Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.mft
File:                     n7dBtymAPGtDKbw7QOduUqvYufg.mft (raw, json)
Hash identifier:          yKQb12kFuCFGHY7ZJRCQYYz/R9X1h/1T9jOf/RaILCw=
Subject key identifier:   1F:B6:1E:BD:D7:25:B9:AC:1F:8C:25:AF:40:77:64:D7:76:61:E8:1F
Authority key identifier: 9F:B7:41:B7:29:80:3C:6B:43:29:BC:3B:40:E7:6E:52:AB:D8:B9:F8
Certificate issuer:       /CN=A91A7F56/serialNumber=9FB741B729803C6B4329BC3B40E76E52ABD8B9F8
Certificate serial:       0153
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n7dBtymAPGtDKbw7QOduUqvYufg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.mft
Manifest number:          0150
Signing time:             Sun 19 Oct 2025 06:55:39 +0000
Manifest this update:     Sun 19 Oct 2025 06:55:39 +0000
Manifest next update:     Sun 26 Oct 2025 06:55:39 +0000
Files and hashes:         1: n7dBtymAPGtDKbw7QOduUqvYufg.crl (hash: XJ7+rmlW5PD6T0Xn67lFTDGVB7azQRxRrsJCzaJXCD8=)
                          2: 1FFCF508ADF211EE93DC0A12C4F9AE02.roa (hash: kN/JSLj9TvzMzCv/SkXvYZbvfv6T8T6WGICKq1DXwxA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.crl
                          rsync://rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n7dBtymAPGtDKbw7QOduUqvYufg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 06:55:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 339 (0x153)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7F56, serialNumber=9FB741B729803C6B4329BC3B40E76E52ABD8B9F8
        Validity
            Not Before: Oct 19 06:55:39 2025 GMT
            Not After : Oct 26 06:55:39 2025 GMT
        Subject: CN=68f48b6b-7216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2c:e7:6a:3b:f3:8b:55:2e:f2:1a:bf:02:78:
                    c7:b3:b8:4e:8e:d0:4d:26:5c:12:fe:44:0a:0b:b9:
                    9f:6b:4a:ae:94:a5:7f:56:0e:a5:74:a2:4d:ee:48:
                    f0:98:4b:f8:ba:a0:a1:08:09:90:00:55:15:61:82:
                    11:84:95:d8:77:8f:c1:2f:ef:07:f5:5b:8c:72:6e:
                    53:e1:39:20:ca:49:12:de:b2:22:15:74:ea:dc:92:
                    b0:35:66:d1:f4:93:f1:d2:fa:95:b1:cb:78:24:6b:
                    60:6c:7d:80:96:78:a7:de:b8:42:25:87:67:9c:9d:
                    14:c9:ea:0d:23:88:db:72:12:ec:8d:ce:16:82:81:
                    60:60:40:82:c5:22:6a:0c:07:46:b4:d3:34:21:2f:
                    47:67:b7:bd:c2:b9:9c:5c:40:a1:11:36:dc:b5:b3:
                    7e:8b:23:15:c5:99:64:13:ae:ab:d7:b9:ec:41:98:
                    29:e9:e8:05:b3:42:b7:65:1c:3b:79:a6:7e:07:8e:
                    d0:15:d0:15:a7:61:fe:84:8b:5d:9f:3b:fc:d2:39:
                    8e:43:14:8f:88:98:aa:56:0d:25:8c:49:89:0a:10:
                    a5:31:b0:8e:3e:2a:22:93:0b:bd:86:e4:5e:04:a3:
                    01:a8:3d:88:5e:d7:53:2b:96:f1:22:ef:58:3d:80:
                    8b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:B6:1E:BD:D7:25:B9:AC:1F:8C:25:AF:40:77:64:D7:76:61:E8:1F
            X509v3 Authority Key Identifier:
                keyid:9F:B7:41:B7:29:80:3C:6B:43:29:BC:3B:40:E7:6E:52:AB:D8:B9:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n7dBtymAPGtDKbw7QOduUqvYufg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:ba:67:3f:3e:f5:7d:5f:7b:ba:0c:48:de:89:ec:ee:d5:5b:
         b9:89:6b:d6:e4:47:89:07:7d:35:f6:1b:33:59:8b:9e:6a:48:
         21:35:15:c0:3f:cd:12:62:b7:33:e7:c6:63:de:78:45:63:55:
         68:b5:8e:d9:86:da:28:3c:c4:f9:30:3f:1b:bc:7f:96:c0:14:
         f1:fc:84:4e:61:d0:46:e2:a3:b3:96:3d:76:29:d6:f1:90:d8:
         c8:12:32:ef:0f:7c:84:4f:8d:48:66:5f:a8:3a:77:9b:b0:c0:
         8a:25:ad:ca:e3:8a:25:c1:8f:80:87:9c:a5:9e:43:d1:f7:ce:
         1e:1f:2d:46:b2:5a:c7:ae:21:b4:cf:d2:14:6d:47:35:4c:56:
         39:23:b8:95:ae:c4:68:04:28:c3:ef:97:1d:27:7e:d0:ea:2d:
         e1:a0:5f:70:92:1b:0d:56:2c:82:8f:d9:27:49:08:54:66:d1:
         4f:98:be:46:d6:4a:07:5f:bc:45:8a:05:1a:62:11:33:8f:29:
         d3:f9:27:ee:e3:5e:ad:54:b3:48:3c:67:b8:99:d7:cf:e3:77:
         de:e5:ed:b0:c2:64:43:93:ac:74:07:d9:fc:5b:fa:0c:7e:22:
         e0:0b:a6:d0:65:90:73:5a:e2:4a:02:f9:83:7d:7f:7d:05:0c:
         da:4d:01:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:11:09 2025 by rpki-client