Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFD87/DDE73B2824C011EBBD47050DC4F9AE02/rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.mft
File:                     rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.mft (raw, json)
Hash identifier:          DnBNy0h7ddxc4kzW3Qgsj//Zt0iuQIxa4bWjoSOXQKs=
Subject key identifier:   21:B0:6D:C1:C2:C2:D8:C2:19:01:F5:E0:EB:E5:D3:AB:BB:C4:7E:57
Authority key identifier: AC:9F:95:B7:D4:78:E9:82:85:CF:44:BF:C5:7D:81:59:55:34:56:6F
Certificate issuer:       /CN=A91BFD87/serialNumber=AC9F95B7D478E98285CF44BFC57D81595534566F
Certificate serial:       07A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BFD87/DDE73B2824C011EBBD47050DC4F9AE02/rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.mft
Manifest number:          079A
Signing time:             Sat 18 Oct 2025 22:46:04 +0000
Manifest this update:     Sat 18 Oct 2025 22:46:03 +0000
Manifest next update:     Sat 25 Oct 2025 22:46:03 +0000
Files and hashes:         1: rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.crl (hash: efyevCKp6cXXvzRyt8di9qN3ptigbD/aUCG7oeagrso=)
                          2: 304D6C7E24C211EBAC07F90DC4F9AE02.roa (hash: +D5t0JaGGAIaMSUF5Xtfhf6hKiTtvz6mrzsQbqX1HTs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BFD87/DDE73B2824C011EBBD47050DC4F9AE02/rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.crl
                          rsync://rpki.apnic.net/member_repository/A91BFD87/DDE73B2824C011EBBD47050DC4F9AE02/rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 22:46:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1952 (0x7a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BFD87, serialNumber=AC9F95B7D478E98285CF44BFC57D81595534566F
        Validity
            Not Before: Oct 18 22:46:03 2025 GMT
            Not After : Oct 25 22:46:03 2025 GMT
        Subject: CN=68f418ab-fd27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:18:97:b5:60:be:98:cc:17:d0:d2:59:81:08:
                    3c:f0:07:88:28:2d:c2:82:44:a0:a9:c5:07:21:f8:
                    b7:a6:e7:ca:f0:03:e1:e6:66:b8:91:b4:9d:cb:66:
                    28:f5:e9:17:2f:9f:09:50:30:56:25:54:8a:94:7f:
                    66:58:47:a0:fc:28:2d:05:d3:dc:8f:ee:7c:d5:a7:
                    22:8a:5f:4b:3c:88:18:8f:d8:94:63:69:8a:3d:ad:
                    20:e8:db:90:d8:c8:64:5b:3d:52:fb:89:d2:ef:4c:
                    a5:3d:ae:b9:5d:f2:18:6a:a0:90:6b:5b:41:ba:ae:
                    d1:b8:85:41:ce:ca:c0:2d:24:61:3e:fd:40:35:3b:
                    57:9b:90:9a:93:7d:54:ac:60:2c:6a:2f:9a:29:8c:
                    c4:46:69:cb:62:3a:0f:06:0a:21:30:03:d2:81:d1:
                    6a:12:cf:54:5d:7b:d8:c4:a7:94:e5:e9:65:b0:bd:
                    f4:ea:0a:77:7a:35:81:82:c7:ab:13:a4:9f:80:f2:
                    b0:da:9c:0c:a5:6e:be:90:e0:03:9f:e6:1b:08:f9:
                    5e:4d:1c:cc:e7:46:10:ba:7d:67:d1:be:79:d5:0d:
                    0e:b1:ac:ed:cd:f6:03:17:95:0d:7b:3e:2a:d5:a1:
                    02:e2:26:b7:07:5d:c0:e0:04:01:82:57:5e:df:bf:
                    ef:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:B0:6D:C1:C2:C2:D8:C2:19:01:F5:E0:EB:E5:D3:AB:BB:C4:7E:57
            X509v3 Authority Key Identifier:
                keyid:AC:9F:95:B7:D4:78:E9:82:85:CF:44:BF:C5:7D:81:59:55:34:56:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BFD87/DDE73B2824C011EBBD47050DC4F9AE02/rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFD87/DDE73B2824C011EBBD47050DC4F9AE02/rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:ba:8b:52:6a:df:38:92:55:ee:a9:3e:b6:34:6a:79:ba:eb:
         30:11:32:a9:09:d1:5e:bd:14:cc:14:7a:35:99:00:37:71:09:
         7f:82:ca:33:25:78:ab:a6:db:e0:2b:11:0b:05:e6:ef:b3:69:
         69:b4:52:7d:cf:ef:e5:59:8a:cd:45:cb:1b:e6:f0:20:94:e9:
         97:48:28:a7:a9:61:3e:51:4b:97:e0:0f:03:9a:0d:ce:fe:c4:
         7c:ac:eb:fe:bf:26:92:52:8c:3e:5f:f6:a6:ec:82:d0:da:85:
         51:6f:fe:11:d9:0a:cb:f9:f7:e4:d7:d4:5c:dc:ba:9e:cc:a0:
         de:70:87:5b:b3:6e:79:09:83:55:94:c1:77:8f:07:e8:3c:2b:
         60:db:81:de:5b:93:18:ad:d7:19:7c:07:97:6b:cb:4d:62:6a:
         c0:90:cf:52:0f:96:cf:91:6b:8b:b9:88:83:be:87:90:91:c8:
         58:7c:65:33:ce:53:e5:59:75:e5:5b:00:2a:1c:58:73:39:d3:
         28:64:00:2a:06:ab:a6:46:3f:0b:11:57:3b:53:12:12:c4:f0:
         cc:59:15:6a:bc:18:4f:34:94:71:d5:08:6c:52:a4:30:60:e1:
         57:02:3e:1d:46:01:c5:08:e6:e6:bb:d9:7c:e5:e3:ec:f8:7a:
         be:38:47:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:52:01 2025 by rpki-client