Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft
File:                     4NVEW4CxgX9i88ZKqMj21-E64QM.mft (raw, json)
Hash identifier:          7rellARMXcYDsa/ERGeT89mgc4CrIQtXb9p5K6rcDXY=
Subject key identifier:   B9:ED:08:C1:C3:74:97:F6:AE:D8:F6:D7:05:01:7B:B7:FD:2C:0B:0B
Authority key identifier: E0:D5:44:5B:80:B1:81:7F:62:F3:C6:4A:A8:C8:F6:D7:E1:3A:E1:03
Certificate issuer:       /CN=A918E469/serialNumber=E0D5445B80B1817F62F3C64AA8C8F6D7E13AE103
Certificate serial:       01FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NVEW4CxgX9i88ZKqMj21-E64QM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft
Manifest number:          01F8
Signing time:             Sun 19 Oct 2025 04:47:18 +0000
Manifest this update:     Sun 19 Oct 2025 04:47:17 +0000
Manifest next update:     Sun 26 Oct 2025 04:47:17 +0000
Files and hashes:         1: 4NVEW4CxgX9i88ZKqMj21-E64QM.crl (hash: cUIlcsGTbQdaDL8Fv0cluJyIavHrjnTTthH+exXS4cU=)
                          2: D3CE9058A5AD11ED95DBC66FC4F9AE02.roa (hash: V89TVKMG86FWKeqAC80eNKWm9QeM+Xm489cfb+DFW7Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.crl
                          rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NVEW4CxgX9i88ZKqMj21-E64QM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 04:47:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 507 (0x1fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E469, serialNumber=E0D5445B80B1817F62F3C64AA8C8F6D7E13AE103
        Validity
            Not Before: Oct 19 04:47:17 2025 GMT
            Not After : Oct 26 04:47:17 2025 GMT
        Subject: CN=68f46d55-6957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c5:0c:49:c9:09:33:ec:d2:43:1a:e9:59:83:
                    ee:a0:72:d1:ac:b3:56:7a:38:0a:e1:96:e9:50:15:
                    fc:b2:01:24:a5:b3:25:b4:a5:f9:40:d7:e0:e2:60:
                    15:a7:bf:c4:45:e6:88:f9:1c:f1:ed:cb:29:84:14:
                    d9:a3:62:e8:a5:c0:93:44:45:f7:9e:65:0e:9c:b9:
                    0c:38:d5:2a:1e:3d:b4:25:2d:4b:1c:ef:7c:17:c5:
                    c6:88:ee:5c:a6:32:d4:a8:e5:eb:c8:af:04:f7:4f:
                    4f:29:64:57:3b:ed:51:dd:1a:7a:dd:7c:d0:ea:ee:
                    2c:b8:97:3c:79:9a:c8:e0:e0:f8:b2:c4:f3:45:48:
                    ab:30:35:da:2f:e2:ce:78:ee:fd:9c:67:96:ca:60:
                    86:77:a4:92:88:d3:ea:3a:85:db:77:cc:e5:15:2e:
                    75:b7:9d:23:53:2f:d0:65:1e:cf:b4:8c:4f:ea:44:
                    b5:1f:ae:b4:cd:66:72:04:b5:9d:5d:c2:55:0d:70:
                    08:aa:a3:fe:ce:6a:be:bc:08:e3:2e:b4:e7:91:f7:
                    c9:35:a5:2f:dc:3a:ea:26:1e:e4:e3:c0:fd:d1:5f:
                    83:8e:34:34:74:97:29:a4:ea:36:79:07:7a:e9:c1:
                    3f:3a:6a:42:27:50:30:3b:b9:bc:18:8e:32:31:3a:
                    1e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:ED:08:C1:C3:74:97:F6:AE:D8:F6:D7:05:01:7B:B7:FD:2C:0B:0B
            X509v3 Authority Key Identifier:
                keyid:E0:D5:44:5B:80:B1:81:7F:62:F3:C6:4A:A8:C8:F6:D7:E1:3A:E1:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NVEW4CxgX9i88ZKqMj21-E64QM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:51:42:8c:34:4a:84:a9:0f:bc:b9:00:6e:cf:fa:3e:a2:db:
         d9:74:a0:7d:16:52:fe:a3:e7:d2:87:87:a8:1f:8c:14:39:25:
         ad:8c:05:70:45:69:3b:55:85:e2:39:ad:12:d0:73:95:df:32:
         00:c4:fb:f2:77:fc:06:e4:33:8a:36:e1:4e:72:d8:c5:d2:75:
         52:a2:73:32:39:2b:ba:ad:87:ec:1f:44:c9:5d:63:ea:c0:d8:
         cd:27:c7:37:63:ee:73:49:1f:a0:42:67:af:34:37:e1:6d:25:
         4d:f5:9c:cb:ff:16:4e:fa:21:8d:96:24:27:97:c0:bd:e7:93:
         00:bc:f6:e0:00:04:e4:97:4b:ac:43:e5:4d:48:02:41:0e:0f:
         13:09:eb:13:73:14:d4:50:a4:40:f1:5f:33:b3:60:2a:20:b4:
         b3:2b:e0:0a:f8:8a:e2:b5:6f:e8:75:82:75:05:16:bc:71:93:
         67:25:47:57:43:61:34:9e:20:8a:da:bc:8a:73:d3:e6:09:58:
         89:33:22:70:d6:06:d2:bd:2a:8c:4d:f7:a5:14:e7:07:70:91:
         7c:46:9b:07:f3:ff:dc:36:68:e6:c5:cf:e4:47:c0:32:41:03:
         13:1d:66:aa:a8:67:8e:e4:e5:79:c2:16:fa:ad:d0:93:97:09:
         9b:71:b6:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:30:09 2025 by rpki-client