Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.mft
File:                     zNz_ISpraZpXC0qdF18WI3GDLKU.mft (raw, json)
Hash identifier:          TZU+Ax8ElpEmG7mUY2QApKZwdv6jOHNSxdHTBpvb4mc=
Subject key identifier:   EC:81:C8:31:95:83:81:47:C6:92:D4:EB:D2:73:3D:9D:BD:CD:5C:4D
Authority key identifier: CC:DC:FF:21:2A:6B:69:9A:57:0B:4A:9D:17:5F:16:23:71:83:2C:A5
Certificate issuer:       /CN=A91BF23F/serialNumber=CCDCFF212A6B699A570B4A9D175F162371832CA5
Certificate serial:       EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNz_ISpraZpXC0qdF18WI3GDLKU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.mft
Manifest number:          E8
Signing time:             Sun 19 Oct 2025 08:22:57 +0000
Manifest this update:     Sun 19 Oct 2025 08:22:57 +0000
Manifest next update:     Sun 26 Oct 2025 08:22:57 +0000
Files and hashes:         1: zNz_ISpraZpXC0qdF18WI3GDLKU.crl (hash: 9d3YWMcBQ8Y29/PvDEq2/R4jXmG9qSQfRH7HQlgLnbI=)
                          2: 00606C184A3011EFBC542C18C4F9AE02.roa (hash: Y3ZFXjyQq0LuHhQHwB/WF8wGIt775M6n4ea3rF+TXp4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.crl
                          rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNz_ISpraZpXC0qdF18WI3GDLKU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 08:22:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 234 (0xea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF23F, serialNumber=CCDCFF212A6B699A570B4A9D175F162371832CA5
        Validity
            Not Before: Oct 19 08:22:57 2025 GMT
            Not After : Oct 26 08:22:57 2025 GMT
        Subject: CN=68f49fe1-bb74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:79:18:4e:2c:9c:ab:41:77:b9:a9:f9:e1:e6:
                    ff:c7:9d:98:9d:f6:c5:82:3b:74:ff:b9:74:3b:b2:
                    45:a0:0d:c4:a4:a5:bc:5e:87:ee:87:f6:31:3f:51:
                    a1:80:9d:37:95:c5:ca:80:9b:e5:c8:61:2d:1a:a6:
                    58:0a:f7:89:87:b7:b2:97:f2:3a:ba:df:2f:25:1d:
                    95:17:a7:d1:74:98:8d:20:7a:77:7f:13:65:e3:0c:
                    92:be:92:9a:da:1c:66:3a:33:58:4c:a7:35:d9:c7:
                    4c:18:5d:68:9d:10:bb:12:64:12:96:1f:fd:dd:f4:
                    c1:06:22:8d:e3:72:be:9a:df:0e:1a:bd:f6:1b:3d:
                    55:f1:d1:8a:1d:6c:9a:5f:f1:1a:a6:dc:c3:2b:66:
                    cb:bc:8c:37:6b:04:af:72:be:6b:b8:7e:70:85:48:
                    cd:68:6a:30:ea:48:f7:73:f2:33:98:31:9a:bc:5e:
                    f7:ca:22:d6:ae:c3:01:50:a8:6f:bf:72:40:42:26:
                    bf:8e:2e:76:f1:f1:d0:f1:f0:32:61:b5:00:0d:75:
                    fe:f2:13:e6:91:38:6a:c4:04:01:a8:21:9e:8c:f8:
                    3b:6b:c8:b2:2a:2b:3f:96:50:4b:05:90:40:15:82:
                    a9:ee:de:78:88:f1:99:3d:d7:3c:55:53:3c:76:7c:
                    c2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:81:C8:31:95:83:81:47:C6:92:D4:EB:D2:73:3D:9D:BD:CD:5C:4D
            X509v3 Authority Key Identifier:
                keyid:CC:DC:FF:21:2A:6B:69:9A:57:0B:4A:9D:17:5F:16:23:71:83:2C:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNz_ISpraZpXC0qdF18WI3GDLKU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:69:53:b7:cc:a4:73:e7:53:94:bc:29:42:7d:43:76:9b:b5:
         7d:7c:a7:70:50:75:c5:e8:5c:9d:33:f4:43:2d:f1:ec:40:da:
         05:d3:9d:f2:ce:14:dc:2a:75:3f:e0:0c:e7:b7:62:a7:37:ff:
         d0:db:60:fa:c4:4a:d7:52:10:13:6b:5e:a4:86:05:f2:a6:f0:
         0a:59:d5:e8:97:d3:8b:39:a3:77:da:ee:c4:1f:91:8b:41:94:
         1a:79:95:7e:64:cb:de:d4:2c:f1:76:f0:4f:17:ca:e5:b1:86:
         e3:84:ac:26:05:b7:71:bf:7c:9c:d7:20:49:0a:cc:89:24:d3:
         e1:d8:36:47:43:81:f8:f3:5f:eb:7c:b0:df:bf:54:ce:b7:0c:
         ce:b2:d9:fc:29:5a:06:9a:04:da:6c:10:5a:3c:b6:b9:b7:e8:
         95:eb:82:9a:a5:00:38:dc:8a:e8:fc:8b:e9:f3:47:a3:d6:92:
         d0:9e:71:0b:bf:0a:9c:91:8d:be:11:28:e9:4b:6e:53:9a:ea:
         59:69:aa:ee:a1:ce:73:56:a3:a3:46:77:e8:20:62:bb:bf:d4:
         c7:de:1d:09:d1:36:b6:1f:d6:6c:ca:c3:47:cb:31:41:83:9c:
         e4:4b:44:41:e3:9e:3d:34:90:eb:7b:b9:05:9e:94:7b:89:f9:
         9c:77:6a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:30:36 2025 by rpki-client