Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft
File:                     A7x0msFoLEtG2iWat-tmKqIlsO4.mft (raw, json)
Hash identifier:          DI8/IAsi/gMTCk8cGf8Q2dBY1aykv/2y5ND2EseeDRM=
Subject key identifier:   58:ED:65:23:E6:67:7A:D5:A5:BB:4D:AE:94:95:0A:CE:6A:13:B9:AC
Authority key identifier: 03:BC:74:9A:C1:68:2C:4B:46:DA:25:9A:B7:EB:66:2A:A2:25:B0:EE
Certificate issuer:       /CN=A91C6BB2/serialNumber=03BC749AC1682C4B46DA259AB7EB662AA225B0EE
Certificate serial:       02EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft
Manifest number:          02DB
Signing time:             Sun 19 Oct 2025 03:30:15 +0000
Manifest this update:     Sun 19 Oct 2025 03:30:14 +0000
Manifest next update:     Sun 26 Oct 2025 03:30:14 +0000
Files and hashes:         1: A7x0msFoLEtG2iWat-tmKqIlsO4.crl (hash: +duShL+HVR6yJJrU4RTjlp7EowlCgHdJqXL5GRN372c=)
                          2: 810DCA288C6511EF813EB90EC4F9AE02.roa (hash: 9vbaTvEONgGnCCzzlIBphmxj6A21NbejzXiij71gCyE=)
                          3: CFB6C2ECB55511EFB8F19317C4F9AE02.roa (hash: Nuqi/DwAfsIbvqEslH1o2Nq9pgL64KpNEMZ+W/5PR6U=)
                          4: 0A9DA996655311EF8D61E41CC4F9AE02.roa (hash: YEePosDji6p318PSaVsMzMykST1cQDsNsrEk48Tp9ic=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.crl
                          rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 03:30:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 748 (0x2ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6BB2, serialNumber=03BC749AC1682C4B46DA259AB7EB662AA225B0EE
        Validity
            Not Before: Oct 19 03:30:14 2025 GMT
            Not After : Oct 26 03:30:14 2025 GMT
        Subject: CN=68f45b46-e707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7f:1e:c1:a1:07:c8:14:e5:cd:82:8c:d9:6d:
                    dd:aa:5c:78:7a:c4:7b:1c:e8:43:03:fa:3e:25:fb:
                    f4:95:56:97:93:06:78:e7:39:69:c7:6d:c9:ff:4d:
                    90:ff:11:4c:e7:0b:73:d2:11:2a:a1:8e:61:8b:58:
                    79:ac:ab:77:82:72:53:42:ad:01:00:df:57:a9:f6:
                    a6:43:53:41:2a:c8:8f:8a:00:55:93:22:dd:f5:ec:
                    e7:f2:d6:bd:ce:92:f7:4f:e6:cc:64:e8:58:81:12:
                    33:f1:a0:85:d8:3d:4a:db:9b:41:b8:c4:fd:2d:30:
                    70:db:23:aa:bc:a6:1a:e5:da:43:e4:46:8b:d3:d2:
                    cd:87:57:70:16:4c:e0:88:b3:03:b5:6d:13:7e:99:
                    60:b3:24:26:eb:0e:fe:3a:67:87:51:13:6c:f4:63:
                    73:50:82:b3:05:7f:04:ab:6f:41:67:e4:26:cf:87:
                    13:39:c1:08:83:82:90:01:f2:7c:20:78:4c:b5:95:
                    83:3c:8c:85:27:4a:f2:47:4a:5e:23:51:ed:60:07:
                    cf:33:3d:d0:15:42:bd:8c:e2:af:d6:c0:1d:62:7c:
                    0f:4d:d1:59:d4:2d:d4:74:b6:d9:a3:e2:8c:06:4c:
                    f1:3a:40:65:41:e3:99:cb:e6:da:74:ea:1e:0c:42:
                    c2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:ED:65:23:E6:67:7A:D5:A5:BB:4D:AE:94:95:0A:CE:6A:13:B9:AC
            X509v3 Authority Key Identifier:
                keyid:03:BC:74:9A:C1:68:2C:4B:46:DA:25:9A:B7:EB:66:2A:A2:25:B0:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:f9:48:8f:fb:ca:75:b8:1c:3b:34:7f:e4:d0:ba:74:9e:d2:
         d5:b2:e3:df:fa:cb:23:e5:6f:42:dd:fd:6e:b3:d4:07:71:0e:
         86:34:1b:04:f6:e1:e3:13:33:6d:04:69:fb:7f:2e:bf:d6:18:
         49:27:b5:2f:87:18:01:7f:ed:7c:58:39:53:26:d6:ac:7a:43:
         6c:33:75:46:37:7e:02:56:a7:c3:27:09:80:ba:a8:88:64:ff:
         1b:59:72:85:1d:9f:22:08:e8:b4:1a:56:11:c4:59:d1:02:e7:
         41:25:0a:e8:fa:09:4d:da:ec:38:f8:2d:9b:fa:05:21:1e:86:
         46:4b:b6:ad:88:19:ab:52:4a:67:67:9c:d3:e8:59:2a:30:ea:
         f1:2a:dc:93:34:e0:94:70:bb:5d:cb:a8:3c:ad:18:9d:a2:54:
         94:53:2f:08:6a:c2:28:9e:4b:e1:83:46:91:b7:f3:37:4d:00:
         0a:7a:bf:02:68:78:6f:ef:a1:15:96:de:01:65:b7:11:ac:2b:
         86:df:98:57:78:db:9a:7e:d7:6b:28:bc:94:5f:96:c5:89:2b:
         0f:a8:8f:89:e7:29:d9:18:4a:1a:db:c7:a0:84:9a:00:78:d5:
         aa:90:fa:0c:c1:37:41:6a:b4:76:6d:b4:e9:67:57:96:b1:ca:
         13:ed:a2:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:48:14 2025 by rpki-client