Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.mft
File:                     A4qG82KyVX-Uvncu4MX9MYRf4mM.mft (raw, json)
Hash identifier:          PHgtXGZaK7TIS4Xp1QEuKzb2eCtAZefHlvSIbx5TYgo=
Subject key identifier:   3F:1B:0D:23:14:6F:7C:F9:F3:1F:1C:4E:B9:4C:D9:9E:D8:7B:46:43
Authority key identifier: 03:8A:86:F3:62:B2:55:7F:94:BE:77:2E:E0:C5:FD:31:84:5F:E2:63
Certificate issuer:       /CN=A91C4003/serialNumber=038A86F362B2557F94BE772EE0C5FD31845FE263
Certificate serial:       0C3B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4qG82KyVX-Uvncu4MX9MYRf4mM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.mft
Manifest number:          0C26
Signing time:             Mon 20 Oct 2025 19:21:51 +0000
Manifest this update:     Mon 20 Oct 2025 19:21:51 +0000
Manifest next update:     Mon 27 Oct 2025 19:21:51 +0000
Files and hashes:         1: A4qG82KyVX-Uvncu4MX9MYRf4mM.crl (hash: wqzd3EhFmKJ6VdQK5LeOABY68C9s3gMpejornvz+qEY=)
                          2: 711115241AD911EA97EF1C30C4F9AE02.roa (hash: If6A0dtzlgPVB4CBNXQ4TMiF5xMEzeKvLljq5QFI3bk=)
                          3: 398848523A0011EFB7007939C4F9AE02.roa (hash: Zlhwy82VHpRYLPT4enDdRaV9Hjue+wnu8x2KNE0lTzk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.crl
                          rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4qG82KyVX-Uvncu4MX9MYRf4mM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 19:21:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3131 (0xc3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C4003, serialNumber=038A86F362B2557F94BE772EE0C5FD31845FE263
        Validity
            Not Before: Oct 20 19:21:51 2025 GMT
            Not After : Oct 27 19:21:51 2025 GMT
        Subject: CN=68f68bcf-5afc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:50:e7:dc:7a:bc:45:e5:9a:30:16:15:bc:70:
                    b1:04:5c:f0:f2:fb:0d:e7:8e:25:8a:fc:8f:a1:9a:
                    a2:0e:15:dc:70:0b:a5:2f:5b:37:fa:6d:78:e8:a8:
                    42:0a:f0:b1:b1:a8:34:c4:21:bc:8d:b5:52:75:08:
                    7e:f0:98:f2:2a:0d:e6:4a:6d:ed:9a:a0:f6:23:1a:
                    9f:b5:ee:6b:76:5d:d1:12:c9:e0:97:76:5f:5c:74:
                    84:29:18:65:12:5c:ed:aa:a5:7f:25:08:fd:e4:98:
                    10:64:b7:20:29:a9:b0:98:1b:bc:e8:d4:a9:c6:e5:
                    42:0e:bf:00:f1:6c:1f:e2:8a:8d:52:b7:e2:04:b3:
                    50:38:9e:1e:3c:a5:28:91:a1:b3:44:4c:c8:23:d4:
                    da:10:08:96:f3:9b:d7:0a:28:a6:76:4f:57:68:3d:
                    92:d6:6f:17:7e:b1:44:a8:0e:93:ab:e0:1a:04:52:
                    33:33:f5:1b:28:ce:6f:56:d4:25:1d:e0:8f:1c:fc:
                    3d:88:35:9c:61:87:bd:3f:d4:2c:fc:83:e2:32:4a:
                    39:c2:fd:58:de:09:06:73:8b:1a:74:62:c3:95:c0:
                    03:fb:41:80:93:8d:d1:c8:20:d8:ef:b5:a5:1c:a6:
                    8b:42:b0:36:7d:b6:34:12:c7:44:30:db:b7:f9:3a:
                    57:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:1B:0D:23:14:6F:7C:F9:F3:1F:1C:4E:B9:4C:D9:9E:D8:7B:46:43
            X509v3 Authority Key Identifier:
                keyid:03:8A:86:F3:62:B2:55:7F:94:BE:77:2E:E0:C5:FD:31:84:5F:E2:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4qG82KyVX-Uvncu4MX9MYRf4mM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:c9:d7:96:c5:3c:fd:d0:d5:f7:ec:20:0a:3b:98:de:bd:5e:
         14:50:21:21:03:66:5d:c4:bf:0e:5e:1b:b0:7f:f6:0c:fc:88:
         89:bd:e7:41:ea:9d:c1:34:cf:05:4b:44:87:86:2d:06:03:74:
         67:49:5a:6a:7d:b0:cc:5b:99:84:44:e9:01:4b:59:78:97:8b:
         40:3f:d6:8b:5e:06:e3:ab:89:6a:9d:c4:b2:5f:cb:ac:00:6e:
         70:21:c7:a6:78:75:d0:67:aa:3b:ad:94:90:e6:3d:6e:d3:15:
         e0:70:c4:23:0d:ce:ea:f3:bc:d3:bc:15:8e:ae:14:a9:7f:58:
         d0:d4:8f:e0:04:26:72:14:30:8e:76:29:53:eb:cb:02:74:3d:
         1d:1a:b8:b8:61:a5:03:d3:6a:9d:a7:bd:6b:8f:1d:97:07:f5:
         63:44:10:95:53:60:87:9f:4f:14:92:44:83:cd:4b:ac:83:1b:
         d3:3e:ed:ee:85:fc:77:9b:89:b6:e6:c5:1c:fe:b1:3a:65:ef:
         ce:03:37:95:17:57:5b:1c:48:c9:08:8b:d1:80:44:00:14:d6:
         72:bd:6b:a9:c2:0b:07:ac:d4:29:80:47:1c:d8:f2:6d:d1:3a:
         ce:be:7a:c0:5e:b1:3d:42:a7:2c:f4:2e:7d:6c:50:29:eb:f4:
         62:3d:b6:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 05:29:50 2025 by rpki-client