Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FEF6/1986B9D832FE11EB85BAD157C4F9AE02/sXBCw3IXHA9BRv78RNHbqlIjhxs.mft
File:                     sXBCw3IXHA9BRv78RNHbqlIjhxs.mft (raw, json)
Hash identifier:          1sE6QNp2xuJbP1DICXPHVOqVVbQTMbwVQzGu0wEcKnA=
Subject key identifier:   39:1E:26:4D:62:7D:25:3D:F9:F7:32:A8:8E:7F:F8:3E:D4:0F:75:DF
Authority key identifier: B1:70:42:C3:72:17:1C:0F:41:46:FE:FC:44:D1:DB:AA:52:23:87:1B
Certificate issuer:       /CN=A918FEF6/serialNumber=B17042C372171C0F4146FEFC44D1DBAA5223871B
Certificate serial:       077A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXBCw3IXHA9BRv78RNHbqlIjhxs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FEF6/1986B9D832FE11EB85BAD157C4F9AE02/sXBCw3IXHA9BRv78RNHbqlIjhxs.mft
Manifest number:          0774
Signing time:             Sat 18 Oct 2025 22:56:08 +0000
Manifest this update:     Sat 18 Oct 2025 22:56:07 +0000
Manifest next update:     Sat 25 Oct 2025 22:56:07 +0000
Files and hashes:         1: sXBCw3IXHA9BRv78RNHbqlIjhxs.crl (hash: 5rAQe6ed9zluTfYFzTZuASEPD1y4gO3QTPSQYYuM1fw=)
                          2: 3A9A3904330011EBA08B865DC4F9AE02.roa (hash: vSs025YJGtpmQ8e6r7LD8M48HbnExGzsb5IXIH1Cfbw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FEF6/1986B9D832FE11EB85BAD157C4F9AE02/sXBCw3IXHA9BRv78RNHbqlIjhxs.crl
                          rsync://rpki.apnic.net/member_repository/A918FEF6/1986B9D832FE11EB85BAD157C4F9AE02/sXBCw3IXHA9BRv78RNHbqlIjhxs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXBCw3IXHA9BRv78RNHbqlIjhxs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 22:56:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1914 (0x77a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FEF6, serialNumber=B17042C372171C0F4146FEFC44D1DBAA5223871B
        Validity
            Not Before: Oct 18 22:56:07 2025 GMT
            Not After : Oct 25 22:56:07 2025 GMT
        Subject: CN=68f41b08-c64a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:b2:48:b1:18:4b:a4:12:d4:e0:9a:55:f0:ef:
                    49:86:96:3f:a6:4a:46:44:46:e2:ab:88:8b:24:5a:
                    f9:56:cc:b6:b9:9f:15:be:b5:53:8b:af:5f:c0:f3:
                    15:41:5d:e6:ad:a9:90:1a:c8:0a:50:83:d2:57:64:
                    79:6f:0e:85:81:9b:76:80:85:98:f5:81:2d:3e:f1:
                    75:09:8c:35:d6:50:85:a7:5d:37:c4:c0:bc:cf:4d:
                    9e:55:3e:11:37:6a:05:66:5c:8e:79:f5:71:d5:7e:
                    56:fc:89:48:0c:cf:79:a9:f8:ef:e2:14:f8:e6:36:
                    be:0b:00:dd:e3:e0:94:7a:88:11:df:04:62:ab:ff:
                    89:02:03:91:f0:c1:df:75:68:33:9c:89:0a:e0:cb:
                    a3:4f:ba:86:61:1d:3a:97:e8:79:43:9e:1f:3b:33:
                    8b:2b:17:20:2c:de:ae:17:64:71:24:99:95:c2:68:
                    6e:d1:1c:50:63:42:db:a5:50:f0:4b:62:c8:9a:3b:
                    a2:48:52:19:e4:27:b3:3f:ee:c4:ba:b7:91:4a:f6:
                    d6:e4:2a:dd:6c:55:fd:7c:e2:2b:2d:c5:83:52:9b:
                    2b:fb:b5:fe:91:90:7d:d8:58:85:63:a1:e2:32:75:
                    5a:4f:9b:8a:1a:6c:6d:8d:63:91:27:fc:54:e4:d5:
                    78:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:1E:26:4D:62:7D:25:3D:F9:F7:32:A8:8E:7F:F8:3E:D4:0F:75:DF
            X509v3 Authority Key Identifier:
                keyid:B1:70:42:C3:72:17:1C:0F:41:46:FE:FC:44:D1:DB:AA:52:23:87:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FEF6/1986B9D832FE11EB85BAD157C4F9AE02/sXBCw3IXHA9BRv78RNHbqlIjhxs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXBCw3IXHA9BRv78RNHbqlIjhxs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FEF6/1986B9D832FE11EB85BAD157C4F9AE02/sXBCw3IXHA9BRv78RNHbqlIjhxs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:ea:4b:fc:ba:47:0e:95:93:73:54:5b:55:58:28:6d:76:41:
         40:48:c8:9e:00:e0:aa:83:80:57:03:a4:98:b1:18:9c:1b:d0:
         91:fa:fb:ef:5f:f6:d4:a8:c1:88:48:cb:79:b7:fe:fa:d9:6c:
         25:d2:b1:f7:0a:85:86:0f:0c:5a:3e:4b:fa:10:cf:65:c3:4e:
         53:12:8d:b4:fd:c1:6c:60:18:81:6f:0b:7b:b1:f5:68:24:34:
         9d:2b:a2:bb:ad:28:f5:28:49:46:24:01:00:0c:4b:ab:d4:2d:
         c6:18:b4:72:07:e5:dd:80:3a:5f:85:2d:fa:a7:98:54:39:d8:
         75:68:f0:5d:20:11:2b:64:03:9f:8e:76:8c:5d:6e:0f:bc:6f:
         fe:f2:b1:cc:b0:05:73:64:53:d0:7f:19:b4:fd:c8:22:21:9e:
         ad:73:89:2a:42:cf:76:25:1b:fe:80:29:90:d7:dd:9a:48:92:
         b1:c3:c8:d4:a7:47:0c:eb:da:a2:1d:1f:9c:5e:78:02:b6:3b:
         7c:12:5f:3a:e9:c7:5c:3b:b2:7b:94:fb:81:86:31:b7:99:b8:
         b6:b3:ed:90:09:0e:8d:f7:37:80:06:9f:bb:cd:45:fb:47:7c:
         94:14:d9:77:d7:c9:7c:6d:b5:3c:55:4b:13:e3:8e:58:b2:a2:
         00:ee:92:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:40:34 2025 by rpki-client