Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C3B7/1E6777AA932511EEBE987F60C4F9AE02/j6aYZRx6wk24J9I50PyLLI2jZrg.mft
File:                     j6aYZRx6wk24J9I50PyLLI2jZrg.mft (raw, json)
Hash identifier:          bJGRGfeuxZLF6JXpygQkVAFO5roZvYvHjVhvFi/4hAA=
Subject key identifier:   24:62:4A:49:17:4D:25:1F:5B:72:92:2F:22:92:23:B3:5F:D2:52:EF
Authority key identifier: 8F:A6:98:65:1C:7A:C2:4D:B8:27:D2:39:D0:FC:8B:2C:8D:A3:66:B8
Certificate issuer:       /CN=A918C3B7/serialNumber=8FA698651C7AC24DB827D239D0FC8B2C8DA366B8
Certificate serial:       0161
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6aYZRx6wk24J9I50PyLLI2jZrg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C3B7/1E6777AA932511EEBE987F60C4F9AE02/j6aYZRx6wk24J9I50PyLLI2jZrg.mft
Manifest number:          015F
Signing time:             Sun 19 Oct 2025 06:44:36 +0000
Manifest this update:     Sun 19 Oct 2025 06:44:36 +0000
Manifest next update:     Sun 26 Oct 2025 06:44:36 +0000
Files and hashes:         1: j6aYZRx6wk24J9I50PyLLI2jZrg.crl (hash: ErBof+q+W3IWHx9O9YVRWxLXmwtc0E6dUU8XJlBGvcs=)
                          2: 756EDE70611611EF83B51C41C4F9AE02.roa (hash: fv6RLao5liFr7afB3PhUjumYqWdJXB/03IwWC/f2YMo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C3B7/1E6777AA932511EEBE987F60C4F9AE02/j6aYZRx6wk24J9I50PyLLI2jZrg.crl
                          rsync://rpki.apnic.net/member_repository/A918C3B7/1E6777AA932511EEBE987F60C4F9AE02/j6aYZRx6wk24J9I50PyLLI2jZrg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6aYZRx6wk24J9I50PyLLI2jZrg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 06:44:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 353 (0x161)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C3B7, serialNumber=8FA698651C7AC24DB827D239D0FC8B2C8DA366B8
        Validity
            Not Before: Oct 19 06:44:36 2025 GMT
            Not After : Oct 26 06:44:36 2025 GMT
        Subject: CN=68f488d4-c715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3f:57:fb:13:08:26:89:19:8c:04:22:1f:2d:
                    9e:52:49:0d:14:70:af:3f:5f:68:12:d3:b4:2e:ee:
                    be:97:75:0a:02:6c:a6:73:65:37:6a:d9:93:74:b3:
                    22:f0:f4:27:a1:d0:f8:f3:95:1b:3c:43:88:80:be:
                    8f:ec:0f:24:44:a8:9d:44:34:1c:53:54:bd:53:ba:
                    6f:e3:92:be:2b:af:31:6d:e1:12:60:fd:f5:68:1b:
                    52:69:7f:43:c8:37:fe:a1:da:54:3b:5c:87:b6:5b:
                    af:be:75:90:9a:88:a7:83:ce:1d:4b:a3:94:66:48:
                    c4:2b:a8:a1:b2:47:db:7a:d3:28:bd:f5:08:bf:e3:
                    cb:66:36:f2:f1:49:dd:fa:28:c3:16:e3:2e:63:67:
                    40:3f:05:b4:92:4c:5d:b6:25:e9:b8:94:1c:bb:6f:
                    2a:f4:9d:8c:85:0c:e5:49:45:61:86:f5:10:2a:23:
                    de:e7:2d:39:49:8d:87:b4:7e:b8:ff:c1:4a:5c:7b:
                    42:f5:00:38:82:b9:f1:7d:fb:37:37:71:c9:78:98:
                    81:05:49:cf:7c:7f:9a:26:b9:1a:72:75:07:18:36:
                    67:d9:4e:b0:ef:ba:3b:2a:0a:b0:5b:a1:d2:1d:eb:
                    16:45:a6:a0:8b:c5:d4:76:96:91:b3:89:05:15:bd:
                    b8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:62:4A:49:17:4D:25:1F:5B:72:92:2F:22:92:23:B3:5F:D2:52:EF
            X509v3 Authority Key Identifier:
                keyid:8F:A6:98:65:1C:7A:C2:4D:B8:27:D2:39:D0:FC:8B:2C:8D:A3:66:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C3B7/1E6777AA932511EEBE987F60C4F9AE02/j6aYZRx6wk24J9I50PyLLI2jZrg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6aYZRx6wk24J9I50PyLLI2jZrg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C3B7/1E6777AA932511EEBE987F60C4F9AE02/j6aYZRx6wk24J9I50PyLLI2jZrg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:ce:8f:f2:d8:0b:63:cd:e3:9e:19:4c:7a:ad:81:19:c1:ed:
         a8:d8:9d:b5:0f:eb:e4:be:9b:81:a0:11:2f:f3:63:4c:eb:b5:
         47:98:40:d1:56:9f:20:4f:b6:28:90:8a:a3:8d:08:17:6e:e8:
         31:89:e8:38:2e:cd:4d:8d:34:04:62:18:64:4e:cf:6e:ae:12:
         03:72:a7:40:63:d9:3f:70:90:59:e8:72:07:fc:26:4d:4a:c9:
         a4:e6:16:89:72:46:b1:ad:3d:a9:b7:c7:bd:6e:3a:6e:79:a5:
         e9:52:43:8e:40:8e:b1:a8:f2:a4:d0:70:2d:a9:c6:c8:04:02:
         01:d1:92:92:26:41:76:d0:fb:ed:bc:6e:b9:5e:57:7e:64:ff:
         35:23:92:ce:f6:cf:87:c6:42:ca:d4:5e:4b:b4:25:d0:79:d7:
         8a:7d:d4:24:33:3b:97:3f:ab:f7:d7:b8:5f:bb:38:9f:bf:5f:
         f0:4c:e4:ce:e6:71:57:69:3b:04:52:5d:19:bc:9d:bf:8f:2f:
         19:c4:a8:ec:09:6d:a4:f2:ab:db:b1:53:7c:bd:44:7f:39:65:
         cf:67:a6:e6:7b:a9:54:7f:39:55:45:aa:16:4c:b8:b6:b5:db:
         a2:e9:1e:bb:1a:33:79:44:21:c8:cb:5e:ab:76:44:6b:b6:df:
         3f:4d:1b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:49:32 2025 by rpki-client