Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft
File:                     08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft (raw, json)
Hash identifier:          7lHeTNp1YaVJ+AMEpq5llhvqmgdcomjkzgJK1rK3Uf4=
Subject key identifier:   C1:65:98:0A:5B:27:CC:E5:48:63:6B:4C:F5:48:CE:63:34:07:29:65
Authority key identifier: D3:C6:22:E7:90:F1:DE:F1:69:28:BB:E5:54:18:17:27:CF:8C:88:F8
Certificate issuer:       /CN=A91D1234/serialNumber=D3C622E790F1DEF16928BBE554181727CF8C88F8
Certificate serial:       0360
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft
Manifest number:          035C
Signing time:             Sun 19 Oct 2025 02:59:30 +0000
Manifest this update:     Sun 19 Oct 2025 02:59:30 +0000
Manifest next update:     Sun 26 Oct 2025 02:59:30 +0000
Files and hashes:         1: 08Yi55Dx3vFpKLvlVBgXJ8-MiPg.crl (hash: VsTl8hzkA8EBqvIEiGo+sT5Yt3fUR3yyoN9IbX7wI08=)
                          2: 84A0C6B4D02811ECB2472344C4F9AE02.roa (hash: 2T9vsc4C1WKjq9QaM+1XQHhjEU7ftzmE6rg4euSNxbQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.crl
                          rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 02:59:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 864 (0x360)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1234, serialNumber=D3C622E790F1DEF16928BBE554181727CF8C88F8
        Validity
            Not Before: Oct 19 02:59:30 2025 GMT
            Not After : Oct 26 02:59:30 2025 GMT
        Subject: CN=68f45412-0c26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3a:30:b5:40:36:f1:46:ee:16:5c:9c:56:5b:
                    1c:61:77:51:36:98:6c:86:90:87:10:ec:48:d5:f5:
                    db:23:e4:db:19:7f:0b:82:db:de:0a:e5:e6:68:c2:
                    d2:19:85:8b:fc:32:9b:05:51:b1:56:ff:cc:10:1a:
                    81:06:70:3f:40:39:db:54:90:1c:9f:00:ca:6f:7b:
                    aa:27:a9:7e:f8:0a:7b:1d:50:68:d0:3d:e6:30:f2:
                    a4:98:4c:a5:40:e6:5b:e6:e1:cc:f7:6c:0b:86:51:
                    20:89:ea:ec:eb:7a:ce:cf:4a:88:82:5d:5e:a1:82:
                    f9:7f:46:cc:55:c5:83:c7:9c:6b:f9:13:64:e5:9b:
                    39:44:7d:a4:53:90:3c:0d:1e:db:27:da:7b:42:5a:
                    a9:fe:33:79:74:4b:b4:cc:2b:78:b7:de:f2:97:59:
                    8e:e9:2a:24:b8:9e:38:59:77:ad:fa:f8:77:9f:66:
                    47:77:f1:cc:9c:68:52:36:3c:2b:19:88:9f:0c:87:
                    c6:02:6e:a7:c7:58:a2:ac:39:58:d2:ee:e9:86:9f:
                    7a:56:bf:aa:2d:cb:e1:c6:1b:f6:26:b9:3a:50:53:
                    5b:14:0c:0a:2a:cf:e1:2a:2b:61:a6:88:e7:80:63:
                    00:f7:97:4d:07:99:e9:22:b6:c8:fa:b5:38:96:7f:
                    4b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:65:98:0A:5B:27:CC:E5:48:63:6B:4C:F5:48:CE:63:34:07:29:65
            X509v3 Authority Key Identifier:
                keyid:D3:C6:22:E7:90:F1:DE:F1:69:28:BB:E5:54:18:17:27:CF:8C:88:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:3b:8e:77:c6:83:71:35:96:3b:25:5b:5b:dd:80:fc:2d:67:
         eb:a4:03:46:75:88:5f:93:dd:20:a6:43:e0:ba:38:0d:eb:f9:
         f0:1a:db:63:8a:d0:b4:5e:41:48:b8:7f:e8:d6:78:94:91:b0:
         4d:bf:74:2d:30:70:17:27:f4:07:af:05:59:52:0f:94:00:d0:
         70:09:9f:9a:77:42:b5:4b:1a:ff:53:1d:a5:4f:79:cd:8a:4f:
         36:a8:1a:70:52:bb:6e:a2:a3:5b:a7:54:60:5c:0f:56:73:53:
         59:e7:f5:5b:3f:12:cd:c3:35:b6:9e:33:c7:56:21:53:01:49:
         90:58:cc:67:37:23:6f:6b:99:83:d3:e8:08:bb:74:d1:9b:31:
         c8:fb:28:a9:8c:98:c2:79:bb:17:7d:bd:de:a5:3d:a1:c0:c8:
         b8:01:22:1f:fe:6e:a5:39:63:89:40:16:f4:11:fb:14:68:f7:
         a8:2b:d3:6b:e5:c1:36:4a:a6:00:8b:c1:ca:33:01:91:31:0f:
         f5:d7:4c:75:62:8f:23:ca:47:6d:ed:57:d7:27:f7:e3:29:5f:
         88:9b:bd:a1:26:7f:5a:a5:ec:dc:1e:fa:78:92:50:aa:bb:b6:
         db:ee:65:d7:45:f8:15:1f:14:21:b2:37:2d:b0:c9:67:d9:ec:
         0e:71:04:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:06:20 2025 by rpki-client