Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft
File:                     Zd_y7j-bsuskVR4dGPHWPewKbhc.mft (raw, json)
Hash identifier:          +PgyzKqKkw7oMdgFDXOv8cMO9LtnQXSui5LjX2wuBVw=
Subject key identifier:   AF:79:35:4B:00:57:54:2E:A6:0D:DB:AD:44:77:E9:3B:9C:66:C6:4A
Authority key identifier: 65:DF:F2:EE:3F:9B:B2:EB:24:55:1E:1D:18:F1:D6:3D:EC:0A:6E:17
Certificate issuer:       /CN=A91DDCB6/serialNumber=65DFF2EE3F9BB2EB24551E1D18F1D63DEC0A6E17
Certificate serial:       08AC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft
Manifest number:          089E
Signing time:             Sat 18 Oct 2025 21:42:49 +0000
Manifest this update:     Sat 18 Oct 2025 21:42:48 +0000
Manifest next update:     Sat 25 Oct 2025 21:42:48 +0000
Files and hashes:         1: Zd_y7j-bsuskVR4dGPHWPewKbhc.crl (hash: 5rFsG1U57fBPBIrwteDAixfg7DiOZUGCc4qQBhPpGSA=)
                          2: 36023BC6D29D11EAA11F7F51C4F9AE02.roa (hash: Kko5Py9oYVoGdTuR3TmCVY6w0QuvDF7yamqA7Lq7XfE=)
                          3: A7034AFA7F8411EC9036F64CC4F9AE02.roa (hash: gb3eIqGKtDZZMjsIarWLCbAcIGW3eUHFzm27i/K2y8U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.crl
                          rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 21:42:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2220 (0x8ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DDCB6, serialNumber=65DFF2EE3F9BB2EB24551E1D18F1D63DEC0A6E17
        Validity
            Not Before: Oct 18 21:42:48 2025 GMT
            Not After : Oct 25 21:42:48 2025 GMT
        Subject: CN=68f409d9-34ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:88:29:18:ca:1f:71:b9:8c:98:97:cb:a0:db:
                    36:a6:8f:de:fa:4d:1d:ff:b7:d7:e8:14:58:64:94:
                    96:ae:76:57:e6:67:c7:20:f0:e5:93:6c:c8:26:29:
                    75:cf:14:d2:a2:6d:9c:13:76:47:dd:08:7d:ca:28:
                    75:36:a4:d6:98:f4:6e:cb:96:58:0e:fa:4c:af:e3:
                    e0:78:4f:e2:87:02:18:bf:97:f9:83:20:eb:fb:43:
                    60:e7:9d:09:63:44:31:b8:f9:45:92:33:eb:d9:bb:
                    ca:99:5a:ac:bd:ba:f2:de:cd:3a:b4:0f:0c:17:dc:
                    d0:0f:1d:6c:53:de:49:c7:0c:15:a8:88:6f:9c:d8:
                    ce:ca:e7:5f:bd:7f:c8:d6:7b:e4:b4:a7:c9:70:b4:
                    b9:18:ad:ff:9f:1d:d2:19:3c:53:b4:6c:a9:84:0d:
                    11:3e:b0:5e:4e:74:1d:e2:91:97:4e:2f:9a:2a:8f:
                    ac:de:8e:57:65:37:b8:5a:32:d1:e9:01:4e:8f:5b:
                    9a:e6:24:8f:c5:07:c6:12:f2:02:f9:ac:9b:1d:1a:
                    bc:6c:64:6c:a9:3b:09:de:8f:ff:c2:c1:21:df:a9:
                    e2:66:db:af:bb:bb:f8:e9:15:25:9d:33:d6:ee:88:
                    11:a6:d3:83:9c:32:2e:34:0d:1a:36:7b:3b:90:de:
                    70:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:79:35:4B:00:57:54:2E:A6:0D:DB:AD:44:77:E9:3B:9C:66:C6:4A
            X509v3 Authority Key Identifier:
                keyid:65:DF:F2:EE:3F:9B:B2:EB:24:55:1E:1D:18:F1:D6:3D:EC:0A:6E:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:b3:1e:0b:d0:11:ca:ad:48:91:c6:8b:3d:58:6e:ad:7b:56:
         24:d3:fc:65:b7:6a:ad:03:de:47:99:e1:82:41:5c:c5:78:c1:
         56:a2:86:71:7b:28:48:e7:ec:cc:27:70:a8:52:d3:42:8c:71:
         a6:35:99:96:f7:b5:e0:4b:6a:14:b4:47:06:57:76:80:f7:09:
         1c:df:8e:ba:46:93:99:04:28:b3:a9:b8:e9:21:c4:d7:54:25:
         06:22:f6:c6:65:10:07:22:f7:d9:f7:8c:0b:e3:2e:d4:0a:2e:
         eb:bf:ff:75:f0:20:9d:89:ee:f0:fd:38:a5:13:30:f0:e9:91:
         30:0c:cf:e1:5f:5c:0d:61:60:e2:a9:35:c2:12:61:23:c5:8c:
         cb:84:74:ba:c1:97:0c:0a:f4:de:fd:42:44:86:9d:80:2f:79:
         99:c6:90:43:99:3d:a1:06:3a:16:20:19:ab:c7:f3:ae:f9:fc:
         b1:7d:a3:9b:7f:bd:41:a5:ef:bb:85:00:f4:97:4e:6a:4b:91:
         50:1e:1c:1c:e6:38:43:03:05:28:a2:a4:b0:91:45:c5:ca:ee:
         d2:cf:f4:cf:f3:3e:e0:7c:39:55:34:1b:95:b7:cd:de:43:f7:
         ba:0a:54:1a:33:f4:fe:41:a7:cd:d8:a9:3b:91:0e:20:fe:aa:
         f6:53:d8:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:32:40 2025 by rpki-client