Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft
File:                     PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft (raw, json)
Hash identifier:          Qe/k15a19RXwU1JCo8LYYDfV2SEgtDv5nfSUbwEZtwk=
Subject key identifier:   CD:63:8D:4D:6B:73:DA:5F:D1:AA:DE:1A:65:9F:E7:E4:7D:09:12:27
Authority key identifier: 3E:E5:22:97:61:30:6B:97:BD:A7:FB:E1:F2:4C:B4:B0:4D:49:25:8F
Certificate issuer:       /CN=A91D28C2/serialNumber=3EE5229761306B97BDA7FBE1F24CB4B04D49258F
Certificate serial:       06F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PuUil2Ewa5e9p_vh8ky0sE1JJY8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft
Manifest number:          06F1
Signing time:             Sat 18 Oct 2025 23:24:14 +0000
Manifest this update:     Sat 18 Oct 2025 23:24:14 +0000
Manifest next update:     Sat 25 Oct 2025 23:24:14 +0000
Files and hashes:         1: PuUil2Ewa5e9p_vh8ky0sE1JJY8.crl (hash: fVe2WDin/NIxf515H12J9dHxxkUuIG6sINBlo0fKams=)
                          2: 69911E0893AB11EEADF5F71BC4F9AE02.roa (hash: QCHui8d37ydNx5pkaHoJoeho1nXwmP/z+o5jMR8k9Tw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.crl
                          rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PuUil2Ewa5e9p_vh8ky0sE1JJY8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 23:24:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1783 (0x6f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D28C2, serialNumber=3EE5229761306B97BDA7FBE1F24CB4B04D49258F
        Validity
            Not Before: Oct 18 23:24:14 2025 GMT
            Not After : Oct 25 23:24:14 2025 GMT
        Subject: CN=68f4219e-557e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:8f:7a:f5:78:ae:10:fb:d1:ff:dc:f6:46:34:
                    9e:d2:75:78:89:0f:d1:83:94:d2:82:82:a9:bc:79:
                    dd:ff:dc:7a:5a:4f:2f:bd:33:46:ea:ed:6d:8b:45:
                    74:4d:11:70:57:55:f2:27:87:10:8e:8c:3f:ce:3f:
                    90:b8:cb:d4:62:2d:4a:4d:53:3b:b4:9d:dc:af:dc:
                    ef:61:0d:45:0a:8e:b6:ab:4c:f7:c6:ca:ab:1e:22:
                    3a:44:c5:ae:e5:25:d3:33:0f:cb:60:70:b4:f2:9d:
                    33:71:9b:de:1d:f5:7e:06:89:ab:eb:ed:b4:c4:2f:
                    53:d9:c1:84:f2:d5:04:61:2c:fd:08:30:ea:aa:f2:
                    f6:78:2c:30:75:19:13:ac:48:cd:df:71:c3:a7:1f:
                    02:cb:57:1b:d4:04:70:15:39:bb:ff:b6:f7:38:01:
                    08:09:0a:71:d7:34:c6:7c:c7:3a:a5:47:9d:96:06:
                    29:3b:21:f8:90:44:d6:9c:fb:55:7c:42:86:0a:f6:
                    b9:6c:93:45:ae:f9:22:48:52:e3:8b:93:da:41:db:
                    35:00:b5:43:76:af:e0:5b:3c:e2:a6:42:f6:ca:53:
                    bc:be:b6:8e:81:74:f7:93:62:9d:c1:8b:d9:09:91:
                    c0:f1:e5:ce:47:ad:c2:d7:ee:a4:58:8b:67:84:fa:
                    47:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:63:8D:4D:6B:73:DA:5F:D1:AA:DE:1A:65:9F:E7:E4:7D:09:12:27
            X509v3 Authority Key Identifier:
                keyid:3E:E5:22:97:61:30:6B:97:BD:A7:FB:E1:F2:4C:B4:B0:4D:49:25:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PuUil2Ewa5e9p_vh8ky0sE1JJY8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:28:39:93:ec:ee:ef:c7:f6:64:a5:2b:66:ca:3e:23:02:d4:
         fa:a3:d7:26:81:ac:de:23:b9:f1:6b:19:f9:a2:db:6f:d7:03:
         41:7f:d3:83:74:92:3b:58:fe:0f:28:16:87:65:d1:aa:8b:1a:
         05:be:27:f1:85:90:e7:ad:bf:24:bd:8a:e8:56:e2:fa:65:f9:
         45:14:f4:0e:9f:2b:f8:4e:c6:5f:b8:84:aa:5a:88:9b:f4:7d:
         eb:e8:21:8a:c2:61:fb:5f:39:a6:b5:ec:38:7a:a5:83:49:bf:
         86:66:d2:4c:51:f7:af:f5:01:92:fb:30:ea:1b:f6:51:9c:77:
         b9:3a:a1:26:83:9c:76:80:34:d1:ae:21:51:19:54:65:33:39:
         13:74:12:be:66:35:92:68:6d:88:28:54:53:46:82:fe:1b:2d:
         38:db:a0:ab:75:96:bc:ff:91:6b:d9:03:7f:1f:1a:45:c7:d0:
         cb:71:3b:07:56:30:36:a0:0c:8e:a8:7d:dd:1f:71:4d:77:1a:
         39:90:c6:bf:5b:d3:cf:72:56:e8:aa:b0:04:0f:0c:57:37:42:
         b1:05:73:e6:eb:37:e4:d0:13:56:5e:57:d9:de:ea:84:c2:b9:
         63:08:40:24:c8:96:22:e3:26:15:10:97:cd:9a:7f:48:6b:29:
         ca:94:9a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:41:27 2025 by rpki-client