Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.mft
File:                     W71m6GM06ZgX4sbVvOt9rQIPyoo.mft (raw, json)
Hash identifier:          FFA4On4EI5Dj3LTybHQQJJ4KLNwzwLjsHGQaJmI19tU=
Subject key identifier:   EF:09:3B:23:95:7E:89:34:20:0E:7D:89:77:B4:95:51:C6:84:BF:4C
Authority key identifier: 5B:BD:66:E8:63:34:E9:98:17:E2:C6:D5:BC:EB:7D:AD:02:0F:CA:8A
Certificate issuer:       /CN=A918E80E/serialNumber=5BBD66E86334E99817E2C6D5BCEB7DAD020FCA8A
Certificate serial:       0924
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W71m6GM06ZgX4sbVvOt9rQIPyoo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.mft
Manifest number:          0917
Signing time:             Sat 18 Oct 2025 21:23:12 +0000
Manifest this update:     Sat 18 Oct 2025 21:23:11 +0000
Manifest next update:     Sat 25 Oct 2025 21:23:11 +0000
Files and hashes:         1: W71m6GM06ZgX4sbVvOt9rQIPyoo.crl (hash: fI4vGh9A9146CSp9hGhX/CKk3fb4Xw7G3m+Pqu1Urtg=)
                          2: 16745A82B1CD11EA9A31DA7DC4F9AE02.roa (hash: glSctB67kcgRNgcA0b3/jW6A3plk8SZgtFK9qI9gKIo=)
                          3: 15C562A2B1CD11EA9A31DA7DC4F9AE02.roa (hash: NkR/nF+Vmt/Gcc86ZcEETph8N4g/HWKaL5fwvV3ReJM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.crl
                          rsync://rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W71m6GM06ZgX4sbVvOt9rQIPyoo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 21:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2340 (0x924)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E80E, serialNumber=5BBD66E86334E99817E2C6D5BCEB7DAD020FCA8A
        Validity
            Not Before: Oct 18 21:23:11 2025 GMT
            Not After : Oct 25 21:23:11 2025 GMT
        Subject: CN=68f4053f-a617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b2:b5:c1:c1:a7:81:7e:7c:32:f3:49:11:91:
                    2c:e3:f9:a7:77:67:b9:70:cb:4a:1d:ab:50:bd:4d:
                    a8:dd:df:1c:f3:f8:3e:4b:65:99:6d:33:07:d4:4a:
                    6a:a7:21:a6:b7:46:a5:92:34:44:ee:3a:79:2f:a8:
                    6c:e5:56:52:9e:aa:6c:36:87:7a:ad:60:62:f6:f7:
                    34:d4:91:18:66:90:9a:25:56:b1:dc:9f:0a:eb:7b:
                    cb:81:45:bc:06:8c:e7:f2:4d:9e:61:53:c9:ee:42:
                    72:e6:6b:f7:3f:0a:c9:c4:db:da:e8:a5:0e:39:5e:
                    ff:be:02:c2:a7:1d:27:da:e9:53:53:1c:dd:59:97:
                    88:27:6f:d6:1d:22:73:e3:c4:fc:03:da:8e:79:16:
                    b1:69:e7:a7:eb:4a:78:07:6a:d8:bc:c7:e7:9c:61:
                    87:29:21:6b:56:42:a4:6f:73:00:20:57:95:d2:8c:
                    1b:5f:42:e6:e2:c6:96:a6:ec:96:0f:85:4c:08:28:
                    dc:80:bf:d9:df:0d:42:ff:0f:ce:64:1f:b8:1d:2f:
                    1b:9f:f0:29:15:3f:7b:f7:4f:89:79:55:77:ed:4a:
                    d5:dc:8c:0b:f2:15:4a:f6:66:c6:5b:4e:a7:cf:44:
                    87:29:50:75:57:5a:3d:f8:1f:83:78:a6:52:dd:62:
                    24:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:09:3B:23:95:7E:89:34:20:0E:7D:89:77:B4:95:51:C6:84:BF:4C
            X509v3 Authority Key Identifier:
                keyid:5B:BD:66:E8:63:34:E9:98:17:E2:C6:D5:BC:EB:7D:AD:02:0F:CA:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W71m6GM06ZgX4sbVvOt9rQIPyoo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:77:3f:ef:39:8f:ac:30:05:b2:4d:38:5b:11:d3:ae:53:c3:
         b4:ef:08:45:3a:64:f1:2d:e8:31:66:76:44:7a:ca:e6:6d:68:
         03:37:97:d7:b7:bd:8e:e7:2c:9f:ce:4e:f3:e9:85:c3:7c:7a:
         e3:02:b0:c4:48:53:61:5b:33:71:cc:aa:00:6b:75:c7:b4:ec:
         bb:5c:5f:8e:93:e3:0e:a7:01:1e:55:91:67:27:63:8d:33:98:
         16:a8:56:9d:14:ec:a8:f5:5f:be:b4:0c:c3:1c:b4:7c:04:be:
         c4:cf:7d:41:10:74:05:29:10:4f:83:55:0c:96:59:65:79:60:
         5f:e2:b6:0b:25:d9:f2:d2:27:f5:ed:ee:94:eb:a9:45:d1:d3:
         1c:27:20:9f:f2:ee:15:a8:08:a5:90:db:33:43:c5:28:84:0f:
         0d:01:85:98:3f:f8:7f:e9:ae:d2:61:87:3a:fe:7e:88:9c:ec:
         1d:86:80:f1:a3:c1:56:59:55:9d:29:4b:de:79:89:12:6c:d0:
         98:29:e5:96:91:2c:ea:cb:be:35:63:bd:3a:a1:1d:1f:55:76:
         18:a9:98:22:9e:3e:39:8d:04:05:37:1b:b0:2b:4a:21:64:97:
         6d:26:98:ff:aa:8d:8e:11:0d:66:e0:dd:3a:1a:12:0a:bd:1d:
         a7:df:79:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:47:55 2025 by rpki-client