Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.mft
File:                     P7eFXvMwunfZ87ct_97CBxKsFAc.mft (raw, json)
Hash identifier:          4u0AyXNc0Y3/8GUzadJk9XEnilUsWw3m7c/dlAl6W/E=
Subject key identifier:   27:EE:E7:6F:22:5B:D9:75:84:2C:7E:42:6B:99:4A:87:27:6C:A4:4E
Authority key identifier: 3F:B7:85:5E:F3:30:BA:77:D9:F3:B7:2D:FF:DE:C2:07:12:AC:14:07
Certificate issuer:       /CN=A91CD4DB/serialNumber=3FB7855EF330BA77D9F3B72DFFDEC20712AC1407
Certificate serial:       180D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7eFXvMwunfZ87ct_97CBxKsFAc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.mft
Manifest number:          17F4
Signing time:             Sat 18 Oct 2025 16:57:10 +0000
Manifest this update:     Sat 18 Oct 2025 16:57:10 +0000
Manifest next update:     Sat 25 Oct 2025 16:57:10 +0000
Files and hashes:         1: P7eFXvMwunfZ87ct_97CBxKsFAc.crl (hash: 5q8jG29cmyzXG5z/5zx8Yfc8kNaqyieHe9QwZb2XpzA=)
                          2: D9C4471C32D911F0B3466E0BC4F9AE02.roa (hash: kEqVolPWbZYybXeWnS2WqFsHodl52XHMAsJNtlbgCXo=)
                          3: 9BAC2C9C32D911F09D7CBD0AC4F9AE02.roa (hash: WA77dp8CFAMTuFtYEp44sxYc2n+DFG5Sigw0CHNE2Bg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.crl
                          rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7eFXvMwunfZ87ct_97CBxKsFAc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 16:57:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6157 (0x180d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD4DB, serialNumber=3FB7855EF330BA77D9F3B72DFFDEC20712AC1407
        Validity
            Not Before: Oct 18 16:57:10 2025 GMT
            Not After : Oct 25 16:57:10 2025 GMT
        Subject: CN=68f3c6e6-72e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:68:6c:60:41:a4:cb:23:ae:29:c3:cb:ef:fc:
                    cf:37:25:97:9e:72:a5:98:4d:b2:5e:f1:7b:fb:9a:
                    61:16:d2:e2:9c:c5:81:0f:bd:81:2b:7c:0c:5f:ae:
                    23:04:78:59:1a:d7:e8:7c:84:af:7e:90:6d:a2:fd:
                    13:73:c7:59:d4:c5:9f:66:0d:8e:4a:0a:51:dc:3f:
                    f0:bc:af:31:f6:19:05:11:e8:b1:89:36:58:10:d8:
                    fb:1c:3c:c3:22:c7:c4:e7:f9:c2:f5:cf:5d:8d:e2:
                    cf:ec:ae:77:22:3f:ff:2f:9b:31:0f:03:2a:0b:02:
                    cd:f9:7a:76:10:06:81:e3:57:fe:a2:e9:5c:c4:31:
                    75:b7:86:98:9f:af:b0:45:45:18:a1:95:2f:32:7a:
                    9e:0d:27:66:61:c6:d0:b6:51:c8:24:84:ec:95:cc:
                    43:1e:19:a6:8c:d3:d0:cc:0f:dd:21:d6:bc:fb:3d:
                    8c:ea:67:b1:c3:19:ef:32:fb:a4:e9:6b:c7:67:c6:
                    46:5d:57:ca:4a:eb:0b:22:5c:ff:15:c5:eb:63:24:
                    a5:35:3c:67:7d:e4:ba:e5:f1:cc:18:35:57:d0:f5:
                    06:4d:a2:41:69:91:bd:4b:8c:03:eb:d2:6e:20:e4:
                    ff:2f:40:f2:9b:a5:35:ae:d0:12:d8:0d:b5:34:75:
                    7b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:EE:E7:6F:22:5B:D9:75:84:2C:7E:42:6B:99:4A:87:27:6C:A4:4E
            X509v3 Authority Key Identifier:
                keyid:3F:B7:85:5E:F3:30:BA:77:D9:F3:B7:2D:FF:DE:C2:07:12:AC:14:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7eFXvMwunfZ87ct_97CBxKsFAc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:99:03:df:cd:59:c4:61:70:3b:42:f0:36:0d:14:14:78:99:
         15:d9:52:ac:19:18:7b:71:5e:67:17:99:1a:bd:ec:51:ce:ca:
         02:db:2a:82:10:23:1d:75:29:34:91:58:d2:21:59:81:89:90:
         2a:59:44:cb:be:db:0f:52:08:49:b3:04:4c:b4:0c:5c:12:24:
         a5:1c:0f:8f:e4:6b:e4:51:5c:69:7a:74:b3:a2:67:c7:57:75:
         aa:ee:87:34:bc:4f:62:a3:a2:86:51:b7:77:97:fc:a3:ac:00:
         01:4c:a9:68:44:05:df:ac:fd:01:e8:2e:ee:a8:d3:39:f8:d8:
         77:c1:a2:2f:05:4e:04:4d:69:d5:84:0b:d7:57:6f:c0:cd:2c:
         0a:11:1a:21:dc:79:36:f2:91:7d:78:72:81:2b:6c:f0:e9:2b:
         a0:12:c1:70:cb:ae:c3:e3:08:25:62:7e:f7:53:b1:9b:f3:89:
         06:53:67:40:42:d7:9d:26:c4:d9:66:e1:92:dd:61:e2:a5:8f:
         d0:48:eb:29:f6:93:c8:48:a1:76:39:f7:6b:45:d8:0f:a9:fd:
         af:f7:cd:da:9a:d4:73:80:ec:c4:b5:8d:cb:6d:c1:8f:0e:39:
         28:76:53:0c:f7:97:30:95:32:e2:0e:f4:35:b4:70:27:24:50:
         8a:65:c8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:14:56 2025 by rpki-client