Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF15E/94B2D376031D11ED99F29E1CC4F9AE02/u759h-rKuKMp6DvLD_fVAIi-Cc0.mft
File:                     u759h-rKuKMp6DvLD_fVAIi-Cc0.mft (raw, json)
Hash identifier:          Uj+4w9SgQKLZN0XnaShkCMl3X2VGYPT3qlxUcVNou7U=
Subject key identifier:   01:23:F5:7E:2A:8A:39:A0:3B:96:FD:DE:4E:97:ED:F7:27:EB:76:F1
Authority key identifier: BB:BE:7D:87:EA:CA:B8:A3:29:E8:3B:CB:0F:F7:D5:00:88:BE:09:CD
Certificate issuer:       /CN=A91AF15E/serialNumber=BBBE7D87EACAB8A329E83BCB0FF7D50088BE09CD
Certificate serial:       02D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u759h-rKuKMp6DvLD_fVAIi-Cc0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF15E/94B2D376031D11ED99F29E1CC4F9AE02/u759h-rKuKMp6DvLD_fVAIi-Cc0.mft
Manifest number:          02D7
Signing time:             Sun 19 Oct 2025 03:26:10 +0000
Manifest this update:     Sun 19 Oct 2025 03:26:09 +0000
Manifest next update:     Sun 26 Oct 2025 03:26:09 +0000
Files and hashes:         1: u759h-rKuKMp6DvLD_fVAIi-Cc0.crl (hash: hzF0tH+FOyp00JTfFLNQDTByWtzVkfDgSprDOsiGGzk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF15E/94B2D376031D11ED99F29E1CC4F9AE02/u759h-rKuKMp6DvLD_fVAIi-Cc0.crl
                          rsync://rpki.apnic.net/member_repository/A91AF15E/94B2D376031D11ED99F29E1CC4F9AE02/u759h-rKuKMp6DvLD_fVAIi-Cc0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u759h-rKuKMp6DvLD_fVAIi-Cc0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 03:26:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 727 (0x2d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF15E, serialNumber=BBBE7D87EACAB8A329E83BCB0FF7D50088BE09CD
        Validity
            Not Before: Oct 19 03:26:09 2025 GMT
            Not After : Oct 26 03:26:09 2025 GMT
        Subject: CN=68f45a51-e856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:69:3b:35:61:f0:fd:c4:42:06:e1:02:ff:29:
                    ff:97:10:e5:30:15:d9:c3:b2:bf:9b:78:be:c5:5e:
                    6b:d5:3d:a7:ad:c5:58:fe:86:35:b4:24:db:e8:e9:
                    17:74:38:e7:8f:12:fc:f8:3a:b6:07:60:1e:37:f0:
                    e2:b1:24:b1:fc:ac:26:13:df:c6:3b:6f:94:ee:e1:
                    02:f7:3d:16:85:8c:25:86:bd:6d:51:62:13:cc:08:
                    62:f3:ed:84:cd:bb:a2:4f:02:56:ae:61:08:e5:1d:
                    b4:f5:77:57:fd:da:84:4f:e2:9d:ce:86:68:cb:9e:
                    1e:dc:16:5c:9f:4f:ff:1a:b9:07:3d:51:d9:c3:b5:
                    34:cb:45:39:85:f2:6c:dc:3e:80:15:f1:a5:04:a1:
                    8a:60:17:f9:44:0d:98:49:46:86:7f:bf:a5:b3:8b:
                    bb:7b:bd:f3:18:66:7b:a1:be:c8:36:60:5d:fa:55:
                    26:27:5d:2b:0a:36:bb:60:6f:f8:07:8c:bb:6a:a6:
                    24:85:f6:fc:85:27:fd:e8:45:af:66:d7:73:7b:59:
                    aa:50:03:34:11:21:11:48:3c:5f:e3:70:41:4a:b2:
                    08:f6:16:b8:95:ae:38:79:11:40:4f:82:38:cb:ba:
                    19:ff:cb:94:81:f3:60:cf:f6:dc:75:9b:fa:94:94:
                    4f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:23:F5:7E:2A:8A:39:A0:3B:96:FD:DE:4E:97:ED:F7:27:EB:76:F1
            X509v3 Authority Key Identifier:
                keyid:BB:BE:7D:87:EA:CA:B8:A3:29:E8:3B:CB:0F:F7:D5:00:88:BE:09:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF15E/94B2D376031D11ED99F29E1CC4F9AE02/u759h-rKuKMp6DvLD_fVAIi-Cc0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u759h-rKuKMp6DvLD_fVAIi-Cc0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF15E/94B2D376031D11ED99F29E1CC4F9AE02/u759h-rKuKMp6DvLD_fVAIi-Cc0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:66:7d:b0:7b:ca:95:02:b2:1a:c2:50:44:5d:49:dc:66:e5:
         9b:fd:b4:dc:4a:51:80:08:73:59:82:db:a4:e8:f9:9e:ac:39:
         e3:69:df:34:db:87:61:b6:c4:b0:7d:ce:0a:e4:18:dc:f4:dd:
         57:d8:46:7d:cd:75:66:c6:aa:ab:6f:a1:73:8d:9f:67:0d:58:
         a3:aa:97:44:28:b0:4f:3b:13:fb:72:00:d4:b2:a3:9f:34:00:
         06:fd:2d:4b:ff:8a:a2:61:04:76:4f:d2:42:8f:9e:e0:17:d5:
         99:40:3b:d6:1e:f8:b9:2c:f0:f1:4c:9a:93:5c:d3:f9:9a:31:
         3b:7d:aa:ea:14:3d:6a:fe:c6:90:de:08:22:be:ba:d6:09:10:
         60:07:1e:8c:97:d0:72:c5:f1:40:e1:9b:19:d9:c2:c5:c7:92:
         0d:c3:35:a7:74:89:d2:b7:66:cd:56:ab:d9:2f:bd:64:72:70:
         5a:7d:5a:d5:76:40:03:19:25:5e:9b:ad:d3:bf:3a:55:85:f7:
         cf:47:95:e4:3f:97:67:8c:ca:7b:6e:14:2b:bb:1a:e2:57:ae:
         81:6f:a3:2f:1e:5a:4c:6d:20:d8:ac:21:74:df:7d:8b:07:ff:
         4c:bc:d4:55:d7:26:45:df:dd:df:6a:78:89:26:71:0d:77:91:
         4b:e0:61:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:49:32 2025 by rpki-client