Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft
File:                     _Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft (raw, json)
Hash identifier:          v7BAzPAnCFx5+G7ZLmtlZtigNZZgMfkR19r/6/86jmo=
Subject key identifier:   9B:D3:EC:F3:C1:40:50:3F:A8:A9:E4:30:1E:6A:88:02:BA:33:F9:25
Authority key identifier: FC:7B:39:4F:8F:9C:BF:9C:DD:20:93:C2:72:6D:DF:E9:13:FA:A9:CE
Certificate issuer:       /CN=A91D2A6D/serialNumber=FC7B394F8F9CBF9CDD2093C2726DDFE913FAA9CE
Certificate serial:       02CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft
Manifest number:          02C5
Signing time:             Sun 19 Oct 2025 03:34:12 +0000
Manifest this update:     Sun 19 Oct 2025 03:34:11 +0000
Manifest next update:     Sun 26 Oct 2025 03:34:11 +0000
Files and hashes:         1: _Hs5T4-cv5zdIJPCcm3f6RP6qc4.crl (hash: pLKLveN5rIAxeHzjkWkKGcBL5SSF7VK9oOHpsk5tMI0=)
                          2: 7B18C5B40CCE11ED97C94316C4F9AE02.roa (hash: goaKWUv5rRzy+se4DCphxh+KiAGhLohPjMAfli+5ur8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.crl
                          rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 03:34:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 714 (0x2ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D2A6D, serialNumber=FC7B394F8F9CBF9CDD2093C2726DDFE913FAA9CE
        Validity
            Not Before: Oct 19 03:34:11 2025 GMT
            Not After : Oct 26 03:34:11 2025 GMT
        Subject: CN=68f45c34-3989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:84:40:a4:d6:bc:57:0d:70:9f:a3:48:dd:9d:
                    e6:94:0c:61:6e:28:f3:2b:5c:0e:5e:ac:b3:da:91:
                    9c:a9:a7:45:a0:33:c6:4c:eb:17:06:a6:e8:92:d9:
                    3f:0e:eb:14:94:a7:c6:b3:ac:b1:95:49:41:23:04:
                    d3:b2:ab:30:76:87:80:a4:7c:cf:2b:35:93:23:49:
                    6c:09:be:74:e8:5d:d0:c4:2b:5b:cb:e9:18:35:23:
                    04:7e:a6:d5:2f:77:a0:a0:b4:46:04:09:6b:de:28:
                    c0:ca:24:bb:99:db:7e:bc:99:92:10:72:7c:7e:27:
                    02:2f:0e:90:7d:d3:e4:71:3f:90:cd:1f:fb:47:49:
                    0d:49:47:56:4f:80:bd:55:38:56:37:06:0b:f0:be:
                    ae:59:a5:e8:d6:8c:01:1a:85:62:54:cc:b8:81:10:
                    d7:27:34:f5:0c:ff:6e:79:33:80:ff:cf:45:21:a2:
                    7f:1b:c8:17:96:9a:6c:40:2a:42:e1:63:19:e9:73:
                    c6:88:63:45:08:5c:ab:b1:e8:0d:28:62:ae:c2:4a:
                    03:64:77:9a:ae:81:33:5e:e1:6a:7b:cc:da:b6:05:
                    50:53:4c:44:d5:48:a6:99:bd:b5:b4:85:a8:d6:2e:
                    17:29:78:32:da:5a:ed:09:80:ba:92:81:56:55:68:
                    d5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:D3:EC:F3:C1:40:50:3F:A8:A9:E4:30:1E:6A:88:02:BA:33:F9:25
            X509v3 Authority Key Identifier:
                keyid:FC:7B:39:4F:8F:9C:BF:9C:DD:20:93:C2:72:6D:DF:E9:13:FA:A9:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:15:df:34:e4:a0:46:01:28:a1:08:30:32:bf:a3:ed:c4:e3:
         37:4b:5f:25:99:9f:2f:77:aa:44:90:26:14:69:bd:eb:30:1d:
         8d:48:38:46:84:97:cb:ef:4d:94:06:ec:51:1c:4a:f4:91:b1:
         a6:24:c2:e1:69:05:11:97:db:af:cc:64:26:ca:54:0d:61:9a:
         c5:6a:4a:16:8c:6d:63:e9:53:89:c6:6d:f5:25:c6:80:92:12:
         57:54:ef:48:4f:89:ce:52:35:ef:a6:3c:f2:a5:12:10:df:54:
         57:97:7a:3c:0b:4a:78:e7:45:43:b3:c9:21:11:21:72:e3:b8:
         5d:e7:51:a9:fe:db:e6:04:46:a9:4c:d2:9f:cc:d6:06:64:c3:
         6f:db:9f:71:e2:3c:e6:ad:5a:46:1e:09:d2:2b:50:7b:a4:10:
         7e:28:1c:a4:fc:76:ba:d8:b0:e4:d0:88:cc:b7:13:c4:11:75:
         75:ca:d5:b4:b0:fb:3c:6a:af:13:2c:ab:01:ba:26:70:d9:8d:
         09:80:db:5c:5f:f3:fa:31:4c:74:19:ae:3a:75:4c:db:1f:f1:
         9e:81:38:48:57:a3:e5:cc:e9:9e:f3:44:fb:69:23:11:89:b2:
         04:1a:15:96:64:ae:de:63:52:1f:f4:91:be:22:5a:db:79:fb:
         1e:89:62:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:47:58 2025 by rpki-client