Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.mft
File:                     a81u0JpBbl_k7lre97FQ8syr6To.mft (raw, json)
Hash identifier:          U1hxFIEs3Rx5Byy23py3sUgKj6wAXZ7t3q3n4IEyNv8=
Subject key identifier:   28:44:22:FC:8B:F5:34:F6:5C:34:2A:07:09:A9:4D:9A:E0:F7:EE:97
Authority key identifier: 6B:CD:6E:D0:9A:41:6E:5F:E4:EE:5A:DE:F7:B1:50:F2:CC:AB:E9:3A
Certificate issuer:       /CN=A91ADF12/serialNumber=6BCD6ED09A416E5FE4EE5ADEF7B150F2CCABE93A
Certificate serial:       0BE6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a81u0JpBbl_k7lre97FQ8syr6To.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.mft
Manifest number:          0BD8
Signing time:             Sat 18 Oct 2025 19:43:36 +0000
Manifest this update:     Sat 18 Oct 2025 19:43:35 +0000
Manifest next update:     Sat 25 Oct 2025 19:43:35 +0000
Files and hashes:         1: a81u0JpBbl_k7lre97FQ8syr6To.crl (hash: 7YH7CAFz4zz3QB7t91XDEw/Q90E1kd4VjkoM3gqaYI4=)
                          2: 84B6E12A312911EEBE440C7FC4F9AE02.roa (hash: i5Nf027GIvkDTNfygplCNBH1Tfi56MOYYL7UyT8iFDw=)
                          3: 777A546212E511EFB071A31CC4F9AE02.roa (hash: yxZWVQX9GhcgWV+yYaDkt3bP+W4v1/S4wiH9fdwmAXw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.crl
                          rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a81u0JpBbl_k7lre97FQ8syr6To.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 19:43:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3046 (0xbe6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ADF12, serialNumber=6BCD6ED09A416E5FE4EE5ADEF7B150F2CCABE93A
        Validity
            Not Before: Oct 18 19:43:35 2025 GMT
            Not After : Oct 25 19:43:35 2025 GMT
        Subject: CN=68f3ede7-badc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f7:a2:84:17:81:aa:4a:fc:30:ec:57:e5:d2:
                    f5:90:f5:41:3b:07:9e:9d:bd:94:f0:59:21:16:49:
                    3c:3a:4f:c2:4f:bd:46:65:1b:cf:0a:74:f1:37:a5:
                    74:81:30:a2:3d:d5:d0:d7:a4:20:2d:39:e6:dc:80:
                    27:4b:fa:b8:94:4b:2b:40:a6:ac:ad:ec:64:65:e7:
                    db:22:67:58:f0:54:3b:e9:c8:4a:e0:91:8a:d3:c5:
                    56:5e:74:42:cf:85:e7:a9:2f:87:32:c4:f8:92:34:
                    7f:b2:21:04:9c:eb:26:66:92:76:cd:8f:fd:8f:83:
                    78:a5:de:0c:54:19:fb:e4:e1:a0:96:00:2f:f4:f2:
                    f8:2b:05:d9:56:05:75:99:93:a3:51:7a:51:de:1d:
                    95:3b:08:8b:0e:c4:aa:16:41:d7:cb:8c:44:51:d8:
                    f9:19:6d:e0:4d:20:e5:06:72:b1:b5:44:9d:96:f1:
                    26:d4:d1:ce:f7:c1:b1:61:bf:fd:5e:3a:86:c8:d6:
                    7d:cb:3b:03:43:70:f8:3f:22:42:1d:1a:77:e7:21:
                    66:2f:28:dc:7a:1b:ac:b4:1f:a3:b9:36:cd:88:45:
                    ef:39:f4:c0:09:2f:0a:56:cd:a9:b9:7a:86:17:2c:
                    76:a9:14:c8:54:51:c3:1f:78:d7:b1:42:45:01:d0:
                    4c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:44:22:FC:8B:F5:34:F6:5C:34:2A:07:09:A9:4D:9A:E0:F7:EE:97
            X509v3 Authority Key Identifier:
                keyid:6B:CD:6E:D0:9A:41:6E:5F:E4:EE:5A:DE:F7:B1:50:F2:CC:AB:E9:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a81u0JpBbl_k7lre97FQ8syr6To.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:47:1b:ef:bb:5a:dc:36:17:ed:48:5e:16:e0:2f:6c:3d:2f:
         f9:11:6d:93:e8:8f:3f:74:8a:0a:f1:b4:f9:ae:96:9c:66:9a:
         f7:c4:bc:ff:32:08:0c:c3:1a:e1:00:ee:de:04:e9:8a:15:96:
         92:1d:b5:e8:4d:04:d1:66:6f:3d:39:c7:5f:1b:3a:ae:63:80:
         81:ab:de:4d:43:c6:e1:8f:7f:05:e0:7b:6e:cb:aa:ff:64:4d:
         69:16:15:06:84:c8:ac:3a:3a:5c:cb:61:62:57:73:f2:79:20:
         03:85:d4:4e:d3:c1:54:27:98:ce:53:96:ab:41:ad:48:b6:29:
         2d:b7:f0:c2:69:65:f7:48:2c:19:fe:78:b7:99:f3:ad:50:3b:
         9d:ae:86:e9:dd:b1:c0:78:0d:d0:6d:96:c1:79:6c:35:c5:68:
         15:86:10:f0:99:b4:06:ce:57:29:67:08:27:b7:de:70:23:68:
         3e:01:26:bb:1e:bb:6b:69:47:92:0c:ae:fa:8b:db:7d:2c:9a:
         10:80:27:61:15:d4:56:b5:41:7d:d4:f7:a5:63:7e:8e:1e:23:
         07:87:d2:9c:b0:2c:9b:f6:c5:63:99:17:91:28:7a:7b:17:fe:
         8a:0b:b6:a6:30:11:46:7d:d4:23:b1:8e:d0:5d:ff:cf:75:0d:
         78:a5:91:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:30:50 2025 by rpki-client