Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.mft
File:                     EdjY3F2WeN4DMJZ6LzgdT2e7VbY.mft (raw, json)
Hash identifier:          2lstvZPLtONFZQ8oq1ZBpnfwDlK8wRz4QcNmscKcEiM=
Subject key identifier:   EE:68:F4:E4:77:78:31:F0:A1:6F:B2:48:20:DA:CD:3D:37:32:F6:9A
Authority key identifier: 11:D8:D8:DC:5D:96:78:DE:03:30:96:7A:2F:38:1D:4F:67:BB:55:B6
Certificate issuer:       /CN=A919D6D8/serialNumber=11D8D8DC5D9678DE0330967A2F381D4F67BB55B6
Certificate serial:       08AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.mft
Manifest number:          13A8
Signing time:             Sat 18 Oct 2025 20:16:24 +0000
Manifest this update:     Sat 18 Oct 2025 20:16:23 +0000
Manifest next update:     Sat 25 Oct 2025 20:16:23 +0000
Files and hashes:         1: EdjY3F2WeN4DMJZ6LzgdT2e7VbY.crl (hash: NaoqXd69MNPu0S07qLFpsBneu6mlk/Dz4h3Ir9+kxVw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.crl
                          rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 20:16:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2223 (0x8af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D6D8, serialNumber=11D8D8DC5D9678DE0330967A2F381D4F67BB55B6
        Validity
            Not Before: Oct 18 20:16:23 2025 GMT
            Not After : Oct 25 20:16:23 2025 GMT
        Subject: CN=68f3f597-6dd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:58:21:3f:24:f1:13:86:c1:fd:48:45:4b:04:
                    10:79:31:75:38:1c:7b:07:ce:cf:18:5b:5f:8f:0f:
                    78:14:84:1b:03:aa:fd:99:28:7e:6a:fe:dd:3f:b5:
                    5c:5a:97:b7:b0:12:d3:24:5a:15:d1:b0:ca:6f:e4:
                    b2:ec:0b:ea:b9:24:a1:e9:9f:58:9b:22:6b:7e:28:
                    af:3d:99:bf:8c:c5:94:4a:cd:63:88:e3:0e:d0:58:
                    21:a1:0c:82:96:a6:45:b3:c6:50:eb:71:cf:05:21:
                    af:c3:d9:5f:33:76:e3:ba:8f:55:b7:6a:26:b2:45:
                    08:a5:2f:66:c1:40:cb:75:b6:de:a7:c5:b8:86:f9:
                    f5:e4:6a:a6:87:24:ae:64:a8:ae:17:68:be:9e:e4:
                    a7:88:af:8a:63:0d:0e:bc:e1:c7:7c:bd:b0:f6:d4:
                    12:d3:cb:0e:ab:7b:2f:f6:3c:14:e9:dc:20:08:c7:
                    5f:6f:0e:15:1e:49:67:ff:d0:5c:80:38:10:dc:a0:
                    d6:cd:6d:52:b0:5a:32:d9:a1:79:a2:2a:55:52:fc:
                    9a:71:d8:c5:79:34:25:98:42:31:bb:9f:b2:22:23:
                    23:0d:16:0e:71:2a:6e:ed:33:f3:ef:87:fb:07:7a:
                    b9:7c:6a:c7:6b:74:0b:db:85:4a:16:f6:1a:1e:73:
                    a6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:68:F4:E4:77:78:31:F0:A1:6F:B2:48:20:DA:CD:3D:37:32:F6:9A
            X509v3 Authority Key Identifier:
                keyid:11:D8:D8:DC:5D:96:78:DE:03:30:96:7A:2F:38:1D:4F:67:BB:55:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:9b:08:5c:49:18:d3:36:fd:af:5b:22:51:41:79:24:cc:de:
         54:a0:90:9e:fb:85:03:b6:b4:43:a6:39:c4:fd:c8:2d:1a:c3:
         3f:b4:75:f5:b7:b4:c4:13:4a:8e:31:4d:11:47:88:6a:76:e9:
         55:97:39:6e:7b:42:71:75:0d:0b:c1:05:cc:e7:cc:74:6b:0e:
         75:ee:72:9b:ea:9d:af:b1:03:b1:e4:ed:b7:1c:f3:d4:c7:cf:
         98:ce:28:86:4e:b2:75:9d:0e:45:bc:91:e9:91:e7:f7:c3:34:
         e7:b5:1c:ef:93:9b:3f:1a:4e:fa:a7:8b:6a:7b:cd:0a:4e:0e:
         42:4a:cc:8c:ae:a6:87:9a:a1:a9:60:55:e2:07:8d:b7:fe:02:
         af:d9:d6:d7:4f:fb:10:3e:97:e7:5c:65:8d:2f:5f:70:d0:be:
         d9:f7:21:b3:ff:74:f7:84:e5:66:c0:a8:44:90:38:e6:e8:48:
         94:8e:68:f9:f6:58:0a:85:29:01:f2:96:6a:be:b2:41:72:35:
         d8:ca:df:13:f5:4e:ff:08:ed:0b:ee:fd:b2:6b:bb:b1:2c:48:
         10:3b:df:81:33:5b:81:27:3c:07:60:e5:2e:bc:fd:ee:8f:11:
         f5:4f:75:82:7e:2e:39:49:dd:83:a9:0b:4c:5a:db:6b:11:43:
         91:67:48:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:42:27 2025 by rpki-client