Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.mft
File:                     M2KsWO2xic8leDwn2Qp9L6Mpd8U.mft (raw, json)
Hash identifier:          k8MUoSounHBMGO+s1dPehVeuRel2XHzlaL8e5WF9ev0=
Subject key identifier:   7F:D4:E6:3A:FD:4C:81:19:E5:6E:0C:C2:0B:68:42:C4:96:23:EF:E4
Authority key identifier: 33:62:AC:58:ED:B1:89:CF:25:78:3C:27:D9:0A:7D:2F:A3:29:77:C5
Certificate issuer:       /CN=A919D3F9/serialNumber=3362AC58EDB189CF25783C27D90A7D2FA32977C5
Certificate serial:       64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2KsWO2xic8leDwn2Qp9L6Mpd8U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.mft
Manifest number:          62
Signing time:             Sun 19 Oct 2025 10:26:47 +0000
Manifest this update:     Sun 19 Oct 2025 10:26:46 +0000
Manifest next update:     Sun 26 Oct 2025 10:26:46 +0000
Files and hashes:         1: M2KsWO2xic8leDwn2Qp9L6Mpd8U.crl (hash: yeYaZyofH5GTbrRQ76/XXs5T+S3ww1gQGDLJG+cV6Ms=)
                          2: 35C008E818C811F0BF9E881FC4F9AE02.roa (hash: bwDdjXPrVZtmIClbo9xqwN/iM/s96nIFHCKB+Vl9Hlk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.crl
                          rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2KsWO2xic8leDwn2Qp9L6Mpd8U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 10:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100 (0x64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D3F9, serialNumber=3362AC58EDB189CF25783C27D90A7D2FA32977C5
        Validity
            Not Before: Oct 19 10:26:46 2025 GMT
            Not After : Oct 26 10:26:46 2025 GMT
        Subject: CN=68f4bce6-181f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fa:e8:90:f7:c1:a5:d6:fb:fd:da:9c:c4:50:
                    d6:9d:d2:09:75:5b:05:b5:7a:8c:2e:34:e2:6f:83:
                    f8:f6:04:eb:19:f5:02:e6:b0:46:b1:38:7a:e9:5f:
                    fc:75:45:d1:69:34:27:cf:e1:55:27:2d:67:a9:09:
                    9c:11:04:a0:35:00:dd:f5:75:9e:97:33:13:86:ae:
                    7c:20:e6:57:2f:ac:78:1b:73:c9:40:a1:72:0c:17:
                    9c:4d:ca:a3:2d:dd:e6:61:ad:8a:b0:4f:dd:5b:e5:
                    bf:af:56:08:e3:9a:12:e0:0c:10:37:34:c7:72:e0:
                    9f:a5:0a:26:e2:12:55:f6:89:0d:e3:b2:5e:e2:96:
                    c6:c6:e7:06:1b:5a:a5:2c:85:e0:12:5c:1f:4d:fc:
                    b1:76:de:23:79:00:9a:6c:93:ee:a8:ad:4a:66:68:
                    60:94:20:74:48:f4:6e:71:24:6b:29:3c:b7:64:00:
                    2f:78:a5:af:36:8d:ab:40:8a:d0:8c:92:f5:4e:bd:
                    b3:0a:6b:3c:70:54:a4:a9:ff:f8:a0:3d:2c:ce:5b:
                    74:04:a1:df:62:b7:b4:11:1a:d2:da:8a:05:a5:7a:
                    7a:6e:0c:33:c2:e3:cc:62:99:4c:7f:dd:84:a3:06:
                    1e:8e:62:f8:98:62:fb:5a:03:18:1f:76:55:3b:8a:
                    15:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:D4:E6:3A:FD:4C:81:19:E5:6E:0C:C2:0B:68:42:C4:96:23:EF:E4
            X509v3 Authority Key Identifier:
                keyid:33:62:AC:58:ED:B1:89:CF:25:78:3C:27:D9:0A:7D:2F:A3:29:77:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2KsWO2xic8leDwn2Qp9L6Mpd8U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:34:3e:e6:4c:07:85:13:a6:f7:33:58:6f:8d:e1:86:1c:60:
         5e:49:fd:b5:b4:a1:e4:cb:5c:5f:c7:bf:cb:ac:82:ad:67:b8:
         e9:0e:26:5f:cd:d6:4f:68:03:cf:4a:ef:27:3e:67:e7:25:cf:
         4c:40:1f:2a:af:3d:b9:be:83:b0:6c:1a:68:b4:55:74:9e:6f:
         c6:d1:dc:7c:db:9d:a0:39:69:22:5a:80:7a:70:4a:74:50:5c:
         e5:f0:dc:96:f7:7a:f6:62:bb:c9:6c:99:3a:88:a2:90:d6:3c:
         10:85:3c:be:d0:c5:67:40:f4:7f:39:5e:2e:bc:f0:88:25:28:
         82:d2:6e:cd:f4:e4:10:61:1a:9e:dd:e9:e6:36:0f:f0:75:a3:
         b0:74:53:cd:f6:8b:ba:63:4c:98:f6:00:6c:03:2c:8b:5f:17:
         92:d8:12:14:74:56:f8:8f:c7:3d:0c:fd:f8:a1:20:7c:e9:08:
         20:5e:f8:a7:82:93:20:e0:91:ce:83:6b:86:83:a1:f1:64:8d:
         95:1f:31:78:02:23:75:11:3d:07:13:f0:a5:07:16:e1:14:56:
         a9:4d:34:89:76:a2:ff:49:7a:49:9a:91:97:14:b3:a9:18:ae:
         7f:e5:8a:b4:0c:ae:1a:35:96:d6:f1:0b:60:5d:10:37:80:f4:
         4e:82:d6:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:45:16 2025 by rpki-client