Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft
File:                     XPuiiRbqwHsjWQlIVdieFqCBS6w.mft (raw, json)
Hash identifier:          CqYY5bf2tAwPC0pWXrF6TzKRAC7ayKbPt3oXxovDN0Q=
Subject key identifier:   38:5F:E6:2E:47:7F:73:8B:76:93:82:8D:DF:E2:6B:1B:6F:4D:1F:63
Authority key identifier: 5C:FB:A2:89:16:EA:C0:7B:23:59:09:48:55:D8:9E:16:A0:81:4B:AC
Certificate issuer:       /CN=A918E843/serialNumber=5CFBA28916EAC07B2359094855D89E16A0814BAC
Certificate serial:       0B8F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPuiiRbqwHsjWQlIVdieFqCBS6w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft
Manifest number:          0B80
Signing time:             Sat 18 Oct 2025 19:54:13 +0000
Manifest this update:     Sat 18 Oct 2025 19:54:13 +0000
Manifest next update:     Sat 25 Oct 2025 19:54:13 +0000
Files and hashes:         1: XPuiiRbqwHsjWQlIVdieFqCBS6w.crl (hash: FSFUDsfN8PhRmPDzWDx+LrvVMUD+6ChNNSqIgwSSPCY=)
                          2: 3EA26CE6396011EABC88BD55C4F9AE02.roa (hash: z+/TKQAcf6VE8NuqmnIeG+tuqaOl0QxpRj3ReMN+jL0=)
                          3: 01553E10396311EAB24C5A5FC4F9AE02.roa (hash: Jhq/OLItI0gDhEIBYho+XP9iO0Y/7Srvb27SpQGuffU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.crl
                          rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPuiiRbqwHsjWQlIVdieFqCBS6w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 19:54:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2959 (0xb8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E843, serialNumber=5CFBA28916EAC07B2359094855D89E16A0814BAC
        Validity
            Not Before: Oct 18 19:54:13 2025 GMT
            Not After : Oct 25 19:54:13 2025 GMT
        Subject: CN=68f3f065-63dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c5:ee:d7:45:dc:18:61:0f:db:bf:4e:c0:05:
                    3a:58:c2:87:1f:6f:ed:16:a0:43:ac:5c:11:79:a4:
                    a6:ca:21:d5:41:96:ab:66:97:71:fb:d6:6d:fd:78:
                    2b:95:1f:6d:65:0e:a7:b9:f8:f5:aa:e0:83:c1:53:
                    cd:ea:aa:cb:2c:22:83:1e:67:f9:93:c4:a9:09:54:
                    22:20:e3:4e:50:18:63:cb:f9:09:95:6f:e9:13:55:
                    06:a8:ba:8c:8a:c2:3d:3e:3b:be:9b:9e:fc:91:3c:
                    f2:9a:e3:63:8d:34:62:04:9c:50:c2:33:85:bc:5e:
                    b4:3a:b6:cb:6b:dc:7a:06:fd:d3:39:64:39:b9:c0:
                    68:a4:b6:bc:42:af:7f:3e:0e:65:b8:3a:c4:ad:88:
                    7a:07:1f:83:c3:23:cc:62:90:d5:d3:7e:09:ab:fa:
                    06:09:fc:04:50:07:63:be:a1:71:2e:67:88:e1:9b:
                    8c:e7:05:12:a6:c2:e4:71:0d:21:72:fa:fd:62:17:
                    bc:f0:3b:42:4b:70:c4:f2:9b:70:65:4f:cd:c1:14:
                    54:81:af:bb:55:4b:34:ee:db:9a:8e:5a:fe:37:6a:
                    0b:ed:de:4c:25:40:b2:ce:e6:c8:40:0b:1f:cc:e8:
                    50:33:63:c5:35:65:7e:91:8e:ca:19:e9:82:91:08:
                    19:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:5F:E6:2E:47:7F:73:8B:76:93:82:8D:DF:E2:6B:1B:6F:4D:1F:63
            X509v3 Authority Key Identifier:
                keyid:5C:FB:A2:89:16:EA:C0:7B:23:59:09:48:55:D8:9E:16:A0:81:4B:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPuiiRbqwHsjWQlIVdieFqCBS6w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e1:17:07:ba:27:69:16:57:9b:de:77:1d:81:93:bd:d6:49:fe:
         c3:81:7d:10:1b:f6:31:89:78:55:28:4f:94:cc:7f:a1:3d:21:
         09:e3:6b:01:57:28:23:4d:c7:65:9d:3b:80:b9:48:97:2e:2d:
         e3:28:64:e0:b4:00:f9:8f:a6:2d:e9:f6:22:a8:51:63:4b:68:
         7a:68:37:79:0a:fc:3c:0f:6b:3f:cb:52:a5:df:3c:36:e9:79:
         27:07:84:7f:82:50:e0:42:08:2a:4a:dc:ec:19:53:2f:ca:fc:
         df:07:c7:31:f3:f8:57:be:23:4a:56:35:a7:d1:01:7f:6f:33:
         7d:a7:5a:a3:b0:37:82:8a:87:2f:07:15:e9:06:7f:4d:9e:53:
         5b:f1:8d:5a:38:9e:47:f5:2f:9a:bb:d5:1a:37:34:b2:5a:23:
         f3:79:de:e5:97:55:83:34:0a:32:3c:50:c4:5c:24:9f:d1:65:
         af:97:d3:3d:70:bc:16:fc:5c:63:41:ce:b1:34:b1:23:e9:f2:
         f8:29:a3:a4:00:32:4e:b5:c9:c5:e6:1c:9c:14:9c:26:b2:cf:
         f8:42:17:4d:a3:73:35:d8:87:c3:fe:1d:67:d1:ba:92:6f:82:
         45:07:b8:3e:ed:0f:2f:a9:6a:96:c7:92:6c:c8:be:ff:b4:b5:
         ba:81:e3:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:47:20 2025 by rpki-client