Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.mft
File:                     5wLFqnTYyWzI7vVhjk_-79UdN_k.mft (raw, json)
Hash identifier:          kuksPYP9NvWEGQWw7ahMpakzLxOSgar3xtvsn0TyK90=
Subject key identifier:   1B:CA:D9:46:E4:4E:ED:BB:12:7E:57:0F:4A:E2:19:58:BA:6A:1D:9F
Authority key identifier: E7:02:C5:AA:74:D8:C9:6C:C8:EE:F5:61:8E:4F:FE:EF:D5:1D:37:F9
Certificate issuer:       /CN=A918CA0E/serialNumber=E702C5AA74D8C96CC8EEF5618E4FFEEFD51D37F9
Certificate serial:       06B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5wLFqnTYyWzI7vVhjk_-79UdN_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.mft
Manifest number:          06AE
Signing time:             Sat 18 Oct 2025 23:40:29 +0000
Manifest this update:     Sat 18 Oct 2025 23:40:28 +0000
Manifest next update:     Sat 25 Oct 2025 23:40:28 +0000
Files and hashes:         1: 5wLFqnTYyWzI7vVhjk_-79UdN_k.crl (hash: 2maqedZNLBH7LU4DiNn1SQ5jlxZY46SOH9Xua+/1viM=)
                          2: 98C0AE7E808411EBA15C9251C4F9AE02.roa (hash: zc3Pnw0/OkkjpSp764b1FQtIhHt1L5fn5FeWiUPa5I4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.crl
                          rsync://rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5wLFqnTYyWzI7vVhjk_-79UdN_k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 23:40:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1716 (0x6b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918CA0E, serialNumber=E702C5AA74D8C96CC8EEF5618E4FFEEFD51D37F9
        Validity
            Not Before: Oct 18 23:40:28 2025 GMT
            Not After : Oct 25 23:40:28 2025 GMT
        Subject: CN=68f4256d-8b8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:55:ea:1a:3a:6d:23:79:af:0d:e9:97:2d:a3:
                    b3:36:9e:98:9f:8f:1d:ae:82:3d:98:6f:75:bc:97:
                    e5:d1:6f:fa:27:db:71:e1:f6:e1:f5:9c:07:7b:36:
                    18:60:1b:c1:8d:56:43:43:5b:86:3b:3a:c0:d4:54:
                    60:46:86:16:86:ca:86:a8:63:15:f2:de:42:86:21:
                    da:b8:13:cb:f7:b0:cc:92:af:e6:e7:16:45:5c:5f:
                    2a:a2:f2:93:98:cf:3c:00:d6:09:bc:c6:6e:4f:e3:
                    8a:fd:10:65:ac:87:26:c3:06:f7:bf:11:e6:5a:e4:
                    af:e5:de:7a:e4:d6:3b:f7:77:60:82:b1:72:9f:d3:
                    7f:b8:1a:b5:94:8b:08:d9:60:c5:b3:35:2d:64:74:
                    5a:7d:bf:e8:51:05:54:71:e9:03:ae:c3:af:d8:8a:
                    6e:00:48:0f:7c:8d:ac:a0:a1:8d:aa:c7:63:93:1d:
                    1b:df:12:42:9b:28:d7:ca:a9:2e:3a:e7:89:54:a9:
                    21:b4:cd:1a:f4:a1:71:2e:5b:24:2d:65:17:48:f2:
                    23:fd:89:dd:a0:74:f3:c6:2f:98:58:30:cd:87:2a:
                    b7:26:f7:26:be:d8:61:24:fa:6b:1b:74:ea:5b:5d:
                    88:0e:d1:23:c1:55:58:63:f3:35:4c:cf:c9:92:8f:
                    79:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:CA:D9:46:E4:4E:ED:BB:12:7E:57:0F:4A:E2:19:58:BA:6A:1D:9F
            X509v3 Authority Key Identifier:
                keyid:E7:02:C5:AA:74:D8:C9:6C:C8:EE:F5:61:8E:4F:FE:EF:D5:1D:37:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5wLFqnTYyWzI7vVhjk_-79UdN_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:9a:c3:77:6b:b0:7c:1e:b7:25:76:d8:52:16:8b:01:b0:96:
         56:6d:e6:34:b4:b5:eb:10:8e:d2:fe:bf:e6:06:65:02:a6:d9:
         79:30:5f:b3:5e:52:e0:c2:96:9d:f2:d0:07:17:8f:1a:1c:ee:
         5c:d9:68:73:8d:b7:97:3b:92:d8:e1:87:61:e7:2c:f9:6c:9b:
         15:dd:52:00:9d:c1:8b:54:94:06:14:70:81:86:9c:c3:30:f5:
         03:aa:ee:bf:a3:00:04:b4:63:db:4f:55:bb:04:f6:b9:48:19:
         b7:97:d7:01:c4:6a:0f:61:64:16:a5:97:92:21:0e:50:83:2c:
         42:d7:66:dd:ca:37:92:f0:dd:af:4e:9e:2f:8b:03:a5:9a:6e:
         b8:7b:59:26:5e:03:29:4b:66:9d:5b:1f:4d:b4:3d:da:3d:07:
         de:7a:9d:d1:ce:4e:a6:1b:ca:b8:6a:ff:74:db:32:79:94:f7:
         25:43:2f:ee:2f:16:f4:a2:af:86:4f:30:a6:41:29:0f:e8:fd:
         a3:ab:26:f9:d5:6a:f6:4e:53:08:77:72:fb:f4:2c:42:cd:af:
         da:11:1f:48:c1:7f:ef:2e:47:e1:24:3e:55:ca:43:e8:09:dd:
         74:34:da:0a:3d:8b:b4:33:2e:02:85:8b:ee:11:05:0c:35:f1:
         c1:3f:9e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:33:20 2025 by rpki-client