Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft
File:                     ZJQ7HSvi-T3WQOAk65TY043OaoM.mft (raw, json)
Hash identifier:          KvCamsfITTjWW0FSXGyIDk/1s7QytrdaX1leYPyFkjI=
Subject key identifier:   96:65:2D:F8:E2:F4:1A:2F:F8:E3:D9:E3:60:87:B2:3E:E7:E5:CE:24
Authority key identifier: 64:94:3B:1D:2B:E2:F9:3D:D6:40:E0:24:EB:94:D8:D3:8D:CE:6A:83
Certificate issuer:       /CN=A91B8F34/serialNumber=64943B1D2BE2F93DD640E024EB94D8D38DCE6A83
Certificate serial:       016B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft
Manifest number:          0156
Signing time:             Sun 19 Oct 2025 07:01:43 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:43 +0000
Manifest next update:     Sun 26 Oct 2025 07:01:43 +0000
Files and hashes:         1: ZJQ7HSvi-T3WQOAk65TY043OaoM.crl (hash: MjV+fPSbACmATP2CbPYpL9e5UoftiNusI74B91xm1BY=)
                          2: D1DEC18AB5B711EEB1FB8657C4F9AE02.roa (hash: pIjFgpXQkNuUPeRzo+5CJIylR9ungXVNTfm0zEXHuWU=)
                          3: 0D5F2416B5B811EEA8ACF557C4F9AE02.roa (hash: gE5e/awh7V8v8LgWL9FQLpqEcqvec4IO81dUfYKKL1g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.crl
                          rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 07:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 363 (0x16b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8F34, serialNumber=64943B1D2BE2F93DD640E024EB94D8D38DCE6A83
        Validity
            Not Before: Oct 19 07:01:43 2025 GMT
            Not After : Oct 26 07:01:43 2025 GMT
        Subject: CN=68f48cd7-a764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:71:5e:e9:37:fa:ec:51:80:e6:86:ce:71:90:
                    31:b2:04:a2:cc:83:bd:10:1c:d6:e2:bd:f6:82:5a:
                    1e:28:4a:0e:18:6c:7a:92:b3:68:55:97:e5:61:d6:
                    e1:68:5e:ac:9d:b3:e8:1f:32:28:18:82:91:c0:a2:
                    dc:ab:10:35:27:23:5b:66:6f:67:73:c5:c8:95:ce:
                    c9:7b:31:b6:29:be:81:b1:46:84:69:6c:9f:cf:92:
                    70:fb:0e:06:5d:b8:f2:ca:29:97:de:e1:30:28:35:
                    1d:5e:09:e7:5c:e8:e4:f8:3b:a5:7d:f7:22:d0:bb:
                    c2:dd:fd:68:dc:74:14:61:b3:5f:28:ac:25:d6:ce:
                    39:27:16:f6:63:69:49:1f:fb:f1:4d:3b:b9:3c:68:
                    83:18:4e:4a:6b:11:f3:9b:c0:93:f0:b6:03:03:79:
                    d8:7c:6d:ea:34:73:d2:2f:11:5b:90:59:54:ca:83:
                    49:3f:3b:32:0d:15:38:ee:e6:b0:d1:14:8e:cd:9c:
                    11:15:4c:1e:d4:97:b4:8e:0c:e5:6b:72:59:c5:03:
                    47:f6:63:d4:54:07:9a:5c:5d:5d:61:82:e0:02:78:
                    76:98:4a:6b:06:0f:bf:a7:71:5a:d4:69:3a:ae:7f:
                    7e:c4:c9:98:b1:ab:fc:c4:8b:b2:76:59:f4:75:41:
                    b2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:65:2D:F8:E2:F4:1A:2F:F8:E3:D9:E3:60:87:B2:3E:E7:E5:CE:24
            X509v3 Authority Key Identifier:
                keyid:64:94:3B:1D:2B:E2:F9:3D:D6:40:E0:24:EB:94:D8:D3:8D:CE:6A:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:0e:b9:88:0e:f3:8f:87:22:6a:a8:b4:c3:50:b1:04:27:b7:
         fd:34:8e:46:e2:d2:cf:99:65:5d:f3:75:96:f6:b3:ee:c0:1c:
         8e:70:88:d5:e2:3d:49:f5:6b:a3:21:aa:ec:56:bc:af:38:42:
         b3:6f:4b:1a:96:c6:7c:18:54:d2:e3:b9:b0:69:33:c3:b5:f3:
         d8:c1:85:9b:a1:25:f0:37:5d:43:7a:18:52:42:62:78:d7:0c:
         9e:19:6a:d8:c8:15:08:9b:ea:5c:54:fa:5c:16:7e:dc:fc:11:
         b9:34:22:9f:0b:17:b8:f6:78:0f:c0:68:0f:db:82:94:c5:04:
         59:04:f2:a5:bf:af:ce:f6:2a:89:95:87:b8:c5:38:ee:47:65:
         5a:6b:7e:47:41:5d:89:c7:a9:f3:db:74:bb:f5:22:ea:92:d1:
         ab:16:0b:28:51:50:9f:3c:e0:43:d6:62:67:49:fd:1f:b2:a8:
         99:bb:a8:e9:69:73:2c:d0:0b:9b:4b:08:ea:c7:c8:e7:e0:9c:
         3f:ac:50:f7:1c:90:54:30:38:2f:41:37:8f:cc:a2:95:e5:13:
         41:55:a1:22:c8:87:45:56:6d:75:68:2f:ea:13:dc:44:96:ca:
         93:6c:29:92:e5:3c:6a:9c:f6:89:49:e8:23:3e:cd:c4:96:e3:
         12:47:f9:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:11:26 2025 by rpki-client