Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft
File:                     eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft (raw, json)
Hash identifier:          ZrTs2qy6qq+ILI7uMlqeUosSH8xaMBSkOhF992qVK4s=
Subject key identifier:   32:C3:3B:A6:18:F4:4C:A9:CA:B9:5C:A9:68:94:A2:6E:B8:00:41:D5
Authority key identifier: 79:75:03:3D:C5:D4:54:0F:16:AE:C1:21:28:6E:C4:14:CA:78:7D:6F
Certificate issuer:       /CN=A91BC5BC/serialNumber=7975033DC5D4540F16AEC121286EC414CA787D6F
Certificate serial:       09FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eXUDPcXUVA8WrsEhKG7EFMp4fW8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft
Manifest number:          09F4
Signing time:             Sat 18 Oct 2025 20:54:39 +0000
Manifest this update:     Sat 18 Oct 2025 20:54:39 +0000
Manifest next update:     Sat 25 Oct 2025 20:54:39 +0000
Files and hashes:         1: eXUDPcXUVA8WrsEhKG7EFMp4fW8.crl (hash: su2Kal1SeL4f4xWxgk1qu6JMszC9v+alrCkda9Umm7o=)
                          2: B1AF1C9C862311EA9052C281C4F9AE02.roa (hash: j3TvpWzSPFDlAyo3sD7Pw75i2w5zEIxOHyTqJM4+nXQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.crl
                          rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eXUDPcXUVA8WrsEhKG7EFMp4fW8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 20:54:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2555 (0x9fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC5BC, serialNumber=7975033DC5D4540F16AEC121286EC414CA787D6F
        Validity
            Not Before: Oct 18 20:54:39 2025 GMT
            Not After : Oct 25 20:54:39 2025 GMT
        Subject: CN=68f3fe8f-53d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e9:7f:66:9d:bd:3b:16:73:0c:99:13:d6:fb:
                    ad:ab:2b:d5:8b:0a:ad:ab:0c:21:58:1a:b5:36:99:
                    19:56:0c:97:41:9b:75:30:39:71:0d:98:4b:9f:8d:
                    a9:19:fe:f3:3a:9c:27:21:46:0a:c8:b3:e7:eb:d7:
                    79:f3:de:db:15:62:2b:9d:b5:b9:d6:87:7f:04:42:
                    77:48:4f:ce:6a:ea:a9:5d:48:01:0f:b5:16:f4:70:
                    f4:04:64:55:a8:29:05:cb:44:57:8a:0f:54:5c:26:
                    01:bf:18:52:9e:cb:62:b1:96:01:14:d1:6d:19:76:
                    12:62:21:51:c0:1c:fb:02:02:aa:f6:43:e8:c4:44:
                    45:09:2b:c5:aa:cf:d8:f9:a4:30:34:90:99:ca:93:
                    d7:b2:f4:0f:a2:68:a9:72:24:0a:dc:81:e7:b1:09:
                    b8:ce:63:df:1b:75:8e:76:19:12:5b:cb:85:73:a1:
                    99:11:c3:44:57:7b:87:db:9d:ff:c8:97:47:cc:ef:
                    cc:ee:25:2c:16:b8:a9:2c:d5:8a:46:1d:cf:e3:6b:
                    6a:21:f2:d7:74:17:ea:ae:c1:87:31:68:ad:32:5f:
                    1f:33:75:a2:95:36:27:da:f3:b4:53:24:85:fb:84:
                    c2:89:e6:20:5f:cc:a5:9a:e7:dd:ed:7d:39:71:d9:
                    20:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:C3:3B:A6:18:F4:4C:A9:CA:B9:5C:A9:68:94:A2:6E:B8:00:41:D5
            X509v3 Authority Key Identifier:
                keyid:79:75:03:3D:C5:D4:54:0F:16:AE:C1:21:28:6E:C4:14:CA:78:7D:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eXUDPcXUVA8WrsEhKG7EFMp4fW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:f1:37:53:1b:16:6f:48:ab:8b:17:c8:ed:17:b3:b7:61:3d:
         73:84:1d:13:95:0a:f9:c7:2d:6b:32:1f:21:fe:4d:83:33:64:
         e8:2d:b5:a4:26:c4:33:15:c4:68:39:a5:a9:49:12:38:43:92:
         4f:26:05:95:cf:62:ac:4e:24:c9:8f:99:ac:4b:2e:46:6b:e8:
         70:6d:cb:26:bb:d6:b2:21:4d:ab:2d:fe:44:1e:62:03:b0:88:
         9b:01:82:ec:5e:b8:a4:3f:fb:f8:8f:08:ab:5c:f8:5b:c6:35:
         1a:95:a3:8a:1c:d6:e9:2c:be:97:ab:fc:2d:3c:0d:03:7f:d9:
         22:38:24:a8:d9:8e:9b:87:23:9e:d5:69:f6:16:d4:07:6f:67:
         d6:32:89:0d:28:33:0d:7f:b5:6f:70:24:9b:1c:5a:07:27:a9:
         92:4d:ca:ac:70:e8:b2:b6:2d:98:cc:f3:e8:27:5e:5e:54:93:
         5d:01:46:bb:78:3d:3b:fc:41:48:f3:ba:e2:0f:b0:bd:ee:57:
         50:fa:ab:56:00:1e:74:ca:b7:8e:a2:ff:8a:10:fc:0a:90:40:
         07:3d:bc:01:e8:3f:0c:df:3b:06:3c:57:02:c2:3a:70:43:ff:
         67:af:fe:14:bb:55:90:5c:8d:c0:a2:83:d8:53:64:60:6f:58:
         9a:16:0e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:37:14 2025 by rpki-client