Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.mft
File:                     61aZQ1LrAeQOYMeKQ7lXrikO90U.mft (raw, json)
Hash identifier:          4F7Ta0Y+3WVPKKWSUTg6xT5zut0qLnT9TC8PYiZA2jQ=
Subject key identifier:   94:DD:F8:8D:0C:BD:0D:0E:F6:0E:BA:67:8B:69:8D:86:60:E8:8B:45
Authority key identifier: EB:56:99:43:52:EB:01:E4:0E:60:C7:8A:43:B9:57:AE:29:0E:F7:45
Certificate issuer:       /CN=A918CDEC/serialNumber=EB56994352EB01E40E60C78A43B957AE290EF745
Certificate serial:       0629
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61aZQ1LrAeQOYMeKQ7lXrikO90U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.mft
Manifest number:          0620
Signing time:             Sun 19 Oct 2025 00:23:49 +0000
Manifest this update:     Sun 19 Oct 2025 00:23:49 +0000
Manifest next update:     Sun 26 Oct 2025 00:23:49 +0000
Files and hashes:         1: 61aZQ1LrAeQOYMeKQ7lXrikO90U.crl (hash: HBhrVRCDBeg9OGbt2os5xIuq3aTku609kC3BclIYpac=)
                          2: 7EC2F352BAB711EB8648EE28C4F9AE02.roa (hash: PHugSXTi2dZxLQln/zegbseeVs2jPcn21YYpHl84zeo=)
                          3: 70253888478111EEAF9EB62EC4F9AE02.roa (hash: PqPcM9AknODy/bx8TAswPdKxA7piJbRMKnDsw8NBbDI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.crl
                          rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61aZQ1LrAeQOYMeKQ7lXrikO90U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 00:23:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1577 (0x629)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918CDEC, serialNumber=EB56994352EB01E40E60C78A43B957AE290EF745
        Validity
            Not Before: Oct 19 00:23:49 2025 GMT
            Not After : Oct 26 00:23:49 2025 GMT
        Subject: CN=68f42f95-9068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:04:01:c3:99:1b:00:b4:94:97:68:5b:56:7e:
                    53:1f:0a:59:03:5d:06:ea:d7:9b:af:9e:6f:fa:9a:
                    90:ee:9a:21:98:8b:80:8a:86:e7:9e:71:2c:06:68:
                    e3:64:fd:a7:b4:59:03:30:ca:ee:2f:d2:ba:0b:47:
                    b4:a6:91:b0:58:db:72:b4:8b:07:15:4d:af:9b:a7:
                    a6:7d:ed:8a:a0:e5:d0:f6:e0:10:c6:f9:b6:42:1e:
                    1e:ac:6a:20:d9:ac:5b:0b:f3:28:a5:db:4a:a2:fc:
                    74:21:d6:d5:c3:f2:72:52:59:88:72:80:f4:24:49:
                    30:ad:79:36:f9:42:3e:68:56:ae:4f:4a:3a:d5:ba:
                    17:43:a3:39:69:19:41:9a:d5:29:2d:5c:21:4f:2e:
                    18:0e:87:ec:58:8e:2b:ac:b8:d3:21:03:e9:86:79:
                    9d:7d:c7:44:cc:51:4e:47:c6:03:61:dc:f0:eb:c8:
                    1d:92:18:43:8b:45:72:26:e0:b7:4e:04:0e:c8:2f:
                    86:8c:ce:20:17:f2:8b:42:2d:75:63:27:5b:f0:4f:
                    0b:57:14:47:7c:9c:91:4d:f6:22:41:1c:6c:d0:37:
                    b0:9d:20:1a:e6:8f:79:07:9e:1a:2b:1e:39:08:ef:
                    70:2f:5d:6d:d5:88:dd:e0:d8:63:a2:39:c8:3e:13:
                    ba:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:DD:F8:8D:0C:BD:0D:0E:F6:0E:BA:67:8B:69:8D:86:60:E8:8B:45
            X509v3 Authority Key Identifier:
                keyid:EB:56:99:43:52:EB:01:E4:0E:60:C7:8A:43:B9:57:AE:29:0E:F7:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61aZQ1LrAeQOYMeKQ7lXrikO90U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:21:b0:63:da:bc:26:f8:f3:fb:95:13:47:17:ce:19:d2:7d:
         ea:94:d9:4b:a1:4f:46:f9:45:1d:23:4b:93:57:5f:00:4e:fb:
         eb:c8:c1:a6:08:a7:6d:27:1b:5a:8b:a9:15:0d:84:62:fc:20:
         47:7a:6a:76:38:b3:b2:ff:17:6f:5b:1e:36:99:23:dc:08:71:
         17:57:45:c1:82:8e:74:b3:d3:54:85:a3:d4:fc:b5:04:52:35:
         73:03:c6:ff:f0:5c:b3:2a:9f:3a:87:e0:ca:20:1d:b6:14:a5:
         a5:a1:7f:71:f5:32:03:9e:57:47:b9:96:b8:2f:30:ee:bc:ef:
         5b:a0:45:27:96:70:60:c9:8f:08:3e:44:d4:19:c0:87:ef:b6:
         0f:91:7d:68:58:9f:b6:9f:73:b9:64:75:b4:15:f6:eb:25:ce:
         56:94:b3:87:19:29:64:68:2e:fd:33:42:c1:d1:a6:50:73:1c:
         47:28:5a:3a:21:55:83:f5:2e:97:ff:f6:81:ff:61:6a:08:9f:
         d4:80:a8:a4:61:5a:4e:d3:da:86:29:ea:a6:4e:c5:cc:72:93:
         77:a4:68:18:63:53:93:9b:b5:23:73:e2:cf:b1:3a:f5:43:a3:
         dc:0a:99:0e:f3:ff:4e:2a:86:17:bc:3b:13:fe:ba:f0:10:9b:
         f3:c7:bd:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:44:53 2025 by rpki-client