Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.mft
File:                     VIY3awW4olUjKeNhvXJcd-H40Mk.mft (raw, json)
Hash identifier:          2mcLxHMlYfYLE7Cl7MRZC7K10P95fZs47VsC6ObhDbM=
Subject key identifier:   38:1F:5D:4B:FB:4F:24:24:B5:22:4F:55:BD:C0:06:5A:89:D0:EF:61
Authority key identifier: 54:86:37:6B:05:B8:A2:55:23:29:E3:61:BD:72:5C:77:E1:F8:D0:C9
Certificate issuer:       /CN=A91D17F2/serialNumber=5486376B05B8A2552329E361BD725C77E1F8D0C9
Certificate serial:       0D82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIY3awW4olUjKeNhvXJcd-H40Mk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.mft
Manifest number:          0D25
Signing time:             Sat 18 Oct 2025 18:53:52 +0000
Manifest this update:     Sat 18 Oct 2025 18:53:52 +0000
Manifest next update:     Sat 25 Oct 2025 18:53:52 +0000
Files and hashes:         1: VIY3awW4olUjKeNhvXJcd-H40Mk.crl (hash: x4zA2RxI74rsYDYjuhjWNIq/V0W7W3kgOGqWozJZc94=)
                          2: 56B11920B64911EFBDB0DF37C4F9AE02.roa (hash: XCT7tuDg7rRdggBIsYIkP0xUcz1gGkq6RdReIlG+HqU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.crl
                          rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIY3awW4olUjKeNhvXJcd-H40Mk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 18:53:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3458 (0xd82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D17F2, serialNumber=5486376B05B8A2552329E361BD725C77E1F8D0C9
        Validity
            Not Before: Oct 18 18:53:52 2025 GMT
            Not After : Oct 25 18:53:52 2025 GMT
        Subject: CN=68f3e240-ca1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b0:12:10:c7:42:dc:66:d2:aa:e7:31:7f:98:
                    75:84:99:9f:96:03:b1:37:30:2b:2d:66:be:25:07:
                    e7:45:82:d3:3f:9f:27:40:54:ee:6e:61:c3:e6:17:
                    1d:99:c9:9e:1c:a7:ef:10:5b:28:e9:b6:a5:61:78:
                    d7:2a:ac:8a:36:9c:72:ae:45:fd:ff:16:38:e7:fd:
                    79:af:40:55:18:d0:a8:46:94:f3:2b:59:c6:6b:51:
                    36:52:15:d0:19:c8:04:d5:c6:b6:8a:8d:c5:86:29:
                    70:c8:4b:33:93:c9:1d:29:00:d5:ac:b5:28:6c:97:
                    9e:3d:a9:c9:72:a8:e2:17:23:01:8a:11:da:45:ad:
                    25:56:4b:5d:a6:4d:10:54:01:9a:68:38:91:fc:93:
                    c0:1c:cf:4c:7d:ab:6f:1f:ba:25:49:5e:7e:55:34:
                    bc:b2:22:5d:76:ac:32:5d:f5:84:7f:3c:77:e1:46:
                    e9:e5:ce:e9:6f:e8:d8:01:9b:dd:ea:70:3f:4b:b5:
                    41:fb:72:19:09:bf:65:5b:70:c5:b6:8f:5a:7e:4d:
                    c9:52:38:bf:35:84:04:aa:2a:1c:bc:f6:f4:9f:55:
                    c5:9c:8b:b6:5c:56:a6:8f:d8:2c:bf:43:44:2b:3c:
                    f7:2e:34:9a:af:f4:94:ff:62:25:de:aa:15:b1:b9:
                    01:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:1F:5D:4B:FB:4F:24:24:B5:22:4F:55:BD:C0:06:5A:89:D0:EF:61
            X509v3 Authority Key Identifier:
                keyid:54:86:37:6B:05:B8:A2:55:23:29:E3:61:BD:72:5C:77:E1:F8:D0:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIY3awW4olUjKeNhvXJcd-H40Mk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:c0:f3:1d:71:ed:dd:1f:b1:a0:9d:da:30:e9:e1:cb:f1:b6:
         9a:d2:ef:68:9d:c5:2c:5d:cf:49:19:03:24:98:39:98:ff:57:
         ee:89:75:86:84:50:1b:ac:63:68:73:16:c4:47:52:27:41:71:
         2a:aa:7c:2f:eb:48:16:e8:01:53:a5:c6:76:05:0a:7f:91:25:
         b2:48:e3:f5:be:52:36:51:30:07:65:b9:36:9f:25:83:ff:c4:
         fe:2a:fd:d7:41:8e:75:c0:39:ee:3c:ed:ab:47:15:06:3b:c7:
         f9:a7:f7:e3:bf:94:ca:37:c6:a4:84:f4:a4:83:c9:7c:7d:0e:
         f7:df:99:56:a3:fb:7e:76:a8:4a:b4:44:9f:cd:7b:cf:1e:40:
         3e:04:1e:a8:10:d0:6d:b2:97:03:25:e3:6f:77:09:cf:4f:b8:
         d4:34:6d:82:62:bc:8b:4c:ae:f8:c5:ee:58:51:34:c7:3c:48:
         85:59:6f:a2:cd:c8:48:37:58:3a:1e:36:21:b2:a3:9b:e5:cd:
         ef:bd:e5:b9:78:96:ff:16:2d:78:19:e9:7d:f6:67:43:07:75:
         bc:a0:15:b8:74:4f:80:01:84:ff:c3:68:c2:f1:b3:bd:2a:93:
         dc:d1:ef:96:66:b6:c5:ca:8d:14:e0:b9:5b:78:ce:0f:f8:42:
         e9:b1:91:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:32:43 2025 by rpki-client