Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft
File:                     1fbdY8A4EGCv-8nSDtMPB_veiOo.mft (raw, json)
Hash identifier:          YKOLnrfYvQPp/AeyXl3rAeWA9ZqT6MO0q3SnZXQv95c=
Subject key identifier:   74:70:F0:B5:6F:8F:08:8C:29:AF:71:84:3B:6E:A6:A0:DB:87:AF:D6
Authority key identifier: D5:F6:DD:63:C0:38:10:60:AF:FB:C9:D2:0E:D3:0F:07:FB:DE:88:EA
Certificate issuer:       /CN=A91BBF7F/serialNumber=D5F6DD63C0381060AFFBC9D20ED30F07FBDE88EA
Certificate serial:       0F2F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fbdY8A4EGCv-8nSDtMPB_veiOo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft
Manifest number:          0F17
Signing time:             Sat 18 Oct 2025 18:13:33 +0000
Manifest this update:     Sat 18 Oct 2025 18:13:32 +0000
Manifest next update:     Sat 25 Oct 2025 18:13:32 +0000
Files and hashes:         1: 1fbdY8A4EGCv-8nSDtMPB_veiOo.crl (hash: BPU006WnInYDj10SnsO+MP54tMhyEYOFmNKbJAS3EKw=)
                          2: 656CB24EC9F611ED9853C583C4F9AE02.roa (hash: w9f85Y+KRBnRa0YJSmsDyyhylh1UfaYw453pU7HjF1A=)
                          3: 64554290C9F611ED9853C583C4F9AE02.roa (hash: OKUbU8IYBtUlB8hYEhyLNWGvkxYq3YMYoLZU29fzMeU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.crl
                          rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fbdY8A4EGCv-8nSDtMPB_veiOo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 18:13:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3887 (0xf2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BBF7F, serialNumber=D5F6DD63C0381060AFFBC9D20ED30F07FBDE88EA
        Validity
            Not Before: Oct 18 18:13:32 2025 GMT
            Not After : Oct 25 18:13:32 2025 GMT
        Subject: CN=68f3d8cd-fc33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3d:79:2e:af:f2:46:cd:c6:40:50:a3:9e:03:
                    18:04:1a:43:58:b4:57:f0:46:c5:ae:10:b0:38:fc:
                    b7:98:92:70:c5:4e:60:74:c6:5f:b7:9f:ec:4a:4a:
                    84:3a:0d:b7:6a:5b:1c:3e:fc:88:2b:4e:cd:f0:d7:
                    9b:fa:83:cd:93:16:b7:ff:04:ad:ed:4f:05:3b:2d:
                    d3:a2:79:d8:37:f5:1e:83:10:fe:c8:91:07:26:1a:
                    5d:8b:1d:16:0b:a1:c0:56:d9:53:e1:a0:02:77:12:
                    6d:07:df:bc:f1:95:78:36:b1:4a:86:b5:a7:ce:00:
                    72:0f:31:4b:05:c1:51:e8:97:75:9b:e1:cd:ac:8a:
                    74:d9:cf:7d:94:97:28:bd:76:4f:61:be:94:d8:25:
                    72:c7:ad:58:88:d1:db:bb:4e:ac:4b:f7:07:dd:49:
                    6f:f1:86:a2:fe:29:dd:73:22:3d:96:c0:0d:89:44:
                    5c:fd:cf:6d:6a:68:6d:1e:fe:75:4c:b7:b1:bc:1d:
                    ea:ce:d4:44:43:c1:7b:22:3b:ff:73:ac:92:c8:cd:
                    7c:8d:ed:11:1c:95:5c:6b:9a:37:81:01:c7:b0:e9:
                    99:08:93:25:85:50:62:97:ca:e7:26:b9:75:44:58:
                    22:b0:37:a5:74:7a:6c:eb:21:ac:5a:12:ac:ce:c3:
                    31:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:70:F0:B5:6F:8F:08:8C:29:AF:71:84:3B:6E:A6:A0:DB:87:AF:D6
            X509v3 Authority Key Identifier:
                keyid:D5:F6:DD:63:C0:38:10:60:AF:FB:C9:D2:0E:D3:0F:07:FB:DE:88:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fbdY8A4EGCv-8nSDtMPB_veiOo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:da:ca:50:41:82:c8:43:df:22:8a:45:6f:e1:49:53:ef:ef:
         fa:29:20:6e:11:c9:09:37:da:f7:99:67:7f:72:2e:65:a5:3b:
         7b:80:c3:cb:17:b9:08:0f:3e:e5:0e:01:35:f7:e9:5a:14:06:
         0b:27:9a:54:15:1e:99:5b:09:a2:f5:a9:6b:07:18:e1:1e:f3:
         73:e2:e4:b3:05:43:e2:c7:59:bf:b9:59:70:82:9a:70:45:24:
         70:4e:42:f7:52:24:5e:1d:53:1d:c0:3d:ff:3f:b7:7e:78:aa:
         3a:37:2b:be:96:45:86:29:f5:d4:49:9b:cf:8c:b7:bf:5f:78:
         d6:f0:ae:ab:27:ef:51:15:10:8f:00:4d:f2:f3:0b:36:f3:de:
         07:46:d8:e4:e5:e2:58:28:d6:21:9f:a0:af:f9:fb:73:1d:a3:
         48:86:6c:b7:09:90:61:71:7c:2d:d2:5d:76:a0:ac:9b:69:02:
         d8:d7:36:a5:18:6d:a6:29:84:80:37:f4:9a:42:86:89:38:29:
         a5:bb:21:ee:fa:e7:e3:b2:f5:c9:93:d0:a1:da:dd:00:c8:b3:
         27:53:82:6b:55:fa:11:62:05:62:05:74:26:7c:75:48:19:05:
         97:64:cc:b3:c2:f2:b0:23:a4:de:8d:2b:04:f3:21:15:1e:05:
         af:40:4f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:55:52 2025 by rpki-client