Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.mft
File:                     vUxEHwLHrdQvpiQugzHZP1nlGDo.mft (raw, json)
Hash identifier:          DhKX05I83xQJpV96g7MBp3vtZxfSymoZmIsg2dZGtI4=
Subject key identifier:   E7:A6:C6:EF:94:D8:14:F4:3F:32:50:1B:2F:C5:7A:5D:A9:7B:71:92
Authority key identifier: BD:4C:44:1F:02:C7:AD:D4:2F:A6:24:2E:83:31:D9:3F:59:E5:18:3A
Certificate issuer:       /CN=A91C67F9/serialNumber=BD4C441F02C7ADD42FA6242E8331D93F59E5183A
Certificate serial:       0221
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUxEHwLHrdQvpiQugzHZP1nlGDo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.mft
Manifest number:          0216
Signing time:             Sun 19 Oct 2025 04:37:32 +0000
Manifest this update:     Sun 19 Oct 2025 04:37:31 +0000
Manifest next update:     Sun 26 Oct 2025 04:37:31 +0000
Files and hashes:         1: vUxEHwLHrdQvpiQugzHZP1nlGDo.crl (hash: sVFvZazGJ6AsBYabVSWgTNfrBsbFIDJeecI58AWdMPI=)
                          2: 7A5433D6A37811F083057A2CC4F9AE02.roa (hash: b+bWjpJ3d8KGR6taphUOyHe940I2iy3CRK/xSYWZWeA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.crl
                          rsync://rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUxEHwLHrdQvpiQugzHZP1nlGDo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 04:37:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 545 (0x221)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C67F9, serialNumber=BD4C441F02C7ADD42FA6242E8331D93F59E5183A
        Validity
            Not Before: Oct 19 04:37:31 2025 GMT
            Not After : Oct 26 04:37:31 2025 GMT
        Subject: CN=68f46b0c-0ce0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:47:60:a8:08:5c:d7:81:e1:6e:f2:cd:78:8a:
                    7d:5e:4d:68:43:5a:28:fb:3f:47:8a:f9:64:c2:7a:
                    a2:76:9d:f3:15:ab:ad:33:4d:f0:b9:8a:d7:90:34:
                    cd:f6:72:36:15:c8:dd:ec:a2:e5:01:2f:d7:8e:42:
                    91:1e:73:53:02:a3:48:32:86:3e:e2:24:9c:57:75:
                    35:07:c6:e9:74:f3:a9:41:64:eb:7a:96:15:c4:c6:
                    fe:f9:e8:ea:9f:b5:88:23:4e:6f:51:70:9a:06:06:
                    82:04:6e:08:c5:0e:64:d7:b5:89:d0:42:89:18:f7:
                    05:2e:48:05:8a:51:8f:22:4e:26:ad:6f:2f:04:32:
                    09:b6:88:68:4e:dc:a0:51:99:0f:ce:44:f3:2f:ba:
                    f7:64:5b:b7:14:fa:c0:5d:d8:d6:7a:37:34:60:6c:
                    4f:a1:93:57:14:ca:33:ff:b2:42:ce:a0:85:49:94:
                    34:ec:82:5b:b0:b4:ed:07:fa:10:b1:f1:15:33:d0:
                    8a:ca:da:ed:bb:4f:d2:37:a1:59:25:94:bc:e1:b0:
                    ef:ab:82:e3:47:8e:a4:5b:64:b9:ad:41:44:29:f0:
                    99:7f:93:4a:52:a5:b4:ea:f9:90:b4:49:4d:47:00:
                    8e:ee:46:b5:c9:a4:35:f4:11:92:b0:8f:1a:77:17:
                    28:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:A6:C6:EF:94:D8:14:F4:3F:32:50:1B:2F:C5:7A:5D:A9:7B:71:92
            X509v3 Authority Key Identifier:
                keyid:BD:4C:44:1F:02:C7:AD:D4:2F:A6:24:2E:83:31:D9:3F:59:E5:18:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUxEHwLHrdQvpiQugzHZP1nlGDo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:fc:c6:74:49:11:59:f2:0f:28:98:65:77:c0:9e:ea:67:49:
         5d:20:87:e0:3c:93:96:a7:6c:e5:03:79:81:0a:93:78:6b:cc:
         58:1a:b4:f9:a6:50:13:c1:6b:dd:d4:65:7f:0e:dc:73:ad:91:
         d0:4d:23:3f:23:c4:94:05:d7:52:a7:62:2c:ea:61:04:8c:8d:
         a6:0e:28:68:8b:09:20:c9:b2:90:86:b4:f6:61:f0:7e:60:86:
         2f:e4:77:07:69:d7:15:8d:4d:ec:c5:f3:b1:4d:f7:b9:61:18:
         79:fc:28:8c:d4:b6:20:36:41:aa:0c:04:27:e4:9a:89:1c:16:
         66:d8:4f:05:25:cd:85:0a:6a:6f:eb:74:7f:11:89:37:a1:13:
         51:d7:bd:1a:6c:68:8a:2f:7f:58:1d:e0:60:7a:3c:32:da:56:
         e1:b8:e3:90:54:3b:a6:d6:6e:7c:31:26:6b:31:dd:61:c3:14:
         17:7e:b5:6a:f1:96:22:cc:18:a3:04:fc:c1:a9:5c:fd:c3:93:
         09:2d:af:e0:20:83:c6:ac:97:da:37:3d:46:ff:6c:9d:f1:57:
         5b:89:04:b4:cc:34:a5:33:12:5d:c4:d6:e0:1a:b4:62:41:3d:
         da:04:5c:b0:1c:bf:98:07:6e:8d:51:21:47:3c:2f:a8:2a:f5:
         42:bc:69:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:10:48 2025 by rpki-client