Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft
File:                     mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft (raw, json)
Hash identifier:          Jg/2EemT0aWbrHIYYEojaeEnHJgzJDacuDczQCrceGQ=
Subject key identifier:   1D:E5:0E:0B:27:47:E8:B7:45:54:6F:8D:70:3F:F8:75:74:62:65:19
Authority key identifier: 98:9F:89:D6:8C:86:83:4A:F8:2D:9D:27:D1:6E:55:C0:9A:6E:F7:BC
Certificate issuer:       /CN=A91BE6D3/serialNumber=989F89D68C86834AF82D9D27D16E55C09A6EF7BC
Certificate serial:       04EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft
Manifest number:          04E4
Signing time:             Sun 19 Oct 2025 01:33:16 +0000
Manifest this update:     Sun 19 Oct 2025 01:33:16 +0000
Manifest next update:     Sun 26 Oct 2025 01:33:16 +0000
Files and hashes:         1: mJ-J1oyGg0r4LZ0n0W5VwJpu97w.crl (hash: I8pVgU1Ne0SdHRum3Q/IZhbrCErHROzezKWr9oZQJ6U=)
                          2: FB782FD2721311EE8754E20FC4F9AE02.roa (hash: xJGsHqGgFbOugl0Yth4s2pEmidaRE24uLNoUNasacRI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.crl
                          rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 01:33:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1258 (0x4ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BE6D3, serialNumber=989F89D68C86834AF82D9D27D16E55C09A6EF7BC
        Validity
            Not Before: Oct 19 01:33:16 2025 GMT
            Not After : Oct 26 01:33:16 2025 GMT
        Subject: CN=68f43fdc-bf93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:36:76:91:10:57:b2:b1:9a:01:35:88:97:e5:
                    b5:48:4f:d3:78:c9:df:ff:8b:31:28:27:2a:07:a7:
                    19:b2:d1:e3:c1:16:38:df:38:db:20:e1:e9:df:e7:
                    26:9a:37:6a:9f:c4:ad:43:7c:75:26:1b:d9:7a:67:
                    db:c9:34:42:1b:69:3e:12:43:27:a4:79:67:47:e3:
                    c5:ce:4a:f6:1d:f2:4f:c6:dd:2a:73:1c:57:60:44:
                    8b:d9:8b:6f:70:d3:4e:15:c4:12:73:90:5d:76:4f:
                    58:63:bc:f1:66:d8:37:a4:4d:f2:11:f4:d2:1e:81:
                    e5:58:da:43:2f:59:17:7d:f0:7b:a1:ba:2e:31:a1:
                    da:87:c2:2a:fe:f8:c0:fd:ec:92:f5:6b:8d:ed:e4:
                    d3:32:4d:09:bb:53:6a:97:fe:64:9f:a7:a5:c5:27:
                    af:ce:a2:29:7b:1f:00:3a:c3:75:46:cb:99:70:d3:
                    c6:e3:61:6a:17:e6:00:97:f7:f0:ce:ce:f5:35:b6:
                    04:cd:ba:a3:13:72:b2:6a:1e:b2:dc:78:de:f3:2a:
                    9c:96:b7:52:59:80:98:b7:6a:eb:e6:7f:82:34:bb:
                    f2:5c:74:c9:0f:8d:d4:3f:ba:6b:21:35:94:f4:0f:
                    5a:93:c0:15:90:c5:a8:83:68:1a:e5:86:c4:87:f7:
                    53:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:E5:0E:0B:27:47:E8:B7:45:54:6F:8D:70:3F:F8:75:74:62:65:19
            X509v3 Authority Key Identifier:
                keyid:98:9F:89:D6:8C:86:83:4A:F8:2D:9D:27:D1:6E:55:C0:9A:6E:F7:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:ac:93:90:31:87:89:71:0b:d5:79:e8:ea:1d:33:6b:89:ce:
         c1:c6:27:ad:ae:b5:7e:1f:cd:04:61:b5:db:6e:b6:a7:b0:36:
         b0:9b:56:df:87:30:af:8d:57:7b:c3:02:f0:0d:0f:96:94:7d:
         5d:4e:32:84:89:ad:56:ad:cd:c3:a1:50:8d:98:51:42:3c:94:
         80:a8:d5:bf:5e:3e:de:f3:0a:9c:82:bc:9f:c9:39:86:9b:31:
         6d:b0:0e:f6:34:ef:01:34:d6:3a:de:3b:54:35:8d:34:1a:35:
         dd:46:08:b8:1d:eb:fa:dc:d3:95:11:80:86:06:72:ee:80:b5:
         b9:8e:51:cc:5f:7f:cc:d3:5c:b1:ef:08:a5:fb:c1:0d:36:53:
         aa:8a:74:34:48:9c:18:c7:fc:36:a0:dc:c0:c8:33:4c:e3:7e:
         1e:3b:95:b8:e6:df:fb:33:30:5b:2e:b9:30:49:01:eb:c0:32:
         60:fa:54:8a:af:ec:b6:bb:29:2c:73:ae:dd:c6:71:bc:f8:01:
         2d:05:71:a6:a6:af:05:ec:14:f6:81:08:f3:99:fa:25:20:3d:
         83:46:02:bd:44:73:e9:dc:0b:d8:e6:48:35:b8:86:c0:2d:e9:
         36:07:ba:55:df:dd:48:fa:b4:f3:f5:93:c2:4a:f2:71:0a:f5:
         ff:5f:6f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:11:59 2025 by rpki-client