Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft
File:                     1cjx3JTTw0gdbGlTaVakpSjV7cM.mft (raw, json)
Hash identifier:          V5IrciGv40bGSiauqMZiuUqFCFGb/YCkkb/ldFEjFmg=
Subject key identifier:   59:45:E6:16:CA:64:A8:11:61:CD:C3:BD:45:F4:DD:19:E1:DC:AD:7F
Authority key identifier: D5:C8:F1:DC:94:D3:C3:48:1D:6C:69:53:69:56:A4:A5:28:D5:ED:C3
Certificate issuer:       /CN=A918AA4D/serialNumber=D5C8F1DC94D3C3481D6C69536956A4A528D5EDC3
Certificate serial:       3099
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cjx3JTTw0gdbGlTaVakpSjV7cM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft
Manifest number:          3068
Signing time:             Sat 18 Oct 2025 15:38:45 +0000
Manifest this update:     Sat 18 Oct 2025 15:38:45 +0000
Manifest next update:     Sat 25 Oct 2025 15:38:45 +0000
Files and hashes:         1: 1cjx3JTTw0gdbGlTaVakpSjV7cM.crl (hash: y1OhOttYuetsyY0VTiD9v75Gos2X4am1CIP8g1u3GvE=)
                          2: 517E7D1AB0EC11E5A6934B42C4F9AE02.roa (hash: 04Ktf7aHmtk6w5MhGrvObQ/LJOb4uBLGbSar+Thl/fM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.crl
                          rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cjx3JTTw0gdbGlTaVakpSjV7cM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 15:38:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12441 (0x3099)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918AA4D, serialNumber=D5C8F1DC94D3C3481D6C69536956A4A528D5EDC3
        Validity
            Not Before: Oct 18 15:38:45 2025 GMT
            Not After : Oct 25 15:38:45 2025 GMT
        Subject: CN=68f3b485-e702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f0:11:f6:7a:a7:49:ea:7f:04:d9:18:49:82:
                    da:f3:93:1d:ef:2e:03:6b:93:8e:ce:a7:8d:9f:75:
                    9b:57:c1:a6:db:34:04:24:23:52:73:e2:4b:be:f3:
                    0c:a8:a1:cc:d6:7b:df:10:95:71:77:29:29:7c:87:
                    a0:1e:71:be:dc:e7:34:18:2d:e9:f8:7c:75:4e:b4:
                    65:38:34:ba:2d:5d:6f:8e:3a:df:f7:cd:0e:33:cb:
                    f9:66:88:e9:ce:7c:0a:4d:53:24:28:5d:6d:f8:3c:
                    84:af:2d:e7:d3:36:63:f7:b1:68:2a:55:e8:9d:87:
                    25:9c:f9:f4:c5:9a:89:20:04:73:fc:9c:82:b4:48:
                    15:88:62:bc:a2:b1:a2:be:2f:c1:3e:15:07:26:fd:
                    a9:b1:42:35:68:e9:5c:4d:95:12:6d:49:db:39:27:
                    1b:86:3d:0e:13:8a:51:aa:a1:8c:23:01:32:72:d9:
                    79:de:c5:f0:40:66:53:d1:b0:7c:06:8b:40:80:47:
                    cb:d5:c5:1b:83:d8:7e:e2:b8:96:c9:24:31:b8:36:
                    ed:ed:db:94:fd:e4:ce:04:28:f8:b6:58:ff:db:c2:
                    d9:6f:26:0c:aa:9d:b5:5d:1d:c6:6b:0e:d6:b5:26:
                    3c:a7:26:ee:5c:c4:7a:2a:f4:ed:2d:9c:49:9a:ba:
                    91:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:45:E6:16:CA:64:A8:11:61:CD:C3:BD:45:F4:DD:19:E1:DC:AD:7F
            X509v3 Authority Key Identifier:
                keyid:D5:C8:F1:DC:94:D3:C3:48:1D:6C:69:53:69:56:A4:A5:28:D5:ED:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cjx3JTTw0gdbGlTaVakpSjV7cM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:52:1e:76:c3:e0:f3:a3:79:37:65:fc:fe:2c:48:21:ca:45:
         de:d5:02:2c:b7:1c:a8:c6:11:5d:7e:07:4d:7d:eb:ce:9c:88:
         57:ad:73:29:5f:ab:34:f3:f6:df:9b:f8:75:49:4c:a0:5d:8b:
         03:ad:9e:4b:e6:4a:fe:18:f5:e4:93:16:75:8a:ce:f1:46:ff:
         a9:01:02:56:f9:d8:83:0c:79:4f:08:5c:a0:e4:62:34:74:ec:
         88:49:8b:16:2b:2b:fd:ee:e9:87:c2:5a:cd:26:c9:d4:44:da:
         fd:28:61:f1:4f:c4:74:d5:f8:92:a9:64:f1:cb:9a:fe:82:8e:
         3c:92:95:52:b3:4e:56:1b:33:ae:8c:d5:99:f0:70:18:b3:3d:
         6b:9a:13:3f:c4:51:93:6d:80:84:9c:ac:20:b5:c6:27:72:fe:
         01:16:cf:31:57:19:cf:0f:c7:fa:46:d2:d4:48:ea:93:30:48:
         96:7b:d3:16:b9:b4:b6:33:a5:c8:4e:e2:cb:a0:02:35:08:74:
         99:80:f1:05:1c:26:76:23:a6:f7:2e:66:dd:39:3c:a0:70:c0:
         ed:d1:57:84:08:33:1c:87:0d:d7:76:50:d5:dc:1f:b9:83:ec:
         5d:f5:dc:aa:0c:f7:5e:c4:be:a7:19:ed:85:64:ad:43:5b:74:
         30:75:9e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:42:23 2025 by rpki-client