Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft
File:                     M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft (raw, json)
Hash identifier:          AMmbtPsO6IK/RP+J9lRNZCDqAPjd6kMR2cXi+zMfGCs=
Subject key identifier:   40:0C:80:40:90:A3:EF:20:C7:D7:EB:30:D7:C5:5E:AB:B6:95:9F:A0
Authority key identifier: 33:B6:95:32:95:80:10:38:F0:17:FA:65:D4:70:78:1A:5C:C7:72:C0
Certificate issuer:       /CN=A9191E08/serialNumber=33B6953295801038F017FA65D470781A5CC772C0
Certificate serial:       0393
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft
Manifest number:          0383
Signing time:             Sun 19 Oct 2025 02:54:17 +0000
Manifest this update:     Sun 19 Oct 2025 02:54:16 +0000
Manifest next update:     Sun 26 Oct 2025 02:54:16 +0000
Files and hashes:         1: M7aVMpWAEDjwF_pl1HB4GlzHcsA.crl (hash: DnsSwUv0aQvQrRNE4W6FBwR0AU5c497/Yo5oGo1zrfU=)
                          2: 249BA23C364D11F0AECC3986C4F9AE02.roa (hash: F+cI71SpMl71bLQgnMUz6K4+MsaifrlPMt2J8GaVcJ8=)
                          3: 25687A64364D11F0AECC3986C4F9AE02.roa (hash: RWlaRiVFKIIV/wakCOCZQQ+zk9bO5MWkgTakC7o+ErY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.crl
                          rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 02:54:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 915 (0x393)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191E08, serialNumber=33B6953295801038F017FA65D470781A5CC772C0
        Validity
            Not Before: Oct 19 02:54:16 2025 GMT
            Not After : Oct 26 02:54:16 2025 GMT
        Subject: CN=68f452d8-f3f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:4b:7c:08:cf:da:e9:89:bf:fc:62:5a:49:97:
                    37:96:17:3a:55:d5:0d:1c:2a:49:b0:33:43:e5:cd:
                    e3:f0:06:ba:df:c1:31:68:37:48:9c:76:f4:cc:42:
                    70:da:c1:e8:a4:5c:8a:2f:40:b7:5b:b9:89:c3:26:
                    4a:82:f4:29:55:58:9e:87:57:2c:fe:fb:65:2a:66:
                    e1:c8:3c:0c:54:13:b1:ca:22:9b:ca:81:4e:5e:10:
                    8c:98:7d:b5:d9:73:f1:e7:ca:5f:d6:e8:d9:d9:fa:
                    b7:e1:41:e2:18:0c:c2:e5:41:92:56:20:8d:38:45:
                    94:71:fe:93:54:af:4c:15:e2:e5:db:03:71:0f:58:
                    54:1d:67:2f:0d:4f:ba:b5:8d:e9:ff:ea:52:69:8a:
                    02:85:35:3c:e0:ea:09:e0:62:58:fe:5e:55:db:84:
                    35:9f:37:a4:94:22:06:dd:6b:d0:cf:76:dc:97:22:
                    96:47:38:c7:50:11:27:50:50:b5:d7:2f:ab:d1:1d:
                    c7:91:02:8c:3a:91:d5:87:a2:2b:ca:02:e1:7b:d0:
                    43:1e:29:56:63:54:b2:ae:54:5c:61:61:79:37:9b:
                    fb:30:3b:aa:19:82:5e:25:ce:bb:01:e3:15:53:cb:
                    6f:26:87:98:cc:78:d8:8a:40:9a:da:c7:e6:f6:47:
                    bc:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:0C:80:40:90:A3:EF:20:C7:D7:EB:30:D7:C5:5E:AB:B6:95:9F:A0
            X509v3 Authority Key Identifier:
                keyid:33:B6:95:32:95:80:10:38:F0:17:FA:65:D4:70:78:1A:5C:C7:72:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:aa:cd:e3:49:2b:1b:cb:f8:81:93:ec:ee:17:dd:78:76:d5:
         5b:9f:82:cf:f7:63:a5:57:45:c8:9a:b2:30:b3:9c:c6:fb:08:
         5e:81:89:df:2a:c2:77:cd:23:f3:50:1d:ce:8b:cc:40:b6:70:
         5f:d9:2c:d7:bb:eb:ca:36:f1:08:0b:26:b6:f2:82:57:85:9f:
         a7:44:76:cb:18:2d:bf:c4:59:82:50:3e:97:df:66:5a:a4:88:
         ae:60:19:41:da:d5:e7:5b:f8:92:cd:19:2d:70:c4:de:dd:2a:
         9e:8d:b2:65:34:e4:71:7e:57:b2:29:6c:cb:b3:2a:4f:47:d0:
         9f:a0:26:c0:cf:cf:e3:ce:75:fd:07:64:28:1d:df:21:cd:bc:
         ff:d7:28:4a:24:7b:af:43:75:44:a6:ff:af:fc:90:86:43:65:
         df:59:5e:e8:ea:c9:f1:f7:2b:4c:de:cc:a1:b0:f1:92:fc:14:
         25:ff:66:27:6d:4c:76:60:ba:95:04:21:03:f0:34:6d:71:0a:
         20:43:64:ae:22:7f:47:c0:31:81:3a:41:32:07:ed:d9:e0:97:
         2a:78:29:3b:83:1a:81:81:1c:a1:8a:64:27:93:04:3e:4d:00:
         ec:b5:c1:01:b3:2a:20:a6:7e:8b:f7:48:8a:cc:fe:72:fe:3d:
         46:b7:3d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:05:15 2025 by rpki-client