Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft
File:                     CrbdJlFcU-zFsEYrTEddWn5aVTc.mft (raw, json)
Hash identifier:          7u1mkVcccBcTnOH2vK/u1Ur0CWKOZGNit8+WINuP5uM=
Subject key identifier:   4D:5A:D8:3D:E2:FE:9A:D8:4D:12:C8:F6:B9:E9:70:6A:A9:07:95:7F
Authority key identifier: 0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37
Certificate issuer:       /CN=A918E4B7/serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537
Certificate serial:       056A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft
Manifest number:          0541
Signing time:             Sun 19 Oct 2025 01:18:31 +0000
Manifest this update:     Sun 19 Oct 2025 01:18:31 +0000
Manifest next update:     Sun 26 Oct 2025 01:18:31 +0000
Files and hashes:         1: CrbdJlFcU-zFsEYrTEddWn5aVTc.crl (hash: YLPPkvos/KQuh1T0ImPhDUfhXiiPvMFkk/4/LBhBBlE=)
                          2: BAA1B454654411EFACBF7956C4F9AE02.roa (hash: XSuhAhi3kRB8kUY+l+Kw6bn9CYFf3Y2Di14tTGA1/Oo=)
                          3: 17A651BCA40E11EEAAB83671C4F9AE02.roa (hash: /zpbbyMm2w5Xcql5zfUtoN8iPAyG5aFUqVMvzNCSPuM=)
                          4: 16D4DB82A40E11EEAAB83671C4F9AE02.roa (hash: hn+qGaZCtkUKYopOyzVnHKxTxBxzaX/N9RY/bypGInA=)
                          5: 1ED4125C50C111EFA64C2437C4F9AE02.roa (hash: 9/ZL4wqQ8ewDEJQ51uhQKwNXm0lUHqlJiXvD1GBeNxo=)
                          6: B9DEB77E654411EFACBF7956C4F9AE02.roa (hash: rrXHgzUdzEuReffPDCPuY00l4dzYtSiphjTni14sFbs=)
                          7: ED8B1602A0D711EFB982AD62C4F9AE02.roa (hash: 9x2G7s9XnkzB/aoRrwX0fPhCy+k2H2dG9FDGRVFamnQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl
                          rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 01:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1386 (0x56a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E4B7, serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537
        Validity
            Not Before: Oct 19 01:18:31 2025 GMT
            Not After : Oct 26 01:18:31 2025 GMT
        Subject: CN=68f43c67-4a76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:66:b9:94:93:44:cc:72:46:5b:3a:21:3d:25:
                    b4:1f:ac:c8:69:2a:0a:3d:66:1d:41:15:45:61:15:
                    ea:97:7e:7c:c4:88:2b:a9:b9:86:86:c9:ba:4d:82:
                    01:ed:63:b2:8e:da:7f:de:e0:44:c8:2e:ed:3e:e3:
                    2e:2a:ce:1d:32:3a:f9:1e:6f:67:de:0a:6b:91:e5:
                    fc:59:cb:89:06:7a:b6:c9:c7:17:84:aa:f0:28:de:
                    eb:98:b9:68:5d:ea:b7:8a:72:47:68:a2:e7:47:c2:
                    16:fa:bd:37:2a:ed:8a:63:2f:9e:d2:b0:c7:2b:50:
                    26:91:5a:21:b8:77:5d:3a:81:a9:b1:22:8d:24:42:
                    24:07:8b:c1:fb:42:37:a6:c8:6e:a4:72:18:b8:6d:
                    ff:be:49:ba:7e:22:23:46:dd:33:1d:73:4c:2c:e3:
                    6a:fa:d8:39:c9:ad:c4:72:05:3d:48:10:f1:b3:9a:
                    44:8f:05:31:0d:12:6f:08:23:9d:4a:f0:cb:db:5d:
                    2a:c4:12:0a:88:9e:25:a9:50:2f:1a:98:82:a7:65:
                    57:8a:92:07:67:da:57:bf:dc:c8:8e:e8:e4:83:1e:
                    d7:94:ef:08:3e:d7:68:67:4a:85:2b:99:6d:a4:65:
                    d8:57:9e:c0:97:3a:41:2a:8f:08:36:f9:cb:84:fd:
                    ec:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:5A:D8:3D:E2:FE:9A:D8:4D:12:C8:F6:B9:E9:70:6A:A9:07:95:7F
            X509v3 Authority Key Identifier:
                keyid:0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:53:0d:6b:ee:3e:66:47:8e:25:de:d8:86:e7:0d:78:92:71:
         fb:81:d3:98:c3:05:52:c9:88:95:db:62:fa:20:dc:b2:be:4f:
         fa:95:57:6c:f1:cd:e5:35:f4:b2:8d:e5:94:32:43:a7:43:f5:
         f0:f2:30:67:ff:7d:42:6d:39:c3:0c:73:c1:ed:d4:a5:5c:06:
         42:6f:4b:77:2a:3a:c7:2c:95:91:28:8e:65:c3:7e:5e:9e:cf:
         d7:65:57:a3:4f:5d:43:8c:5f:bb:46:d6:61:51:b5:6b:98:e1:
         6f:43:02:cd:69:20:d5:a1:84:28:ce:64:a8:4f:ba:bb:3a:2f:
         ae:2c:9f:c9:5e:f9:75:d6:04:82:9f:aa:b9:e6:f3:b2:52:b9:
         d9:67:c8:b1:6c:61:17:04:6f:27:47:64:55:d5:4f:df:8b:7f:
         3f:90:62:23:59:82:fc:08:90:42:a3:70:1f:10:b9:a2:4e:1d:
         cd:1c:9d:a4:9b:59:1c:09:01:94:05:70:07:6f:8d:17:b8:42:
         2a:a6:7c:65:4e:b0:cc:7b:88:69:fd:71:38:cc:26:6f:78:2a:
         fa:c3:cd:d8:4c:b7:4f:26:01:2a:34:26:c3:83:ea:21:dd:5b:
         32:20:0f:90:94:e8:f7:81:d6:2b:f0:4f:83:f1:0a:97:d1:1e:
         8a:b6:d4:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:40:51 2025 by rpki-client