Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8FA2/91B7DF4C66C211ECB55A9F31C4F9AE02/83-esXYeax0_fqbWxvyluZc5FKs.mft
File:                     83-esXYeax0_fqbWxvyluZc5FKs.mft (raw, json)
Hash identifier:          19bNYwfqP1IPcn9be6AJmN6tTCMlqAZqKvgrO0grmsk=
Subject key identifier:   11:71:81:0A:26:B9:51:27:EE:88:F5:66:5A:CE:5A:63:B1:E0:69:46
Authority key identifier: F3:7F:9E:B1:76:1E:6B:1D:3F:7E:A6:D6:C6:FC:A5:B9:97:39:14:AB
Certificate issuer:       /CN=A91B8FA2/serialNumber=F37F9EB1761E6B1D3F7EA6D6C6FCA5B9973914AB
Certificate serial:       046D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83-esXYeax0_fqbWxvyluZc5FKs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8FA2/91B7DF4C66C211ECB55A9F31C4F9AE02/83-esXYeax0_fqbWxvyluZc5FKs.mft
Manifest number:          0468
Signing time:             Sun 19 Oct 2025 02:02:46 +0000
Manifest this update:     Sun 19 Oct 2025 02:02:46 +0000
Manifest next update:     Sun 26 Oct 2025 02:02:46 +0000
Files and hashes:         1: 83-esXYeax0_fqbWxvyluZc5FKs.crl (hash: Cf8yHvzh7EROHEPgPpBF1IqaJcdttn0MfFYsBTXUrho=)
                          2: FEDE0F2066C611EC93A73A3DC4F9AE02.roa (hash: OrbaAoDN+OT8Q5oOwIoJmcxxZsgOvnH47cr4vwyZT3M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8FA2/91B7DF4C66C211ECB55A9F31C4F9AE02/83-esXYeax0_fqbWxvyluZc5FKs.crl
                          rsync://rpki.apnic.net/member_repository/A91B8FA2/91B7DF4C66C211ECB55A9F31C4F9AE02/83-esXYeax0_fqbWxvyluZc5FKs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83-esXYeax0_fqbWxvyluZc5FKs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 02:02:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1133 (0x46d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8FA2, serialNumber=F37F9EB1761E6B1D3F7EA6D6C6FCA5B9973914AB
        Validity
            Not Before: Oct 19 02:02:46 2025 GMT
            Not After : Oct 26 02:02:46 2025 GMT
        Subject: CN=68f446c6-ddd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:cd:9e:c1:ce:83:e0:7a:74:24:b7:5d:b9:38:
                    c1:95:ef:e7:fd:61:a9:1d:a5:1a:18:c3:03:2d:cd:
                    96:63:15:9c:59:79:12:d9:87:5d:66:59:c5:1a:5e:
                    e0:04:b3:20:8e:7b:63:e2:45:fc:3f:17:4b:cb:93:
                    78:db:c7:ba:74:70:62:3f:da:ee:15:cc:c5:83:96:
                    27:ce:70:8b:e7:6e:36:be:1c:56:28:de:5a:a4:32:
                    d7:e3:57:5c:32:1f:ce:bf:af:d4:62:f1:23:a1:34:
                    84:d9:93:f3:7b:ba:5a:17:0c:5c:e3:9e:ab:80:bd:
                    3a:a3:fe:71:13:ff:01:28:1d:e6:ed:bb:9e:3d:55:
                    c9:62:20:4c:63:36:9f:46:59:ab:2b:bf:4c:f0:08:
                    e7:82:16:23:a1:f0:f5:af:5d:5d:09:64:bb:ef:12:
                    ca:44:18:48:d2:e0:a6:2c:08:16:9e:fa:07:9d:11:
                    ae:44:f6:ab:79:3b:e0:81:df:ce:c9:a2:e2:1a:5f:
                    45:02:d0:cb:8f:f2:8a:2c:8b:1d:32:3b:f2:ed:75:
                    e4:70:cc:50:d8:47:45:58:6c:4f:7e:e7:9a:c5:b9:
                    68:1e:db:82:d8:9c:ac:fb:ac:de:d0:d6:c8:52:91:
                    4d:e9:43:34:42:96:f3:45:f0:26:48:b1:2b:30:d1:
                    74:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:71:81:0A:26:B9:51:27:EE:88:F5:66:5A:CE:5A:63:B1:E0:69:46
            X509v3 Authority Key Identifier:
                keyid:F3:7F:9E:B1:76:1E:6B:1D:3F:7E:A6:D6:C6:FC:A5:B9:97:39:14:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8FA2/91B7DF4C66C211ECB55A9F31C4F9AE02/83-esXYeax0_fqbWxvyluZc5FKs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83-esXYeax0_fqbWxvyluZc5FKs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8FA2/91B7DF4C66C211ECB55A9F31C4F9AE02/83-esXYeax0_fqbWxvyluZc5FKs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:d2:33:57:97:8b:9c:9e:8b:a2:c6:da:97:9d:5e:00:91:7b:
         21:75:e2:87:33:66:d1:6c:96:14:53:2a:e4:69:c3:3a:03:85:
         fe:69:c8:ff:3d:e7:0f:52:13:23:10:0e:e1:ad:9f:23:66:3c:
         66:98:26:97:38:5e:9c:a2:5b:95:b2:ae:f2:40:12:97:46:e5:
         d7:b7:8a:45:52:83:a6:a9:82:3b:be:93:ba:74:52:f1:41:ec:
         a3:0f:8e:29:8e:8d:31:f7:e0:15:ad:3c:e8:fe:09:ac:c9:b9:
         2c:1c:4d:f6:68:3f:ef:23:59:2d:82:06:56:b7:f1:68:52:59:
         00:83:8f:e4:36:59:19:7a:50:67:eb:b0:6c:2e:15:46:b5:15:
         f5:68:51:47:2c:9c:ec:54:87:a0:ad:f0:13:94:1d:84:1b:61:
         4c:cc:5f:98:c4:3d:c3:1a:93:7c:30:3b:21:75:f6:8a:fe:3f:
         98:b9:77:6c:c0:cd:e6:9a:29:15:d5:8e:c2:4f:e5:40:b0:48:
         b0:90:52:07:9e:ad:40:62:cd:02:38:f3:09:9a:55:2e:91:13:
         63:c9:31:87:ed:86:79:99:70:18:b7:6c:fe:8e:3e:94:11:26:
         8d:ed:ca:34:be:05:4c:0f:6b:4c:1f:fe:48:07:fd:a3:51:75:
         e5:63:e5:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:18:27 2025 by rpki-client