Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBA0F/D90067FE4CD711EAB4555845C4F9AE02/rRapGbMt65RQ0upjx51QMV2RgVU.mft
File:                     rRapGbMt65RQ0upjx51QMV2RgVU.mft (raw, json)
Hash identifier:          6V+k9JMxY2qB/qR/Bcye2ZEC4DXg4lmyiBsxr9ytQLY=
Subject key identifier:   D5:13:42:D7:25:E9:05:98:EA:10:98:0C:9A:2B:E3:ED:EC:CC:B5:93
Authority key identifier: AD:16:A9:19:B3:2D:EB:94:50:D2:EA:63:C7:9D:50:31:5D:91:81:55
Certificate issuer:       /CN=A91DBA0F/serialNumber=AD16A919B32DEB9450D2EA63C79D50315D918155
Certificate serial:       0B2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rRapGbMt65RQ0upjx51QMV2RgVU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DBA0F/D90067FE4CD711EAB4555845C4F9AE02/rRapGbMt65RQ0upjx51QMV2RgVU.mft
Manifest number:          0B21
Signing time:             Sat 18 Oct 2025 20:13:01 +0000
Manifest this update:     Sat 18 Oct 2025 20:13:01 +0000
Manifest next update:     Sat 25 Oct 2025 20:13:01 +0000
Files and hashes:         1: rRapGbMt65RQ0upjx51QMV2RgVU.crl (hash: otYFyVCMcVUQ1NcQLvDyekcXtzwLkpupnnktCXLcylA=)
                          2: D54C8E6C4DBD11EAAF427F1AC4F9AE02.roa (hash: TavcsNbKSaSDXkcGP72u+jTcP48G3Su8SEY/uwppPwI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DBA0F/D90067FE4CD711EAB4555845C4F9AE02/rRapGbMt65RQ0upjx51QMV2RgVU.crl
                          rsync://rpki.apnic.net/member_repository/A91DBA0F/D90067FE4CD711EAB4555845C4F9AE02/rRapGbMt65RQ0upjx51QMV2RgVU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rRapGbMt65RQ0upjx51QMV2RgVU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 20:13:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2860 (0xb2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DBA0F, serialNumber=AD16A919B32DEB9450D2EA63C79D50315D918155
        Validity
            Not Before: Oct 18 20:13:01 2025 GMT
            Not After : Oct 25 20:13:01 2025 GMT
        Subject: CN=68f3f4cd-6cc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:72:12:71:3c:19:ac:7d:e7:fb:48:bb:8d:98:
                    45:63:21:bf:8c:d1:72:a9:7d:e2:59:ab:8b:94:c8:
                    a6:74:50:56:a3:9a:bc:34:f7:7e:64:d6:56:46:c2:
                    79:1b:89:f7:55:e9:0f:b6:5f:05:e4:c9:5a:01:32:
                    df:cf:dd:42:83:13:8b:fc:2a:6e:5d:72:91:8d:31:
                    d4:6a:fe:4b:e6:f5:cd:4f:fc:eb:a3:5a:78:8d:d9:
                    19:03:32:5b:f4:33:22:eb:09:e1:3d:a3:c2:ae:71:
                    90:85:9e:34:63:71:f4:d1:48:7e:e5:99:32:5d:04:
                    9c:49:e5:87:57:b9:89:47:c6:29:35:93:5e:7e:83:
                    fb:2a:42:2b:0d:86:23:1e:59:6a:3a:11:64:5f:13:
                    6a:84:94:cd:fd:b3:8d:e7:23:f7:db:53:69:75:aa:
                    40:ce:4d:45:c3:69:06:d3:3f:15:0a:0c:29:31:ed:
                    a3:ba:4b:a5:5d:5d:85:b7:60:f6:f4:eb:5f:1c:4c:
                    cf:46:c4:11:bc:b6:18:a2:fe:1c:ba:75:4f:46:16:
                    2e:71:f6:9e:54:e0:bb:15:8b:2e:69:a8:9d:e3:4d:
                    9d:89:9b:81:80:30:1d:c5:8b:26:c6:1e:1d:62:2a:
                    fc:23:e7:43:2e:75:f9:97:d5:89:69:0d:55:33:eb:
                    52:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:13:42:D7:25:E9:05:98:EA:10:98:0C:9A:2B:E3:ED:EC:CC:B5:93
            X509v3 Authority Key Identifier:
                keyid:AD:16:A9:19:B3:2D:EB:94:50:D2:EA:63:C7:9D:50:31:5D:91:81:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DBA0F/D90067FE4CD711EAB4555845C4F9AE02/rRapGbMt65RQ0upjx51QMV2RgVU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rRapGbMt65RQ0upjx51QMV2RgVU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBA0F/D90067FE4CD711EAB4555845C4F9AE02/rRapGbMt65RQ0upjx51QMV2RgVU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:e2:67:4e:43:9c:5d:dd:d1:39:f9:1b:1a:58:59:7b:ca:50:
         fd:67:e1:69:b0:43:65:05:0f:54:52:1c:bf:42:94:7b:68:be:
         0e:c8:48:d2:b9:46:40:d3:0d:25:bb:ce:ee:d4:de:9a:8e:25:
         0a:62:81:1e:51:7b:47:ea:e2:7a:97:50:54:d0:cf:12:3e:6d:
         67:88:d5:5e:6b:ec:67:db:d7:8a:e8:08:0a:f8:0d:0a:1c:d1:
         35:39:01:49:0e:e6:bd:06:47:ea:53:25:8f:da:2a:71:ad:cd:
         6a:29:4b:46:59:cc:a3:39:c6:fb:3e:c9:8b:bd:31:48:94:e1:
         33:d6:26:cb:b2:4c:10:75:54:54:bc:43:a1:cc:fd:b6:9d:bb:
         a8:e9:da:cb:8e:5a:48:29:c3:11:8a:d8:5c:d5:0a:d0:8c:e2:
         7c:46:d4:97:07:51:b4:2d:e1:23:ec:3b:86:0b:26:36:82:71:
         b5:c8:58:7d:07:49:f1:34:9b:95:58:72:5d:7b:16:c9:c6:43:
         f0:fd:37:59:3f:94:f2:2d:9a:a4:2e:da:a0:45:d3:ce:c0:11:
         a6:a0:97:1e:6c:0e:7e:8b:56:ec:86:9d:82:73:b9:7b:7d:a0:
         9d:27:02:b6:84:c0:9f:a1:fc:40:d2:22:90:0e:1e:06:2c:f3:
         e8:4c:28:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:25:33 2025 by rpki-client