Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/0yZ6-fuWkInDwSr-v9D96b2GdYE.mft
File:                     0yZ6-fuWkInDwSr-v9D96b2GdYE.mft (raw, json)
Hash identifier:          bsF0EYVwu0RtfivR+KjmU98v9rce5q4yEtOW7gitPW0=
Subject key identifier:   B4:33:EF:D9:F3:31:20:4B:7B:9A:10:6B:9A:DE:CF:C8:4E:D7:E3:E0
Authority key identifier: D3:26:7A:F9:FB:96:90:89:C3:C1:2A:FE:BF:D0:FD:E9:BD:86:75:81
Certificate issuer:       /CN=A91ACF30/serialNumber=D3267AF9FB969089C3C12AFEBFD0FDE9BD867581
Certificate serial:       0844
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0yZ6-fuWkInDwSr-v9D96b2GdYE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/0yZ6-fuWkInDwSr-v9D96b2GdYE.mft
Manifest number:          082E
Signing time:             Sat 18 Oct 2025 22:02:58 +0000
Manifest this update:     Sat 18 Oct 2025 22:02:57 +0000
Manifest next update:     Sat 25 Oct 2025 22:02:57 +0000
Files and hashes:         1: 0yZ6-fuWkInDwSr-v9D96b2GdYE.crl (hash: AcpSCal7qOW6lp0D1lMb2kF/GItGtxysy24UxIE+b8E=)
                          2: 4EEEF95AEA4311EE86C1DD73C4F9AE02.roa (hash: vK7zDAtMwxZ46qmtLmdd+XyPCpBAd+F+Ur4M7PgRHvc=)
                          3: 40965650EA4311EEA09F786BC4F9AE02.roa (hash: ag0QXLN9VhtP4YSxCpypnephnV4TdElKmf1LeX8WRbs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/0yZ6-fuWkInDwSr-v9D96b2GdYE.crl
                          rsync://rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/0yZ6-fuWkInDwSr-v9D96b2GdYE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0yZ6-fuWkInDwSr-v9D96b2GdYE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 22:02:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2116 (0x844)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ACF30, serialNumber=D3267AF9FB969089C3C12AFEBFD0FDE9BD867581
        Validity
            Not Before: Oct 18 22:02:57 2025 GMT
            Not After : Oct 25 22:02:57 2025 GMT
        Subject: CN=68f40e91-364c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:00:00:de:47:05:f8:22:c1:9f:9c:aa:d8:83:
                    7b:43:38:a1:6f:f5:1f:39:46:c2:8d:5b:74:75:40:
                    b2:38:ac:11:91:9d:4c:ec:d1:11:f5:06:61:95:f0:
                    44:17:d2:be:c6:d8:70:af:6b:b6:57:46:47:f7:3c:
                    eb:21:08:10:68:5e:b1:b7:ea:1f:1e:b8:1d:e2:b7:
                    51:54:1a:8f:02:56:75:cb:41:67:dd:93:43:10:ba:
                    ab:10:fe:0b:07:fb:a6:57:17:59:71:bf:06:81:51:
                    60:16:3a:85:1e:95:d0:15:3d:e0:5b:dd:3a:66:b8:
                    91:dc:f6:23:0d:33:e8:63:87:f1:77:6b:41:53:4b:
                    a9:94:42:5b:c0:cc:4f:4f:56:c0:89:87:c9:e7:d2:
                    25:7c:ba:78:c2:2a:30:4c:1e:82:eb:85:39:1d:eb:
                    68:09:d1:84:ea:33:10:2b:08:a3:42:62:45:49:03:
                    d4:5b:fa:86:77:65:51:5e:65:1f:05:19:4c:d7:35:
                    d2:52:c4:54:9c:41:a0:0c:b8:84:19:d7:62:a3:96:
                    55:ec:c9:1a:22:e2:88:07:b3:14:d1:1c:c8:e0:e1:
                    99:b1:23:a0:33:cc:0c:8f:c3:c7:c1:b2:97:90:b3:
                    7d:6f:3a:b1:e6:8c:0e:d3:27:28:ce:11:b6:42:02:
                    de:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:33:EF:D9:F3:31:20:4B:7B:9A:10:6B:9A:DE:CF:C8:4E:D7:E3:E0
            X509v3 Authority Key Identifier:
                keyid:D3:26:7A:F9:FB:96:90:89:C3:C1:2A:FE:BF:D0:FD:E9:BD:86:75:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/0yZ6-fuWkInDwSr-v9D96b2GdYE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0yZ6-fuWkInDwSr-v9D96b2GdYE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/0yZ6-fuWkInDwSr-v9D96b2GdYE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:79:2d:84:34:66:8b:81:1d:da:69:fb:fc:ac:3f:f7:f1:25:
         48:4a:80:29:e9:51:51:29:ad:7f:3d:35:28:25:17:15:8b:2e:
         fd:1b:24:53:33:c1:d3:40:bd:e4:3f:b0:44:cf:4c:e6:7b:0f:
         6e:d7:69:39:9f:0f:a5:b9:28:ac:e3:86:6b:09:fb:b0:aa:0e:
         d9:12:7c:11:7b:fc:b5:e8:c7:d3:02:41:92:d9:08:83:a1:3b:
         16:af:7a:ce:ad:d2:d4:9a:ca:6f:02:c4:f1:86:8a:20:75:bb:
         2e:67:d0:d6:2b:9b:18:c0:fb:5c:25:57:3c:b6:65:1c:44:a3:
         46:32:50:38:0b:33:77:5e:1c:57:25:ef:c5:8a:dc:10:02:94:
         c0:00:db:30:5f:4e:05:03:d7:a0:7f:a5:9b:2f:27:c6:49:c1:
         ac:cd:c7:88:01:91:5d:f3:18:da:2f:8c:d0:4b:3c:63:8e:50:
         d0:ce:b3:1d:31:b2:2b:a2:15:f6:00:a3:35:08:f5:f3:b9:14:
         a4:df:ff:1b:e4:20:a5:28:9e:64:29:24:e0:dd:65:ce:8d:f2:
         97:64:bf:19:cd:87:32:3b:bd:fa:37:de:81:be:47:38:d5:19:
         6c:5a:55:fa:ab:ca:da:59:ab:9a:96:9d:fa:76:dd:d0:da:48:
         9a:f0:3a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:14:59 2025 by rpki-client