Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E13CF/1906AA4E8E3511F09E05E310C4F9AE02/ZeCvpNEBuqBdQl3rfCUolsuNWoY.mft
File:                     ZeCvpNEBuqBdQl3rfCUolsuNWoY.mft (raw, json)
Hash identifier:          VMRNQhp37V7JcGIOwABsswbvTbaM3rTwjMMh2oQ/RvI=
Subject key identifier:   6B:BC:89:BA:3F:FC:98:59:EF:5B:51:6B:EE:DA:96:65:A4:F9:6A:62
Authority key identifier: 65:E0:AF:A4:D1:01:BA:A0:5D:42:5D:EB:7C:25:28:96:CB:8D:5A:86
Certificate issuer:       /CN=A91E13CF/serialNumber=65E0AFA4D101BAA05D425DEB7C252896CB8D5A86
Certificate serial:       16
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeCvpNEBuqBdQl3rfCUolsuNWoY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E13CF/1906AA4E8E3511F09E05E310C4F9AE02/ZeCvpNEBuqBdQl3rfCUolsuNWoY.mft
Manifest number:          15
Signing time:             Sun 19 Oct 2025 11:27:26 +0000
Manifest this update:     Sun 19 Oct 2025 11:27:25 +0000
Manifest next update:     Sun 26 Oct 2025 11:27:25 +0000
Files and hashes:         1: ZeCvpNEBuqBdQl3rfCUolsuNWoY.crl (hash: 7dkZEYvbqKKCSCbJzsKzFu0+08SD3W0Qm+dI/MqtWHg=)
                          2: D88B7AD48E3511F0A7463923C4F9AE02.roa (hash: T+Vddxi4ktePZ++S8jyGyy1zTkX61dK/stJxrjN0Ydc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E13CF/1906AA4E8E3511F09E05E310C4F9AE02/ZeCvpNEBuqBdQl3rfCUolsuNWoY.crl
                          rsync://rpki.apnic.net/member_repository/A91E13CF/1906AA4E8E3511F09E05E310C4F9AE02/ZeCvpNEBuqBdQl3rfCUolsuNWoY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeCvpNEBuqBdQl3rfCUolsuNWoY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 11:27:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E13CF, serialNumber=65E0AFA4D101BAA05D425DEB7C252896CB8D5A86
        Validity
            Not Before: Oct 19 11:27:25 2025 GMT
            Not After : Oct 26 11:27:25 2025 GMT
        Subject: CN=68f4cb1d-d581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:fd:d5:bf:73:6d:20:29:e8:30:44:dd:0f:d9:
                    9f:e1:c1:cc:97:96:fd:ee:ef:42:1c:6e:e6:d8:cd:
                    bd:02:a2:59:ef:57:34:bf:a6:70:a3:65:d4:aa:b8:
                    4e:e6:e2:41:5d:0b:9c:c3:c7:0e:70:6f:c1:0b:1f:
                    f2:4b:79:87:a4:b5:00:12:1c:df:0c:c4:77:bf:d4:
                    ad:72:92:68:96:6c:bd:d2:fc:c3:01:48:9c:17:ac:
                    0b:eb:a2:2f:a9:da:97:47:3e:eb:d0:40:1c:78:17:
                    71:80:61:6d:42:2c:9b:86:f9:6d:6b:6a:66:5e:95:
                    e9:b3:25:a8:25:09:87:5e:28:9d:fe:51:83:ee:3d:
                    1a:61:03:6f:df:95:27:df:ca:b8:38:29:3c:e7:38:
                    52:90:0c:bd:5d:ce:c1:89:d0:da:a7:94:ac:1e:15:
                    ea:a8:76:07:17:0e:30:9a:65:3a:af:ff:91:e5:d6:
                    cf:d8:4b:8a:4f:99:e3:cf:87:df:5e:65:e4:49:bd:
                    e1:52:b3:d4:31:36:72:09:10:51:d5:73:95:66:e7:
                    ab:2d:89:65:95:00:98:df:8a:e0:75:15:14:b8:4a:
                    6c:24:29:f4:53:57:b9:65:81:14:7b:77:ff:c6:82:
                    d2:e8:d2:2a:c2:cd:8b:ee:43:8b:e1:78:bb:de:6a:
                    52:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:BC:89:BA:3F:FC:98:59:EF:5B:51:6B:EE:DA:96:65:A4:F9:6A:62
            X509v3 Authority Key Identifier:
                keyid:65:E0:AF:A4:D1:01:BA:A0:5D:42:5D:EB:7C:25:28:96:CB:8D:5A:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E13CF/1906AA4E8E3511F09E05E310C4F9AE02/ZeCvpNEBuqBdQl3rfCUolsuNWoY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeCvpNEBuqBdQl3rfCUolsuNWoY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E13CF/1906AA4E8E3511F09E05E310C4F9AE02/ZeCvpNEBuqBdQl3rfCUolsuNWoY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:64:9b:3c:96:b8:ab:ae:b9:77:b3:09:19:cb:2c:35:63:87:
         6a:2c:20:54:7f:55:93:15:be:c7:59:cf:b6:7a:94:10:31:cf:
         a2:a0:3d:d0:b9:f4:dd:8c:91:17:3c:3e:ab:ad:c3:71:10:a0:
         15:bb:33:7f:b3:63:88:67:4e:c6:d3:4d:3d:a5:62:58:68:49:
         aa:f8:ab:62:73:6e:3c:75:68:8c:b6:70:56:fb:69:fd:10:9c:
         ae:2b:e3:07:92:1b:98:ce:74:cd:4b:79:95:48:ed:93:96:b3:
         f0:fe:4b:58:11:12:36:83:57:75:d3:44:fd:61:d8:62:11:51:
         0b:19:ae:57:6b:37:67:9f:05:90:18:98:dd:aa:8d:c0:03:47:
         5f:e2:16:6d:ad:72:89:a5:e7:d7:c0:eb:50:53:63:51:f7:d3:
         16:5f:ad:52:f3:a6:13:e4:60:0e:7f:74:25:c0:57:2e:88:bd:
         29:a2:4d:7e:cd:f1:29:29:99:9a:9a:5a:1f:80:4b:cd:d9:94:
         28:9a:a5:2d:43:bd:10:d4:9a:58:57:9b:c4:79:95:da:1d:8c:
         32:f9:61:3f:92:40:33:3e:ab:dc:29:42:16:02:f4:be:c1:61:
         ec:8a:62:f3:3f:88:0b:43:ca:b8:e6:01:b9:44:8a:b8:1c:81:
         b6:9c:bc:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:35:49 2025 by rpki-client