Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft
File:                     SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft (raw, json)
Hash identifier:          Uewk3M87OihqBZGntRGznFqJNZnMMijtBGlwh2pJSeE=
Subject key identifier:   29:07:29:16:BE:9C:C1:88:26:F0:7D:36:0B:FA:B3:CE:21:AC:B7:FF
Authority key identifier: 49:B5:A4:64:63:E3:A2:B7:0A:33:44:60:14:EB:F4:0E:5C:9E:FE:74
Certificate issuer:       /CN=A91DA10A/serialNumber=49B5A46463E3A2B70A33446014EBF40E5C9EFE74
Certificate serial:       0868
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft
Manifest number:          0836
Signing time:             Sat 18 Oct 2025 22:03:24 +0000
Manifest this update:     Sat 18 Oct 2025 22:03:23 +0000
Manifest next update:     Sat 25 Oct 2025 22:03:23 +0000
Files and hashes:         1: SbWkZGPjorcKM0RgFOv0Dlye_nQ.crl (hash: Mi3Xbu47A0USzrzWFuzskCuj/VM+da46OoOf+ECGEwc=)
                          2: DDBCA666F18911EAA922EB1FC4F9AE02.roa (hash: 1QBFWULUSDuABI4M5A9+pwghN2xnBCwM1ByVsOf4OoA=)
                          3: 2F220BBA95AA11ED84962E13C4F9AE02.roa (hash: tNP9+2nzm8wftPIS9csYEXaUq+mqRmQ5CYwfV6WquDE=)
                          4: 13279E2C124011ED9E430A4CC4F9AE02.roa (hash: 6ixsZ+U2NSefvVb36mPlfQcQ8GQSyjxzHzBxsc46ols=)
                          5: 67FF0960076911EF8569F157C4F9AE02.roa (hash: QiY4AYjpAOfJUKdo2bWSjao/45XX+9doU5egkrwqJ78=)
                          6: 68C5CFBE076911EF8569F157C4F9AE02.roa (hash: StO4PQ6ffihfvooMv19fGDjAg2vQbPTwXqeeTRzTihQ=)
                          7: 42CC52ECC68111EFAE49FF5FC4F9AE02.roa (hash: jw0xm0XxEdyeTKSbIjmLJq8kg/lPA+5yh93w4gEj5Qo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.crl
                          rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 22:03:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2152 (0x868)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA10A, serialNumber=49B5A46463E3A2B70A33446014EBF40E5C9EFE74
        Validity
            Not Before: Oct 18 22:03:23 2025 GMT
            Not After : Oct 25 22:03:23 2025 GMT
        Subject: CN=68f40eac-9e02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1f:67:c5:97:d6:e5:63:5e:35:61:e0:d9:93:
                    6a:44:21:f0:d8:40:8e:49:d0:fb:6c:8e:24:94:fe:
                    63:26:05:64:84:c6:81:14:87:a3:ed:3a:37:28:af:
                    a8:59:7e:cc:e3:b5:20:55:3d:8c:db:85:09:d7:7d:
                    26:6e:8a:51:78:22:c3:d9:d5:20:4a:eb:10:78:58:
                    a0:b1:3e:cb:b7:9e:7a:d7:b4:7e:33:1d:a6:a4:7c:
                    35:3c:a2:3b:d6:0d:a3:58:20:f1:44:44:af:2c:80:
                    b6:89:63:44:4c:7f:bf:9b:8d:ef:51:44:39:e3:65:
                    2c:4d:6f:20:3f:78:09:4f:3d:72:54:02:bb:4c:42:
                    d0:62:50:22:59:ea:9c:2e:55:54:9d:d6:a1:e7:4d:
                    ec:f1:83:93:7c:32:5b:36:1b:68:15:64:31:39:40:
                    f4:f7:a2:b9:78:5e:0c:ba:fc:a6:a4:55:49:18:9e:
                    9f:35:3c:1c:97:a5:b3:bf:ad:3d:2a:d7:84:14:de:
                    f8:10:3f:29:80:9e:ad:85:83:07:59:13:1e:3c:af:
                    bb:18:22:d8:77:71:e5:1b:50:c4:f5:72:a9:dc:5e:
                    50:40:1b:f0:cc:30:3a:ba:d4:60:0a:3f:18:b3:6e:
                    82:90:df:78:46:74:c2:1d:0b:2e:80:7a:e5:1a:e2:
                    9b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:07:29:16:BE:9C:C1:88:26:F0:7D:36:0B:FA:B3:CE:21:AC:B7:FF
            X509v3 Authority Key Identifier:
                keyid:49:B5:A4:64:63:E3:A2:B7:0A:33:44:60:14:EB:F4:0E:5C:9E:FE:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:98:de:bf:bb:62:7c:2b:5c:2d:aa:68:20:d0:1f:98:80:9b:
         9a:ce:08:2b:50:40:a1:25:31:d9:3a:f0:48:13:e2:db:75:af:
         34:2b:2c:d8:ea:fc:f2:53:92:ef:d9:a6:74:b3:bf:fd:a9:87:
         85:e1:1a:5b:b7:1b:aa:27:4f:0f:69:62:d0:80:6d:71:3a:69:
         0d:50:81:57:e9:2f:d0:4c:26:cf:9e:2d:0c:36:0e:33:85:98:
         69:38:a0:23:9c:65:f4:05:18:73:e8:93:23:8f:cd:15:76:d9:
         64:95:bf:a3:9b:65:f8:eb:20:1e:45:6d:a1:ac:55:a0:a7:cf:
         26:df:1e:c2:ad:80:06:cd:d2:59:93:38:a5:d2:2c:15:ef:37:
         1e:3c:7b:bc:db:e1:ef:9d:9e:17:60:4c:b9:c7:44:40:38:87:
         6c:a7:34:1f:65:4b:4e:8d:c4:cc:eb:2d:cf:48:cf:fe:58:31:
         1b:94:15:0d:db:10:d1:f7:f4:1d:af:50:c8:7a:ea:dc:49:94:
         70:0f:30:06:5f:1e:50:41:83:38:16:95:8e:06:57:56:fa:6b:
         66:96:7c:2e:1b:0e:ed:92:a2:a7:e2:91:1b:a2:37:18:39:4f:
         18:73:21:d7:0f:08:30:a7:d4:45:43:1b:97:cb:90:10:c2:83:
         3c:93:ee:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:58:57 2025 by rpki-client