Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B591/D233C6462F7111EBB6ED3E22C4F9AE02/47jqsa6RbflaLVWue7e7eaULSuc.mft
File:                     47jqsa6RbflaLVWue7e7eaULSuc.mft (raw, json)
Hash identifier:          GzEsYKBiPI8QVWVT5Q984SfPdPcjS8IjkMC9Pc68aXY=
Subject key identifier:   FB:4A:66:F2:C6:5C:7E:1D:A1:C9:8C:CE:37:CF:1E:F8:2D:F8:DD:D9
Authority key identifier: E3:B8:EA:B1:AE:91:6D:F9:5A:2D:55:AE:7B:B7:BB:79:A5:0B:4A:E7
Certificate issuer:       /CN=A918B591/serialNumber=E3B8EAB1AE916DF95A2D55AE7BB7BB79A50B4AE7
Certificate serial:       0783
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47jqsa6RbflaLVWue7e7eaULSuc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B591/D233C6462F7111EBB6ED3E22C4F9AE02/47jqsa6RbflaLVWue7e7eaULSuc.mft
Manifest number:          077C
Signing time:             Sat 18 Oct 2025 22:53:56 +0000
Manifest this update:     Sat 18 Oct 2025 22:53:55 +0000
Manifest next update:     Sat 25 Oct 2025 22:53:55 +0000
Files and hashes:         1: 47jqsa6RbflaLVWue7e7eaULSuc.crl (hash: tV1FqV89qnr/n4fDaoKlQqSEgsaa1t2NoKvAdIEkriQ=)
                          2: D2E2417A2F7211EB80969C22C4F9AE02.roa (hash: 3UjfHQVfq3UO/YNci1JaGMI0IHPo5Ydd8fwr47Rzrio=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B591/D233C6462F7111EBB6ED3E22C4F9AE02/47jqsa6RbflaLVWue7e7eaULSuc.crl
                          rsync://rpki.apnic.net/member_repository/A918B591/D233C6462F7111EBB6ED3E22C4F9AE02/47jqsa6RbflaLVWue7e7eaULSuc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47jqsa6RbflaLVWue7e7eaULSuc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 22:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1923 (0x783)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B591, serialNumber=E3B8EAB1AE916DF95A2D55AE7BB7BB79A50B4AE7
        Validity
            Not Before: Oct 18 22:53:55 2025 GMT
            Not After : Oct 25 22:53:55 2025 GMT
        Subject: CN=68f41a83-c0d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:04:96:9e:cb:8a:4b:07:63:42:68:0e:2a:33:
                    f4:6c:84:82:75:7f:23:dd:7b:d0:ff:a8:db:d7:44:
                    22:23:e9:95:c6:c0:c6:74:b8:29:73:ec:54:4c:9c:
                    07:96:69:cb:7f:fd:0c:37:f0:29:97:1f:7a:8a:0c:
                    56:19:9c:c6:a3:e0:8d:a3:ca:87:5e:bb:84:35:af:
                    ff:d2:81:e1:7f:10:82:f8:c5:d8:0f:6a:31:b0:54:
                    22:43:09:93:06:4a:b4:b0:bb:13:8e:29:2a:1f:da:
                    33:3e:d4:87:28:6e:07:ac:f5:9a:ea:ad:be:e9:73:
                    4b:3c:20:81:ce:9f:76:2f:fb:b4:d3:33:4c:40:11:
                    99:93:25:91:30:39:c7:b6:d2:65:c9:a9:3c:2f:15:
                    2b:c9:71:12:6f:22:5a:c5:74:be:28:46:a2:4f:ac:
                    f6:73:52:c2:91:4d:ee:02:6d:75:7c:92:fd:04:65:
                    69:f2:49:b7:7c:54:83:10:62:ea:85:9d:e3:ae:71:
                    99:f5:8e:38:6a:32:9e:39:b6:a8:33:38:34:c0:ec:
                    41:b2:5b:32:df:cd:a7:4f:0e:ef:1f:af:67:75:65:
                    85:ba:a6:79:52:07:15:c8:04:93:b0:7d:4c:64:2f:
                    1c:2a:d0:16:9b:34:9f:3a:e6:19:34:43:1e:9d:5e:
                    3a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:4A:66:F2:C6:5C:7E:1D:A1:C9:8C:CE:37:CF:1E:F8:2D:F8:DD:D9
            X509v3 Authority Key Identifier:
                keyid:E3:B8:EA:B1:AE:91:6D:F9:5A:2D:55:AE:7B:B7:BB:79:A5:0B:4A:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B591/D233C6462F7111EBB6ED3E22C4F9AE02/47jqsa6RbflaLVWue7e7eaULSuc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47jqsa6RbflaLVWue7e7eaULSuc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B591/D233C6462F7111EBB6ED3E22C4F9AE02/47jqsa6RbflaLVWue7e7eaULSuc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:36:76:e0:9e:b6:1b:fc:f1:0b:b5:90:7b:e6:40:84:73:e0:
         34:14:07:c1:19:31:11:05:91:e2:27:c6:ea:98:56:80:78:d7:
         b7:71:fa:ba:e1:2b:d6:06:66:f9:24:08:bf:8d:38:68:55:37:
         02:f0:09:40:7f:19:0d:bb:6b:8d:fc:bc:29:2b:b1:f6:f2:42:
         fb:dd:f8:6f:1c:44:e8:a2:ae:9a:bd:36:9c:bf:26:f5:96:0e:
         0f:9f:ed:9d:9d:3d:03:97:1e:f1:7e:23:cd:55:97:a2:8b:4d:
         4c:f5:66:a4:60:9f:99:14:b0:89:d1:4e:31:cc:f5:cd:4e:e7:
         37:45:80:1a:73:5c:ab:da:76:0f:53:e3:d3:e5:4c:70:bc:ac:
         20:b3:df:2f:df:a1:25:b7:37:d5:f1:a1:42:62:cd:89:8a:bc:
         77:20:de:c1:1f:25:86:5f:80:b0:b7:11:19:b1:a8:78:30:63:
         11:eb:f0:e3:41:a7:b9:35:e7:20:58:d3:c6:82:c5:ba:a0:19:
         87:44:f9:53:3e:74:32:6d:5d:4f:84:b0:04:29:ce:eb:24:6a:
         af:62:50:22:03:da:60:97:ac:9a:51:4a:43:2f:3d:6b:58:19:
         42:c1:60:12:7f:5b:c2:ce:63:4a:25:f3:38:5e:64:49:38:c9:
         a1:a8:e1:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:25:13 2025 by rpki-client