Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft
File:                     LnKDqP3Vzws9n6or6XQogZiRk6U.mft (raw, json)
Hash identifier:          Tnw6UGZsLPs4xn8FKBdkeh4WSJelnClBWi97VjRelrI=
Subject key identifier:   68:F4:DB:CB:2E:78:6B:66:09:83:35:CC:0F:27:A1:90:23:A0:C3:17
Authority key identifier: 2E:72:83:A8:FD:D5:CF:0B:3D:9F:AA:2B:E9:74:28:81:98:91:93:A5
Certificate issuer:       /CN=A91DFADF/serialNumber=2E7283A8FDD5CF0B3D9FAA2BE9742881989193A5
Certificate serial:       09FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft
Manifest number:          09EA
Signing time:             Sat 18 Oct 2025 20:57:58 +0000
Manifest this update:     Sat 18 Oct 2025 20:57:58 +0000
Manifest next update:     Sat 25 Oct 2025 20:57:58 +0000
Files and hashes:         1: LnKDqP3Vzws9n6or6XQogZiRk6U.crl (hash: Xz3QUS/8xDM4mVKOQ2PZGxOBvdAM3EnraxEliPIspFg=)
                          2: 651384A6766811EF96E4115EC4F9AE02.roa (hash: VFpsjuU9PDSH64UL2gEPWAoxtpRrzaaut6Rewkzu2Xk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.crl
                          rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 20:57:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2556 (0x9fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DFADF, serialNumber=2E7283A8FDD5CF0B3D9FAA2BE9742881989193A5
        Validity
            Not Before: Oct 18 20:57:58 2025 GMT
            Not After : Oct 25 20:57:58 2025 GMT
        Subject: CN=68f3ff56-35a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:20:81:94:1f:f7:17:ae:92:14:a2:9c:95:f4:
                    fd:8f:3c:84:a2:1a:5d:e5:01:33:8c:0d:cd:20:21:
                    14:fe:8e:ef:74:e9:81:58:48:e5:6d:7e:cf:e1:b9:
                    31:bc:3c:8e:88:a8:b1:7a:f6:62:31:bd:36:7e:54:
                    41:92:62:85:f2:ee:d6:5c:e3:4f:66:e1:60:1e:54:
                    34:e6:21:aa:2b:2f:0b:a1:2e:98:d9:c8:c7:6b:d7:
                    07:36:b4:1b:58:23:df:a0:9e:ce:86:27:a9:75:6f:
                    fc:b1:27:c1:f8:28:22:37:2c:24:a0:79:73:a9:1f:
                    be:71:1f:8a:7f:6c:ea:08:02:c2:35:97:b0:ac:02:
                    ec:3c:ec:12:15:4a:d0:0f:1f:16:e7:20:24:65:4c:
                    56:cb:4b:e2:c8:96:d1:07:0d:60:2f:ee:1f:6e:bf:
                    15:5e:c5:3a:8a:f2:4d:d4:2e:c1:18:2e:ee:fd:bb:
                    25:ea:5f:df:c8:e5:a2:ec:62:3e:86:08:70:ab:33:
                    fa:24:fd:b8:2b:9f:48:30:07:3a:14:63:8b:c4:b4:
                    73:b1:fa:42:0f:73:e2:b8:c8:10:24:47:c1:e8:95:
                    63:fe:24:5a:b2:df:7f:d2:77:91:de:92:a0:a8:99:
                    32:a0:f9:37:a6:0c:6e:90:3f:a1:be:83:4d:60:eb:
                    87:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:F4:DB:CB:2E:78:6B:66:09:83:35:CC:0F:27:A1:90:23:A0:C3:17
            X509v3 Authority Key Identifier:
                keyid:2E:72:83:A8:FD:D5:CF:0B:3D:9F:AA:2B:E9:74:28:81:98:91:93:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:b5:38:94:c1:31:01:90:e6:8a:56:2b:7d:d3:03:a9:c1:89:
         4d:d2:9b:b4:26:c8:a5:2b:d5:4c:2f:7b:ed:08:23:c7:50:fe:
         c2:c5:39:f6:27:64:bb:ef:b1:49:23:3a:f7:8f:6f:2d:4c:43:
         e2:15:ae:5b:0d:cc:c2:5d:f2:ea:96:3c:88:3e:54:3c:f1:07:
         99:bf:fe:3a:9d:85:80:d4:51:0d:c0:60:cd:c9:0c:71:f4:e6:
         2e:10:8d:5c:1c:d3:d0:a5:14:99:d4:7a:91:07:61:8b:9f:00:
         06:f5:82:37:bc:31:3c:bc:13:55:d6:07:a9:22:28:ef:b6:35:
         10:30:f0:79:3d:fc:12:25:af:9e:4b:3f:6b:67:7c:8b:05:22:
         96:3b:a6:f8:59:78:25:60:e5:b1:c3:1a:3a:d6:8c:5d:5d:b1:
         5a:66:55:4c:45:55:06:a5:67:dc:18:4d:5a:8c:9e:eb:9f:37:
         43:95:60:f7:66:f9:6f:5a:fe:bc:0c:84:a5:65:7a:cf:c2:cf:
         e5:4d:e8:49:6d:27:2d:73:58:ff:9a:99:f3:93:f6:04:13:ea:
         f5:22:5b:f8:9c:ef:8c:eb:f7:93:96:5e:62:1c:1e:35:06:51:
         a6:a1:38:71:75:cc:dc:46:ea:d7:03:3f:06:69:38:00:1d:db:
         c2:f5:63:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:45:38 2025 by rpki-client