Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5BD4/08AD6D226DB811ED8833FA0DC4F9AE02/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.mft
File:                     rUH7gn-TEEuJ-m-nhfIRUL5vl5o.mft (raw, json)
Hash identifier:          UA/XT1fQtOGB9qyEDWVIztQrL5i6OdNu54W2D02mYlk=
Subject key identifier:   D9:8B:92:D7:B9:24:02:8A:E4:AA:A4:D2:62:38:02:06:B5:43:0F:F1
Authority key identifier: AD:41:FB:82:7F:93:10:4B:89:FA:6F:A7:85:F2:11:50:BE:6F:97:9A
Certificate issuer:       /CN=A91B5BD4/serialNumber=AD41FB827F93104B89FA6FA785F21150BE6F979A
Certificate serial:       0224
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5BD4/08AD6D226DB811ED8833FA0DC4F9AE02/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.mft
Manifest number:          021F
Signing time:             Sun 19 Oct 2025 04:21:35 +0000
Manifest this update:     Sun 19 Oct 2025 04:21:34 +0000
Manifest next update:     Sun 26 Oct 2025 04:21:34 +0000
Files and hashes:         1: rUH7gn-TEEuJ-m-nhfIRUL5vl5o.crl (hash: xNK5AoKQejTZggnHHBkVgEgu/Q6Sq2Kx2jhNlU1XvHc=)
                          2: C248DFA26DBB11EDB3635D28C4F9AE02.roa (hash: gQzK7hVZPrZ6aKsXhdiMNjPzCoQYQhoW/DlG0FlsTCE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5BD4/08AD6D226DB811ED8833FA0DC4F9AE02/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.crl
                          rsync://rpki.apnic.net/member_repository/A91B5BD4/08AD6D226DB811ED8833FA0DC4F9AE02/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 04:21:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 548 (0x224)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5BD4, serialNumber=AD41FB827F93104B89FA6FA785F21150BE6F979A
        Validity
            Not Before: Oct 19 04:21:34 2025 GMT
            Not After : Oct 26 04:21:34 2025 GMT
        Subject: CN=68f4674e-5f24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:20:c7:18:d6:09:fb:b8:1c:02:7b:dc:f5:92:
                    22:cd:06:be:0f:d0:62:5e:ea:55:7c:cb:b2:be:ad:
                    1a:da:fb:81:dd:c0:39:ea:49:68:0e:64:b8:68:66:
                    49:33:ee:29:09:60:f6:60:4a:a1:6c:c1:33:71:95:
                    21:47:bd:35:16:ef:d5:95:6e:28:5c:ef:07:93:7f:
                    50:2c:6c:bd:36:3d:7e:79:34:1c:fe:33:90:cc:ab:
                    42:c6:9a:7f:a0:a3:3e:f4:79:54:07:35:6c:49:89:
                    52:ab:4d:f9:9c:66:d0:94:0b:9b:f2:28:01:29:9b:
                    e9:af:d5:9a:37:c2:4d:5d:58:3e:12:66:5a:53:de:
                    bf:84:da:94:7b:9b:ce:81:91:a7:1c:e2:70:3d:8e:
                    07:e3:88:9a:60:d8:f0:e2:2b:73:df:52:64:c6:fc:
                    f2:ff:b7:ee:15:a8:ed:f3:ac:5b:5b:a7:85:a1:b3:
                    5e:a0:46:60:4b:c6:e3:22:a3:0c:21:c8:86:19:17:
                    47:89:f1:e6:c9:d6:42:7c:9e:0b:90:9f:5b:f0:0d:
                    88:55:64:a4:9b:0a:6c:c3:a7:0d:37:5e:62:5e:9f:
                    98:b0:cd:3b:9c:07:eb:66:1f:58:ed:9e:fd:9e:67:
                    36:e6:3b:f2:9b:57:75:9d:d0:42:ed:90:5a:69:a8:
                    2e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:8B:92:D7:B9:24:02:8A:E4:AA:A4:D2:62:38:02:06:B5:43:0F:F1
            X509v3 Authority Key Identifier:
                keyid:AD:41:FB:82:7F:93:10:4B:89:FA:6F:A7:85:F2:11:50:BE:6F:97:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5BD4/08AD6D226DB811ED8833FA0DC4F9AE02/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5BD4/08AD6D226DB811ED8833FA0DC4F9AE02/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:32:c8:47:2f:61:14:be:f2:9d:f5:ce:5a:e0:18:99:bf:22:
         fa:31:3e:0b:c7:66:71:0d:04:c9:15:02:11:95:bf:70:df:2a:
         d8:bd:a3:ee:fd:d8:63:c7:43:a2:2e:90:96:a7:7d:ef:24:64:
         5e:b9:8d:ab:13:b3:68:87:13:8a:4e:d4:ab:5b:37:dd:f0:b5:
         fc:3b:a6:a0:c5:1a:d9:8a:64:bb:1e:17:19:c5:50:04:b7:dd:
         d2:d5:bd:44:80:47:4e:49:e2:4a:c1:2c:1c:b4:bf:3d:ca:c6:
         1c:3d:3c:86:26:b2:77:07:5b:79:f6:eb:bc:54:53:96:35:96:
         5a:b2:ff:8c:45:6d:ed:ed:e3:22:65:9d:4b:d9:b0:1b:55:72:
         b9:31:0b:07:ca:9a:0d:07:74:a6:40:da:89:ba:fb:c8:4e:20:
         e7:b6:bf:b0:4a:8b:f6:a7:aa:46:02:ae:ef:5d:c2:26:f0:44:
         fd:2e:3c:bf:3d:f1:23:23:9c:76:53:a1:bb:4c:98:b8:9e:39:
         3b:4b:e2:9c:09:39:fc:7f:8c:e2:98:7a:84:4f:16:eb:23:c3:
         ab:77:69:29:c9:e0:86:bc:cb:14:99:e6:d7:f8:9e:85:cd:a7:
         dc:89:59:b3:86:21:66:06:87:59:54:10:24:90:3b:6b:8f:b9:
         63:cc:26:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:38:36 2025 by rpki-client