Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.mft
File:                     J7LmYpFIIhNrCWLbtbpEfCU_Uhs.mft (raw, json)
Hash identifier:          6UvFIzFOI19YoA/DquMu7yQWyr328gXBZXFXW25roYY=
Subject key identifier:   3C:AD:0C:27:F8:76:2D:7C:51:CC:71:7C:0E:CC:3C:25:55:B9:6F:0A
Authority key identifier: 27:B2:E6:62:91:48:22:13:6B:09:62:DB:B5:BA:44:7C:25:3F:52:1B
Certificate issuer:       /CN=A91BBCAF/serialNumber=27B2E662914822136B0962DBB5BA447C253F521B
Certificate serial:       0183
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.mft
Manifest number:          017E
Signing time:             Sun 19 Oct 2025 06:22:10 +0000
Manifest this update:     Sun 19 Oct 2025 06:22:09 +0000
Manifest next update:     Sun 26 Oct 2025 06:22:09 +0000
Files and hashes:         1: J7LmYpFIIhNrCWLbtbpEfCU_Uhs.crl (hash: A5F/lW8fMZcPtV0Nj36u+YJvyYt/YW7qe/7nMwdXJsE=)
                          2: D2FA5DBE6C1E11EEBB9EAB7AC4F9AE02.roa (hash: A3UoC+eD4LWvV0sQ3hMRTRUEpIyxxhW+ZYQuaZu5Frk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.crl
                          rsync://rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 06:22:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 387 (0x183)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BBCAF, serialNumber=27B2E662914822136B0962DBB5BA447C253F521B
        Validity
            Not Before: Oct 19 06:22:09 2025 GMT
            Not After : Oct 26 06:22:09 2025 GMT
        Subject: CN=68f48392-9135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4b:cf:55:60:99:b9:8d:54:2d:59:69:75:75:
                    6f:55:82:d8:fd:66:ee:2e:59:ba:8d:6b:75:09:93:
                    48:e3:da:ae:61:b1:ea:07:df:1d:1c:84:bb:d8:d9:
                    b8:88:39:4c:7c:e8:9b:d4:d1:58:96:fe:a3:a9:0b:
                    67:8b:21:e9:3f:e6:69:f1:24:70:59:fd:25:a3:74:
                    1b:08:16:eb:13:bc:38:04:da:d8:d8:3e:da:47:49:
                    9b:df:15:a6:13:5a:b1:69:78:39:ad:c7:09:3e:d4:
                    1a:4f:5d:49:ce:b6:69:3a:d8:7a:e8:19:1a:ec:ed:
                    f3:8a:25:b6:f3:9d:13:c1:c1:86:95:19:3e:0e:13:
                    1f:f0:ef:a7:7d:7d:6f:11:e2:de:73:1f:78:e1:61:
                    3b:75:ef:63:2c:d3:14:e4:26:b2:c7:61:2e:bc:ce:
                    18:8d:88:a7:88:4b:c6:99:33:f8:3c:9f:ac:d6:6e:
                    e5:1a:99:9d:df:6c:59:44:69:79:36:7e:61:36:d1:
                    4a:d5:3a:f7:3e:77:62:75:68:5d:49:e6:37:57:c2:
                    73:8b:c4:1e:93:2b:8b:67:72:6a:3d:f0:69:12:43:
                    a7:c7:6c:dd:ac:fc:d7:be:c9:68:76:f8:ac:26:7e:
                    92:0e:01:76:32:57:34:0f:3a:a2:6d:5b:07:a7:1f:
                    fd:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:AD:0C:27:F8:76:2D:7C:51:CC:71:7C:0E:CC:3C:25:55:B9:6F:0A
            X509v3 Authority Key Identifier:
                keyid:27:B2:E6:62:91:48:22:13:6B:09:62:DB:B5:BA:44:7C:25:3F:52:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:98:24:39:16:8c:e5:5c:cb:f3:46:5d:a0:b2:4e:00:87:ae:
         eb:d9:19:e6:7f:a4:e5:82:55:d0:72:ed:e9:80:a3:5b:bb:76:
         e5:b3:92:1d:4f:cd:5c:81:03:07:9c:32:ff:20:ec:51:35:4b:
         c0:0f:40:7f:12:e8:a3:ad:5c:df:7c:6b:b5:df:32:9d:7e:b3:
         2d:3d:5b:ba:30:7a:cd:6b:b6:10:74:e1:f7:d4:6d:56:b0:b5:
         9a:bc:ef:bd:fc:7d:91:c9:a9:4c:6b:83:f3:82:03:56:ca:2a:
         fd:90:70:ce:6d:6a:5c:82:60:e4:8f:88:ad:ca:bd:8c:34:8c:
         4f:08:f6:03:26:4a:45:f4:92:56:a2:80:72:a6:e2:58:ec:2f:
         1f:29:3f:33:e7:21:76:d0:51:ec:34:45:fb:57:52:06:5c:58:
         28:00:9c:a7:2a:84:4e:53:8c:23:31:b8:fe:0e:62:1e:fb:a3:
         4c:ba:b6:0a:1b:cf:fb:fc:50:c1:c4:1b:46:06:c9:2e:83:3e:
         27:e0:6c:4e:5c:41:ea:c7:69:39:ca:48:1b:4a:75:fa:cc:b5:
         b0:a7:ef:08:18:30:79:b5:54:21:68:f4:6e:8b:87:ca:c7:a6:
         03:97:47:b9:20:42:3f:a7:e7:24:71:cb:20:bc:c3:e7:1e:9a:
         f6:dd:5e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:07:49 2025 by rpki-client