Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft
File:                     B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft (raw, json)
Hash identifier:          EL4BtvzicaPorRdlRT15Gp+CFXH6RBWR7XKg3bvkfNg=
Subject key identifier:   AF:1E:BE:6E:D8:15:5A:47:06:D5:78:14:A2:24:23:48:F5:5B:4B:EA
Authority key identifier: 07:81:67:5C:C6:4F:AB:2B:84:5D:A7:F5:11:55:49:80:42:EC:E4:67
Certificate issuer:       /CN=A91CDCB6/serialNumber=0781675CC64FAB2B845DA7F51155498042ECE467
Certificate serial:       1E86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft
Manifest number:          1E64
Signing time:             Sat 18 Oct 2025 16:22:20 +0000
Manifest this update:     Sat 18 Oct 2025 16:22:19 +0000
Manifest next update:     Sat 25 Oct 2025 16:22:19 +0000
Files and hashes:         1: B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl (hash: CktRMFyv64n8SG39I/wsQgXAlA9IxI9/6OZnaEP6bnM=)
                          2: F0F97030612C11EF85AF817EC4F9AE02.roa (hash: 4P/xIWjkOZt+s6V/SN3xcWLg6ZfxIlwRFodBInoaJSg=)
                          3: BD314CEA619711EE81211277C4F9AE02.roa (hash: 16s8rqQL7ZS3OY13WYasSB/OdPD3K/KWoSmSDxk1MUc=)
                          4: 48471CAE611811EEB2B1C077C4F9AE02.roa (hash: XAUpnIWVoo2gP76XF78PGBVOZx+0l56I4zT3vqwFcwU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl
                          rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 16:22:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7814 (0x1e86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDCB6, serialNumber=0781675CC64FAB2B845DA7F51155498042ECE467
        Validity
            Not Before: Oct 18 16:22:19 2025 GMT
            Not After : Oct 25 16:22:19 2025 GMT
        Subject: CN=68f3bebc-4b92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4e:4a:41:72:f0:d4:01:8c:40:70:ef:4a:3c:
                    3f:ab:8e:f0:00:9d:25:a7:fe:12:e6:81:0d:93:7b:
                    08:5c:e2:fb:37:49:55:7e:28:c5:8d:0c:70:bf:8c:
                    1a:66:27:b3:34:76:11:da:1f:b6:29:34:2f:9f:fd:
                    3c:db:10:8c:97:f2:d7:35:91:6b:05:71:a3:7e:ab:
                    1d:77:a1:0a:85:c6:7b:47:3e:bc:30:0a:01:7a:49:
                    1c:ed:6c:e3:b0:60:e8:20:3a:db:f9:4e:c6:5a:62:
                    f4:67:da:99:03:56:51:2d:db:5e:4a:2a:7c:f5:b1:
                    c5:44:02:75:6a:1c:ac:77:09:96:59:2d:b4:d6:25:
                    d6:ff:fb:48:32:88:d2:9e:ce:c5:10:2c:8f:42:77:
                    f0:5a:88:5b:9f:48:43:bf:2b:dd:0b:c1:c7:af:2e:
                    a6:46:6d:a8:c7:44:6f:02:a1:ef:fb:13:5b:69:34:
                    15:09:5b:de:e9:f6:15:74:99:c3:a0:f0:d6:25:d7:
                    72:a0:8a:2d:44:1e:c7:91:b1:3b:e6:2b:15:27:3d:
                    21:f7:3e:6c:30:79:dc:c1:2f:cf:61:1b:57:e7:34:
                    8e:79:c3:76:b5:a1:01:81:11:26:0a:e8:4d:58:05:
                    42:98:1e:66:a0:65:c4:23:a8:d2:58:7f:26:b6:62:
                    99:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:1E:BE:6E:D8:15:5A:47:06:D5:78:14:A2:24:23:48:F5:5B:4B:EA
            X509v3 Authority Key Identifier:
                keyid:07:81:67:5C:C6:4F:AB:2B:84:5D:A7:F5:11:55:49:80:42:EC:E4:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:1a:ad:99:d6:a6:82:6c:cb:40:54:ca:cc:ad:7b:3b:ab:32:
         56:c9:92:49:e5:a8:1c:11:68:32:e5:71:17:1b:5a:95:85:1b:
         97:a3:bb:5c:21:ee:af:aa:d9:a8:72:1b:d0:48:6c:dc:eb:65:
         9c:ee:f6:4e:d3:ea:96:4a:33:4c:4d:20:f0:9c:3c:ce:4b:8d:
         b2:0b:e7:31:d1:a9:da:59:ec:59:e4:67:a6:41:dd:6f:f1:cd:
         dd:5b:b5:9e:a6:7d:1d:2e:32:99:99:d4:62:62:ba:92:9a:19:
         26:c8:fd:0a:aa:ea:cf:79:ef:c2:56:04:d6:2a:0d:cd:90:0d:
         91:58:2a:0b:5e:f1:29:23:fb:21:f2:5e:f0:a5:d1:03:9d:5f:
         3d:34:9f:62:47:97:d4:dc:11:14:ad:96:cb:0e:ff:65:37:e6:
         7b:8c:44:4a:0b:0a:7d:8f:bb:3c:29:b1:f5:19:a0:4b:a6:20:
         19:8e:cf:4e:7d:11:1b:ed:20:67:3f:15:46:24:0d:ba:57:5c:
         18:b1:f9:c2:cc:69:17:b9:4a:30:74:02:86:bc:39:25:10:db:
         66:d9:80:b0:16:f5:c6:6f:d1:af:bb:a8:13:f3:f0:aa:5f:74:
         55:e7:3f:9f:0a:08:28:dd:67:f9:a1:0f:21:a5:c4:7d:ef:6e:
         b0:3f:25:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:24:08 2025 by rpki-client