Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft
File:                     _oJu6bwS2q07GXRxsEE_HrIIJjU.mft (raw, json)
Hash identifier:          GhVFWYu089xA/WIkrecr/vV8uOrN7UVRhwy3GOHl0xo=
Subject key identifier:   E0:AB:56:12:9F:41:C1:37:BA:66:52:57:E8:14:11:5A:05:F6:00:B1
Authority key identifier: FE:82:6E:E9:BC:12:DA:AD:3B:19:74:71:B0:41:3F:1E:B2:08:26:35
Certificate issuer:       /CN=A91CEBCA/serialNumber=FE826EE9BC12DAAD3B197471B0413F1EB2082635
Certificate serial:       34FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft
Manifest number:          34EA
Signing time:             Sat 18 Oct 2025 14:33:13 +0000
Manifest this update:     Sat 18 Oct 2025 14:33:12 +0000
Manifest next update:     Sat 25 Oct 2025 14:33:12 +0000
Files and hashes:         1: _oJu6bwS2q07GXRxsEE_HrIIJjU.crl (hash: qzIjBm1ZuvD9Oa1SMcHN9b4Y+D5j5/J7MlODXTumB6w=)
                          2: F175093C71A411F09351784AC4F9AE02.roa (hash: sX+/MXQGa3XOHWne5n8WyzQHADebdwQ8tiP703yRh44=)
                          3: 9954B962F02D11EFBA26B94FC4F9AE02.roa (hash: RpwdGJeEWb/3FqZBI7k4hyBai/WEVbuoaZIuDveesGk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.crl
                          rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 14:33:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13567 (0x34ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CEBCA, serialNumber=FE826EE9BC12DAAD3B197471B0413F1EB2082635
        Validity
            Not Before: Oct 18 14:33:12 2025 GMT
            Not After : Oct 25 14:33:12 2025 GMT
        Subject: CN=68f3a529-fc60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e8:69:27:86:32:d9:28:44:e6:16:a3:3a:a8:
                    b8:ea:cd:32:31:70:af:1d:3d:d3:2e:e2:fc:b6:48:
                    74:29:fb:82:32:e6:f7:1d:3e:89:03:3c:c6:4f:0c:
                    ba:c0:66:61:fd:5f:de:48:df:59:12:ae:ce:19:2b:
                    f6:31:7b:7c:73:76:2e:92:9a:a0:33:c3:c6:b6:f5:
                    4d:02:85:28:b0:97:a8:d2:95:c7:ac:42:70:13:18:
                    61:87:59:9c:d8:33:5f:e7:8a:3a:cc:58:15:21:13:
                    f7:ab:6c:26:0e:f2:6c:db:67:4b:24:37:ec:eb:8c:
                    6a:c6:80:07:92:0a:97:d2:eb:72:f8:f2:f1:26:4c:
                    51:2e:c7:e6:8b:39:66:14:e5:42:ab:6a:8e:1b:cd:
                    b1:ed:22:28:a8:5e:b7:8e:8b:f9:eb:aa:60:b6:53:
                    6a:74:4c:f3:57:c0:81:01:92:e8:36:df:6f:77:5c:
                    5c:b1:ae:0d:8b:2a:aa:46:5d:2b:21:92:c9:10:da:
                    12:d6:9b:db:a4:9b:08:dd:70:01:bd:c3:d9:b7:38:
                    c2:c6:31:d6:de:b6:e5:d7:c6:6c:81:b7:23:39:19:
                    7a:33:38:16:c4:4f:58:c3:45:c1:e6:2e:92:a8:c5:
                    0d:8b:cc:af:05:ba:88:a3:20:fa:74:75:7d:34:ea:
                    0f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:AB:56:12:9F:41:C1:37:BA:66:52:57:E8:14:11:5A:05:F6:00:B1
            X509v3 Authority Key Identifier:
                keyid:FE:82:6E:E9:BC:12:DA:AD:3B:19:74:71:B0:41:3F:1E:B2:08:26:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:c2:04:dd:9c:68:f6:5f:b2:df:4d:5b:93:9c:1c:2b:c0:b4:
         fe:3f:d0:67:5e:a9:d1:53:d6:3b:1d:c8:b7:47:ef:26:4f:c4:
         e1:bc:a6:b5:53:be:c6:3b:c5:45:ca:80:cf:4a:95:45:4a:08:
         03:42:18:92:b0:93:de:ad:a9:4a:57:ff:51:94:f3:58:fa:83:
         98:bf:d2:58:35:3c:8a:6f:fd:14:6d:4a:80:ac:9a:d9:36:b2:
         4c:33:a5:87:03:4e:25:d0:f5:db:e5:9f:1e:a6:ee:1b:17:c4:
         4c:2c:51:13:4a:7c:d6:9d:02:76:f5:34:1d:04:25:da:26:b0:
         79:a4:01:dd:ee:71:71:ee:11:17:71:2e:aa:69:46:0e:fd:fe:
         41:a3:20:b5:33:ab:cd:71:b8:d4:90:24:c4:fb:ef:57:61:27:
         b0:e1:15:63:59:96:a7:5d:35:bb:c2:ac:2e:7f:c4:8a:2b:fa:
         ca:8a:15:b5:b3:04:79:a8:81:4c:a1:63:e2:f1:d1:31:9f:1d:
         1b:76:76:2d:d0:e9:3d:40:06:fc:b5:df:02:e0:bf:36:1b:7a:
         4c:5e:ef:5b:d8:3f:62:ff:bc:b2:80:40:9e:6a:2d:7a:9b:fe:
         29:f6:66:6b:b1:0f:c9:bd:cb:ef:c4:e4:98:f2:ce:f9:d4:f6:
         c3:3f:87:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:14:52 2025 by rpki-client