Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft
File:                     Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft (raw, json)
Hash identifier:          IzsOzXqkFJ9yZMfzZgGDBMgG6Q1Q71vrrbBOUEQbg1g=
Subject key identifier:   2F:39:32:E7:84:4E:C4:C3:4F:22:55:93:4A:6D:D3:CA:85:3C:8F:C8
Authority key identifier: 66:FD:DB:43:E5:49:42:E3:49:2F:10:65:0E:53:23:92:6C:45:C4:84
Certificate issuer:       /CN=A9194E51/serialNumber=66FDDB43E54942E3492F10650E5323926C45C484
Certificate serial:       0FF6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft
Manifest number:          0FE8
Signing time:             Sat 18 Oct 2025 18:03:43 +0000
Manifest this update:     Sat 18 Oct 2025 18:03:42 +0000
Manifest next update:     Sat 25 Oct 2025 18:03:42 +0000
Files and hashes:         1: Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.crl (hash: ZCOgPIIlLcYt84cpdzE2vcNOysn1j/r2q3kBSW673/0=)
                          2: 27A298A00C6C11EC82638A40C4F9AE02.roa (hash: 2kQLQw6kE7NSPMlRLkoH5WBQYX+DAijxoh/54ahkGGs=)
                          3: 1313114A5B3D11E996E4A744C4F9AE02.roa (hash: oIrl9BWKoF5yDRsF0RcL0nlEBDtMIcn28rtSOP6iY7Q=)
                          4: 373ADDFC1CC411EF90865B7DC4F9AE02.roa (hash: NRcQiGVBqenDcfR+9zwB2e+0xfcMr/ZJ4M+D8EcQ3UU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.crl
                          rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 18:03:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4086 (0xff6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194E51, serialNumber=66FDDB43E54942E3492F10650E5323926C45C484
        Validity
            Not Before: Oct 18 18:03:42 2025 GMT
            Not After : Oct 25 18:03:42 2025 GMT
        Subject: CN=68f3d67e-5879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:1d:2b:ca:51:52:2d:0a:9e:af:95:33:02:68:
                    e2:c3:60:b0:b2:ba:1c:c6:77:ac:39:38:99:35:95:
                    83:f9:c8:82:56:da:53:34:c5:18:a9:5a:cd:f3:45:
                    4d:58:e2:89:87:e0:46:e6:6b:6a:d4:8e:fc:ae:f3:
                    b4:83:02:b1:5e:90:b7:aa:84:47:bc:9a:76:bd:ca:
                    59:bd:88:61:0c:7f:57:ef:6d:71:12:66:3a:19:6d:
                    9a:70:4c:14:2f:c3:9c:f1:f1:27:8c:6e:dd:b0:c8:
                    53:cb:35:6f:d3:cb:ee:1f:c7:67:df:16:09:46:9e:
                    31:51:f7:d5:4d:86:3d:16:13:ad:b6:c5:83:c3:ce:
                    fa:43:90:35:ab:5c:55:57:60:7d:06:35:34:6a:28:
                    e8:32:a4:dc:9e:b5:f3:f1:e8:dd:22:02:27:91:cb:
                    a3:3b:91:66:e9:25:c9:e2:40:da:61:e0:f5:e6:d7:
                    f6:e5:cb:95:e5:eb:44:4c:26:c6:05:60:30:b7:7b:
                    03:75:eb:f7:9b:5a:0f:1f:4b:94:09:bb:6d:92:6b:
                    3d:44:0b:33:42:f6:13:ef:34:b9:5b:6b:4e:c8:a2:
                    30:80:f3:af:b0:bd:71:70:92:1d:30:e0:4e:2d:2a:
                    af:61:25:83:96:e5:41:fd:b3:2f:22:53:b7:fb:be:
                    a6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:39:32:E7:84:4E:C4:C3:4F:22:55:93:4A:6D:D3:CA:85:3C:8F:C8
            X509v3 Authority Key Identifier:
                keyid:66:FD:DB:43:E5:49:42:E3:49:2F:10:65:0E:53:23:92:6C:45:C4:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:9e:d4:29:89:32:5d:33:21:b7:92:be:9d:49:12:38:3e:49:
         c0:d3:6d:84:8c:bb:d8:93:e4:30:1a:31:3f:7f:bf:48:63:94:
         62:5a:bb:79:e3:bd:27:dd:12:19:86:3b:ea:7d:79:f5:70:77:
         d3:39:55:5a:82:a3:2c:d8:3f:29:f6:65:26:7f:e8:dc:c4:25:
         cd:e2:e5:be:12:2d:35:19:21:b8:f1:62:87:ed:43:d8:e9:ec:
         a6:90:b2:90:1b:1e:35:4b:3b:66:84:73:9e:37:34:ef:19:5b:
         35:b5:19:70:4a:a7:de:fb:61:b7:43:51:b5:fe:56:0a:ad:49:
         86:68:ec:a5:d9:00:c8:f6:97:f2:9a:2b:19:7e:19:fc:e5:39:
         94:dc:39:11:6f:95:e7:94:61:a9:8f:f7:78:56:81:66:f3:53:
         86:ff:5d:e8:bf:d0:11:89:c5:4a:3d:4f:30:35:be:14:32:59:
         22:3f:15:4d:ee:05:2d:26:da:e9:bc:0c:eb:e0:85:85:2c:81:
         01:33:cc:97:e7:84:79:e5:c6:1a:86:0d:e1:53:ba:54:2c:c1:
         94:93:75:e3:6f:e6:83:d1:e5:7a:43:5d:06:c0:23:4b:29:ee:
         bb:4d:5a:07:43:8e:e4:72:6f:ca:5d:b7:fb:92:65:bb:ec:8a:
         11:cd:52:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:47:11 2025 by rpki-client