Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft
File:                     -9GoSKH4mo0k2wtoF6CH-y313wg.mft (raw, json)
Hash identifier:          DlguZGf8gfbirR6O/j6cmm5WZ4iiHJHHM2rTBxYKE7Q=
Subject key identifier:   B7:28:F0:AA:E4:71:E2:DA:07:9A:F2:11:1E:24:C3:C6:F7:A2:BF:B9
Authority key identifier: FB:D1:A8:48:A1:F8:9A:8D:24:DB:0B:68:17:A0:87:FB:2D:F5:DF:08
Certificate issuer:       /CN=A91BAFCE/serialNumber=FBD1A848A1F89A8D24DB0B6817A087FB2DF5DF08
Certificate serial:       01F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9GoSKH4mo0k2wtoF6CH-y313wg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft
Manifest number:          01F1
Signing time:             Sun 19 Oct 2025 04:53:16 +0000
Manifest this update:     Sun 19 Oct 2025 04:53:15 +0000
Manifest next update:     Sun 26 Oct 2025 04:53:15 +0000
Files and hashes:         1: -9GoSKH4mo0k2wtoF6CH-y313wg.crl (hash: pIC1fAy6UtEnSZX01nGVlXvGvpVbsU5uc7TQ8KcZ7l8=)
                          2: 37C8FE80B2A211ED9A5C4B53C4F9AE02.roa (hash: RFveBx12nYjQL7C6dI7Z0G+EUk4Kgzyh1OTU3yziD98=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.crl
                          rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9GoSKH4mo0k2wtoF6CH-y313wg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 04:53:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 500 (0x1f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BAFCE, serialNumber=FBD1A848A1F89A8D24DB0B6817A087FB2DF5DF08
        Validity
            Not Before: Oct 19 04:53:15 2025 GMT
            Not After : Oct 26 04:53:15 2025 GMT
        Subject: CN=68f46ebc-f2a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8c:ec:83:66:ae:97:ff:b0:cb:aa:ed:1a:32:
                    54:ef:b4:66:51:a5:b2:ed:24:49:93:57:c1:07:ce:
                    e8:30:39:4d:13:98:4c:19:6c:eb:9d:a0:47:67:59:
                    4b:b6:5a:24:93:10:d5:f7:a7:2e:0f:36:33:82:04:
                    2e:82:69:12:b7:d8:17:1d:db:13:4c:69:93:7f:39:
                    ac:15:2c:42:5a:57:18:59:f2:9b:65:28:f5:53:a8:
                    9b:51:38:13:45:01:25:4c:62:bf:81:f1:0b:21:b3:
                    83:2d:96:ef:f9:72:38:6d:54:e1:50:9e:57:d3:05:
                    2c:bd:5e:0e:b3:b5:a4:c2:4f:f5:72:ad:9f:1b:2d:
                    ec:45:2f:e7:24:4b:1d:97:2f:d4:b8:e8:ef:25:96:
                    2a:53:6d:56:d8:93:67:6d:5d:5a:36:82:35:d9:bf:
                    c6:46:2f:0f:0f:2b:ff:f1:40:19:32:88:ec:86:c6:
                    98:1f:1f:63:d0:62:e3:8e:64:3a:88:b6:61:eb:41:
                    12:e5:73:6f:c9:e7:85:d9:56:4b:55:e0:ce:84:3c:
                    67:63:6b:1e:10:f5:a4:19:03:07:d7:83:77:f3:51:
                    2b:16:7d:8f:5a:d4:d1:a7:ff:62:30:dd:84:bc:8d:
                    4b:5f:e2:ab:e2:5e:89:0b:9b:0b:87:02:97:23:07:
                    21:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:28:F0:AA:E4:71:E2:DA:07:9A:F2:11:1E:24:C3:C6:F7:A2:BF:B9
            X509v3 Authority Key Identifier:
                keyid:FB:D1:A8:48:A1:F8:9A:8D:24:DB:0B:68:17:A0:87:FB:2D:F5:DF:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9GoSKH4mo0k2wtoF6CH-y313wg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:99:87:da:09:e9:67:be:96:e2:4a:57:5f:e7:ff:2d:4d:73:
         e0:5f:61:e3:df:07:18:76:41:ee:09:07:6f:99:bd:70:00:5a:
         fe:dd:a7:6e:e0:fd:d5:38:0e:17:a0:f5:91:cc:ac:59:50:59:
         e9:d0:8d:7e:ce:04:65:f4:2f:f6:89:c8:fc:31:73:71:79:80:
         12:1a:fc:1b:0f:18:46:45:1e:37:66:10:b8:1b:85:af:31:72:
         6e:a9:c3:3b:61:f8:e9:94:c2:94:3b:db:5a:17:a1:7a:32:bc:
         fa:7e:e4:0d:e0:44:c4:fd:49:79:fc:36:d2:7d:fa:e7:6e:fe:
         62:d3:be:f7:45:97:42:f2:ce:7f:a2:27:2c:ac:55:9c:4c:e4:
         86:86:ac:8e:a5:b2:e7:1e:69:4a:99:12:78:36:a1:a0:2f:de:
         2f:bb:d7:ad:33:4a:44:b2:06:48:35:9c:01:7b:1a:dd:cd:6e:
         b8:60:17:ae:e8:21:57:6d:83:9d:cc:e3:4e:1f:1e:b0:0e:f4:
         ca:52:e8:f7:72:f7:ea:8c:72:34:12:76:06:c6:a1:09:3f:74:
         20:61:90:c2:b6:45:0a:38:8e:6b:11:bf:ce:66:df:b3:ce:48:
         f2:27:a8:9c:a2:6a:55:b6:99:b7:9c:fe:23:9e:f1:69:cc:99:
         41:55:a2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:15:01 2025 by rpki-client