5a:6e:46:a5:65:b5:07:f2:99:73:bb:b1:cd:ed:
         99:24:63:cd:7f:c2:48:8c:3e:de:ee:df:14:52:63:a6:b8:15:
         7f:73:ba:4f:73:36:70:37:6c:07:f1:39:7c:15:32:01:f0:fa:
         a3:32:2e:85:18:64:ac:de:19:dd:f5:80:e2:a0:2a:5b:9b:d1:
         69:2f:3f:5f:37:d5:9d:48:70:56:60:f4:01:5a:fc:fe:b3:d0:
         15:0a:65:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:51:53 2025 by rpki-client