Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEC2F/721B31D4963811ECB83C1682C4F9AE02/96B_epkcIaJc05qyCt5Po7XgXRU.mft
File:                     96B_epkcIaJc05qyCt5Po7XgXRU.mft (raw, json)
Hash identifier:          wljdNJ6zQoD9HVH/B1ykIW1JBiz6vzDF9p4G/b6KmC4=
Subject key identifier:   62:F2:5B:BD:EE:B3:D6:9D:CF:F5:FC:7A:2B:58:DD:58:F6:D8:93:7E
Authority key identifier: F7:A0:7F:7A:99:1C:21:A2:5C:D3:9A:B2:0A:DE:4F:A3:B5:E0:5D:15
Certificate issuer:       /CN=A91BEC2F/serialNumber=F7A07F7A991C21A25CD39AB20ADE4FA3B5E05D15
Certificate serial:       041A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/96B_epkcIaJc05qyCt5Po7XgXRU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BEC2F/721B31D4963811ECB83C1682C4F9AE02/96B_epkcIaJc05qyCt5Po7XgXRU.mft
Manifest number:          040D
Signing time:             Sun 19 Oct 2025 02:27:18 +0000
Manifest this update:     Sun 19 Oct 2025 02:27:17 +0000
Manifest next update:     Sun 26 Oct 2025 02:27:17 +0000
Files and hashes:         1: 96B_epkcIaJc05qyCt5Po7XgXRU.crl (hash: fIW0Tucbc0dB/ckPz19bD5gVdxkXZ83phic0Z7R14q4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BEC2F/721B31D4963811ECB83C1682C4F9AE02/96B_epkcIaJc05qyCt5Po7XgXRU.crl
                          rsync://rpki.apnic.net/member_repository/A91BEC2F/721B31D4963811ECB83C1682C4F9AE02/96B_epkcIaJc05qyCt5Po7XgXRU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/96B_epkcIaJc05qyCt5Po7XgXRU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 02:27:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1050 (0x41a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BEC2F, serialNumber=F7A07F7A991C21A25CD39AB20ADE4FA3B5E05D15
        Validity
            Not Before: Oct 19 02:27:17 2025 GMT
            Not After : Oct 26 02:27:17 2025 GMT
        Subject: CN=68f44c86-f3ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:45:c8:d9:f5:da:2b:1a:20:06:9b:a4:e9:84:
                    e0:f1:58:92:54:55:59:72:64:8f:06:6b:f3:6c:b7:
                    50:83:03:f1:aa:cb:00:b7:a1:6e:bf:a3:43:64:c2:
                    74:86:cc:c5:3e:b4:64:5a:0c:e4:64:c7:44:ed:1c:
                    dc:f7:24:f3:bf:db:f9:a8:d9:91:ee:1b:34:e6:fe:
                    3f:b7:df:83:f3:6d:e2:c3:6a:20:bb:94:c6:d4:4b:
                    94:a5:a9:12:09:21:d5:56:20:64:00:d6:c2:87:dc:
                    0f:fc:e2:c3:ef:16:6c:f7:13:af:45:aa:a4:82:15:
                    a9:32:77:46:1c:75:70:ca:0a:1b:49:f0:ab:88:6a:
                    47:d6:c3:f9:dc:4a:0f:45:0e:ae:c4:08:94:16:5f:
                    ce:0f:ea:d1:f1:65:ef:34:12:61:48:e6:4f:a1:7d:
                    a7:d5:ef:b1:d5:26:69:c0:a8:6a:85:3d:fa:d9:c5:
                    9c:01:44:91:b0:de:09:61:39:80:d6:80:6a:70:3e:
                    b4:cc:85:a4:51:f8:37:b6:c2:c4:56:03:04:d5:28:
                    39:b5:1b:f9:f0:df:10:88:97:df:33:5d:3b:9c:ce:
                    b4:ae:13:9b:b6:c4:51:7f:be:cf:54:10:3f:4e:a2:
                    a6:b2:22:2d:44:7f:7b:87:7e:f6:48:9b:5f:f6:fb:
                    2a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:F2:5B:BD:EE:B3:D6:9D:CF:F5:FC:7A:2B:58:DD:58:F6:D8:93:7E
            X509v3 Authority Key Identifier:
                keyid:F7:A0:7F:7A:99:1C:21:A2:5C:D3:9A:B2:0A:DE:4F:A3:B5:E0:5D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BEC2F/721B31D4963811ECB83C1682C4F9AE02/96B_epkcIaJc05qyCt5Po7XgXRU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/96B_epkcIaJc05qyCt5Po7XgXRU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEC2F/721B31D4963811ECB83C1682C4F9AE02/96B_epkcIaJc05qyCt5Po7XgXRU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:07:d8:b7:b1:1f:e7:25:d3:7e:20:19:a8:68:b7:9e:eb:52:
         82:66:b3:0b:6a:d9:96:72:96:c2:a0:02:4f:5d:9e:cc:73:d3:
         d0:1a:fb:61:be:cf:b6:82:59:84:dc:8f:97:5a:de:58:c1:13:
         25:a6:23:39:42:05:82:c1:05:37:7a:f0:e7:22:8c:5a:08:c8:
         03:d5:7e:ee:2b:45:ce:7f:ec:46:6f:71:37:6c:17:ea:01:a7:
         9c:0b:55:e0:1b:18:54:b5:43:62:34:d0:98:c8:f0:0f:0f:fe:
         14:fd:cd:e9:44:d4:b7:e6:fb:f6:6d:db:9f:44:90:a2:a5:b3:
         0c:c8:b7:db:46:a9:a6:60:8c:a7:de:19:79:00:01:c4:df:3b:
         79:d7:3e:87:40:0b:08:d3:88:27:fa:b6:6a:25:28:6b:2c:45:
         e3:a8:92:05:d3:d9:e5:fc:22:53:23:df:14:88:17:66:77:87:
         24:94:c3:de:4a:67:15:86:27:15:2f:47:ff:7c:7b:9d:26:91:
         ca:8e:fa:ec:8b:33:d2:9f:7e:2d:17:ab:fc:e1:ef:7e:bc:00:
         b6:e7:57:e0:ea:4f:6a:df:a6:5b:0d:09:f4:82:bd:89:0e:ba:
         b9:6b:cd:57:46:d0:d2:1b:41:72:08:dd:a0:12:95:cc:00:b9:
         79:a4:92:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:16:25 2025 by rpki-client