Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/aTn8BA2lwwt2bceU-cpML0Gsruo.mft
File:                     aTn8BA2lwwt2bceU-cpML0Gsruo.mft (raw, json)
Hash identifier:          rcoT4Hgqclvz8psgHdhHJPLxtKAPO2042qCRUnefUmM=
Subject key identifier:   F8:82:77:4E:A3:C1:12:23:AA:69:86:8A:54:05:C7:A3:E1:E7:51:47
Authority key identifier: 69:39:FC:04:0D:A5:C3:0B:76:6D:C7:94:F9:CA:4C:2F:41:AC:AE:EA
Certificate issuer:       /CN=A91A2A1F/serialNumber=6939FC040DA5C30B766DC794F9CA4C2F41ACAEEA
Certificate serial:       04A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTn8BA2lwwt2bceU-cpML0Gsruo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/aTn8BA2lwwt2bceU-cpML0Gsruo.mft
Manifest number:          048A
Signing time:             Sun 19 Oct 2025 01:59:56 +0000
Manifest this update:     Sun 19 Oct 2025 01:59:55 +0000
Manifest next update:     Sun 26 Oct 2025 01:59:55 +0000
Files and hashes:         1: aTn8BA2lwwt2bceU-cpML0Gsruo.crl (hash: gRJjMgGgfso9NEySD9ZbgBU/E+wDBe76bAz6+nuKEG0=)
                          2: 17ABE41ACAF611EE894A2D50C4F9AE02.roa (hash: QEkMEVTQBayFx2m7EivW7eRMOejHOK5Ic4vwhvxB81A=)
                          3: 27E42824621B11ECB96F443FC4F9AE02.roa (hash: +odywDquwxeF6SYI69k239OrBCZD98jk7qEP7myd7ZI=)
                          4: 63E8739003C111EEB2272068C4F9AE02.roa (hash: Lee2Usqd9hsodQDlh02wVnCx8PbKZpN8M7lZu7WoioY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/aTn8BA2lwwt2bceU-cpML0Gsruo.crl
                          rsync://rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/aTn8BA2lwwt2bceU-cpML0Gsruo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTn8BA2lwwt2bceU-cpML0Gsruo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 01:59:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1193 (0x4a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A2A1F, serialNumber=6939FC040DA5C30B766DC794F9CA4C2F41ACAEEA
        Validity
            Not Before: Oct 19 01:59:55 2025 GMT
            Not After : Oct 26 01:59:55 2025 GMT
        Subject: CN=68f4461c-6591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:93:7f:b8:08:db:3a:9d:07:c6:7e:df:c9:0e:
                    b9:8c:8a:5a:ce:34:7b:7e:18:49:1f:b6:a3:f2:92:
                    eb:26:11:57:86:cc:04:fc:50:06:fe:34:56:ce:63:
                    c5:75:68:e9:9f:ed:18:76:dd:3a:4d:b4:6e:23:ba:
                    32:4b:06:78:a4:94:e6:a6:c9:8e:75:46:f7:83:7e:
                    b8:7e:18:71:73:42:3e:b7:b3:36:5d:9e:4c:1c:12:
                    9c:b2:f5:52:83:9d:5b:a3:17:2c:5f:b1:fb:64:22:
                    80:52:3e:16:b4:ca:ce:98:7e:2d:fc:79:a1:28:59:
                    22:6a:d5:4c:8a:7d:a6:26:97:08:41:bf:9c:96:8f:
                    1a:07:f0:6f:83:dc:d4:df:3a:57:bf:e4:f6:fe:4a:
                    0f:fa:e6:c9:2b:29:1e:94:ed:d1:2f:f0:ee:92:96:
                    e6:6d:55:5c:c2:5f:0f:98:53:0b:6e:2b:55:d8:15:
                    e0:15:67:d4:75:98:73:aa:c3:3a:a3:9f:ba:25:bf:
                    95:46:3f:d5:9a:3f:14:52:1a:50:84:05:da:44:53:
                    4e:3f:26:c3:d6:92:b4:bd:dd:c4:35:e8:17:b2:59:
                    c0:4c:60:0b:4a:6a:e2:65:95:25:60:c4:19:e3:3b:
                    f4:91:0e:7b:7b:48:cc:59:dd:fb:ef:4d:41:a6:01:
                    e8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:82:77:4E:A3:C1:12:23:AA:69:86:8A:54:05:C7:A3:E1:E7:51:47
            X509v3 Authority Key Identifier:
                keyid:69:39:FC:04:0D:A5:C3:0B:76:6D:C7:94:F9:CA:4C:2F:41:AC:AE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/aTn8BA2lwwt2bceU-cpML0Gsruo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTn8BA2lwwt2bceU-cpML0Gsruo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/aTn8BA2lwwt2bceU-cpML0Gsruo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:72:22:33:e4:89:1c:e6:a7:bc:79:8c:e7:4e:82:64:a7:a7:
         86:30:44:57:4f:e7:31:2c:0d:bf:e0:9c:c0:f1:19:ff:51:4f:
         9f:fe:72:54:22:fd:6c:a6:38:99:0d:09:6f:cf:4e:8a:3c:bb:
         fd:3d:61:16:a9:f2:de:44:d7:a0:f1:79:8c:f3:64:17:78:41:
         de:97:a2:c7:5e:bd:f3:ae:b6:23:bc:59:5f:95:a1:85:46:ba:
         34:28:6e:75:90:06:ab:03:60:b9:39:73:7c:79:ac:65:f2:00:
         39:43:6d:14:d1:03:32:3c:fe:27:d8:d8:60:b1:3a:6a:a2:f8:
         cf:1a:2e:f0:46:2d:4a:74:21:66:83:9f:f7:b0:14:48:05:f5:
         88:07:6e:1a:47:d0:cd:f7:80:d8:fe:8f:91:8a:11:39:10:80:
         81:58:ee:d2:26:73:77:ad:ad:60:68:2c:c6:4f:73:92:b3:36:
         49:cf:98:6e:21:ce:c1:53:5d:e8:ad:19:b6:96:5a:70:0f:d9:
         d6:3d:11:5e:ab:39:e0:3b:64:8e:db:76:c4:4e:37:93:d6:fe:
         9c:a3:4a:1e:c8:6b:75:93:f4:75:7d:d0:66:05:ab:2b:51:05:
         77:49:69:89:27:31:e4:d5:13:8b:83:1c:44:9b:9e:53:15:9e:
         5f:5b:e8:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:25:09 2025 by rpki-client