Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft
File:                     -unC9P4gRTvpL8qxgsCVgcgTLfE.mft (raw, json)
Hash identifier:          VVT3u7KTRJV8qRDVRJwaC9SEHMVJSPanSK6K7SvDqu8=
Subject key identifier:   BA:F9:36:0B:88:64:3F:CF:71:81:F9:4B:41:6F:CA:D2:E2:4A:04:F9
Authority key identifier: FA:E9:C2:F4:FE:20:45:3B:E9:2F:CA:B1:82:C0:95:81:C8:13:2D:F1
Certificate issuer:       /CN=A919103F/serialNumber=FAE9C2F4FE20453BE92FCAB182C09581C8132DF1
Certificate serial:       0323
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft
Manifest number:          031A
Signing time:             Sun 19 Oct 2025 03:14:59 +0000
Manifest this update:     Sun 19 Oct 2025 03:14:58 +0000
Manifest next update:     Sun 26 Oct 2025 03:14:58 +0000
Files and hashes:         1: -unC9P4gRTvpL8qxgsCVgcgTLfE.crl (hash: RKAAX3NX43tl461shaxbuessh98sTToO2xkTezPSz1I=)
                          2: E75A8B8095D011EFA2CE197BC4F9AE02.roa (hash: FUZ5azqpAEZ0qmf1CYejZILVHYibj+rRrJRKN/AtVm0=)
                          3: C4928820F06C11EC91459B5CC4F9AE02.roa (hash: UN/nfQHhGfzyZRq2W+uh9scaawp6d2w2Zs3dhUguHjk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.crl
                          rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 03:14:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 803 (0x323)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919103F, serialNumber=FAE9C2F4FE20453BE92FCAB182C09581C8132DF1
        Validity
            Not Before: Oct 19 03:14:58 2025 GMT
            Not After : Oct 26 03:14:58 2025 GMT
        Subject: CN=68f457b3-3411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:28:11:c2:31:21:3d:3b:94:13:68:21:8e:60:
                    f8:11:65:a7:6d:49:c4:85:ba:33:f7:1c:cb:7d:5e:
                    f4:ad:4d:84:08:1f:3d:e0:95:e8:1b:cb:90:e6:84:
                    f8:5c:3f:47:62:a2:12:f8:1d:f1:fe:b2:68:73:23:
                    23:21:ed:6e:55:88:c9:a8:18:41:38:42:c8:c9:59:
                    2f:05:76:83:31:20:ab:c4:9d:a5:f0:d3:51:56:59:
                    63:fd:66:e1:1e:a4:28:e5:00:ef:35:4f:7e:2f:f6:
                    73:03:74:d0:69:cb:51:2c:87:90:46:2d:6e:0a:2e:
                    e0:a9:b4:9a:ce:17:28:6c:9c:75:1a:aa:66:78:b3:
                    34:e1:d5:27:d7:df:44:c4:7c:c4:58:80:3f:85:d1:
                    e8:0f:a5:8d:92:77:f3:e4:ed:e3:6e:14:49:1a:30:
                    e7:01:94:bb:ad:ef:b8:43:10:d0:ef:ba:71:37:c3:
                    f2:5a:c0:49:4b:b9:cb:88:f0:02:2d:e2:4e:7f:9b:
                    5e:69:d0:b0:0c:6a:5b:a1:f8:47:85:47:38:99:13:
                    bc:67:ac:32:e2:3b:b6:fa:2d:b3:79:4c:ea:59:c2:
                    70:59:e4:a4:44:b0:ea:ee:a8:07:b6:a1:00:4c:43:
                    5f:c3:60:d8:b9:f3:28:6a:23:aa:58:07:70:53:c1:
                    67:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:F9:36:0B:88:64:3F:CF:71:81:F9:4B:41:6F:CA:D2:E2:4A:04:F9
            X509v3 Authority Key Identifier:
                keyid:FA:E9:C2:F4:FE:20:45:3B:E9:2F:CA:B1:82:C0:95:81:C8:13:2D:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         dd:20:97:df:d3:f7:6e:bb:83:78:eb:f6:31:cd:0a:8f:cd:93:
         1f:3f:60:99:e2:a0:aa:54:0b:33:1f:c2:bf:53:39:fd:8f:9d:
         84:22:41:11:5d:69:9f:82:10:a0:62:f9:78:26:71:18:27:14:
         14:cc:6a:ef:28:cc:22:58:4c:f5:ff:e2:8f:cd:a4:0e:4f:b8:
         40:9d:21:14:6f:0b:93:88:ba:9d:95:da:87:ac:a4:95:b0:3a:
         a1:de:b1:67:92:7a:5c:f4:9c:69:d8:86:38:2a:df:97:92:70:
         26:d5:2d:af:db:0c:1b:fd:e9:e0:62:25:0c:ad:fb:da:cb:63:
         7a:d8:ca:71:8c:e4:e8:1e:88:40:02:52:7f:df:f8:60:4e:6c:
         1c:ad:20:50:2b:4f:c5:a3:44:8b:04:5e:72:cc:5c:41:3d:7d:
         63:40:6a:a7:ae:08:44:78:37:1b:35:04:3e:9a:34:80:de:c3:
         d6:54:d3:fc:2a:7a:50:54:0d:4c:56:a5:d4:96:91:b6:03:a1:
         2a:4a:40:7d:f2:cc:c8:17:fa:03:b3:52:3f:12:81:ef:0c:96:
         c6:c7:2a:f8:9d:81:d5:db:5b:19:b4:43:20:e3:ba:a1:55:b1:
         f9:cd:c3:a0:e8:ca:6d:7f:fb:1d:11:3b:41:bb:3a:16:b2:88:
         e2:a1:fc:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:47:43 2025 by rpki-client