Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft
File:                     K1F8a3njzrA4nUGrxeziEH_sU_s.mft (raw, json)
Hash identifier:          4QqHazhtcEc1jDPbrVsJJKyyL3KmXWYJQuIUDAQetO4=
Subject key identifier:   30:7F:90:03:23:7B:A2:D7:CE:F9:45:69:01:65:0A:46:B2:EE:BE:31
Authority key identifier: 2B:51:7C:6B:79:E3:CE:B0:38:9D:41:AB:C5:EC:E2:10:7F:EC:53:FB
Certificate issuer:       /CN=A91E2A61/serialNumber=2B517C6B79E3CEB0389D41ABC5ECE2107FEC53FB
Certificate serial:       0404
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft
Manifest number:          03F4
Signing time:             Sun 19 Oct 2025 02:26:58 +0000
Manifest this update:     Sun 19 Oct 2025 02:26:57 +0000
Manifest next update:     Sun 26 Oct 2025 02:26:57 +0000
Files and hashes:         1: K1F8a3njzrA4nUGrxeziEH_sU_s.crl (hash: evZ2Ypxk9iNkggFxDK5MHUriEBA1eiwzW4TepACNBiw=)
                          2: B0F9178297B811ECA8AA4230C4F9AE02.roa (hash: FoCE53zxIc9RGDT20cSl66HA963RFqLllbD6isI2Eks=)
                          3: 0E1EAB66961011ECA540626AC4F9AE02.roa (hash: 8EZQM/G5p946FK5IAxG3P6xewk8qoFsvyNghIhRO4OU=)
                          4: 457D2B5A28DC11ED839D6243C4F9AE02.roa (hash: LDUnyOdS9OamILyV+DlZlg+xzQGvjMOiRA/W3kxK9fM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.crl
                          rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 02:26:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1028 (0x404)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E2A61, serialNumber=2B517C6B79E3CEB0389D41ABC5ECE2107FEC53FB
        Validity
            Not Before: Oct 19 02:26:57 2025 GMT
            Not After : Oct 26 02:26:57 2025 GMT
        Subject: CN=68f44c71-da99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:33:ec:c2:1f:88:98:3c:df:22:dd:c7:34:27:
                    e0:16:3d:0f:d5:8e:d9:38:4e:7d:cd:7b:5a:fd:69:
                    53:32:28:44:c5:79:67:65:ed:64:91:26:d4:3d:1f:
                    31:38:cd:91:04:ec:65:e2:c0:a1:51:e1:e7:7c:76:
                    08:4c:37:b2:c2:e0:1a:c1:ed:5d:d7:b9:b1:18:7b:
                    54:c4:76:f7:4a:2a:7f:f8:41:48:78:ac:32:54:e2:
                    a4:5e:c2:42:0e:18:d5:1d:1a:cf:da:e2:33:4a:81:
                    c1:eb:77:ba:25:36:fe:1a:7f:47:d3:64:fd:41:cd:
                    bc:5a:cb:86:cb:b0:6b:69:ec:d3:1a:e1:01:fe:4f:
                    19:04:b6:5e:29:96:03:8e:d8:34:83:0e:2e:61:26:
                    b4:8b:b8:85:a9:30:93:80:7c:f7:9a:3f:67:af:6b:
                    9c:e1:ff:f7:7b:42:10:85:57:24:81:ca:40:fa:d8:
                    d5:5a:7a:30:19:8c:12:b1:63:30:07:7b:2b:a1:51:
                    77:d6:57:97:ed:30:6d:75:71:73:03:9c:7b:29:a5:
                    95:4f:6c:48:9c:65:ed:b5:4c:e8:6c:b0:2a:9d:ca:
                    1c:2c:95:2a:46:91:1b:5b:d9:4f:ce:31:84:90:d4:
                    cd:c9:f9:13:1b:a9:f7:6b:c5:59:b8:a8:be:3a:04:
                    11:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:7F:90:03:23:7B:A2:D7:CE:F9:45:69:01:65:0A:46:B2:EE:BE:31
            X509v3 Authority Key Identifier:
                keyid:2B:51:7C:6B:79:E3:CE:B0:38:9D:41:AB:C5:EC:E2:10:7F:EC:53:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:06:ce:46:ab:33:f1:21:a5:2e:6c:52:d0:64:06:13:64:44:
         3c:2a:09:e4:51:37:bb:b1:9d:e1:89:fd:07:1e:b3:54:5d:7d:
         27:f2:97:c9:31:c5:11:49:37:15:76:bb:05:ed:27:61:b2:94:
         9f:a1:d7:48:fc:15:73:d6:56:71:b2:cc:bd:de:8e:ca:c4:0c:
         ec:e6:60:cb:43:67:10:18:c2:f0:da:31:db:27:a8:7a:23:45:
         c8:bb:f0:64:08:f9:e6:55:b5:9c:3d:e4:e9:c3:9e:c6:d5:a6:
         d5:41:d6:a6:c5:1c:3a:be:57:7d:cf:d2:e2:bb:4d:83:de:b3:
         00:f9:35:0a:3b:aa:9d:a7:ae:e1:81:ed:c9:5d:64:43:f1:59:
         88:97:00:1e:48:fa:23:ec:67:87:c8:e8:c5:61:2e:2c:b4:6a:
         09:e5:95:4a:bb:5b:06:dd:6a:ad:94:07:8f:f5:f4:e4:b5:f0:
         14:1c:a6:e2:7f:59:23:78:4f:4c:37:38:34:ce:84:48:2d:64:
         ef:d3:dc:bd:46:bf:e0:af:43:b2:60:61:20:63:95:82:7b:5a:
         cb:21:ec:dd:bc:db:5a:b7:ad:9f:49:da:1b:d4:54:be:fb:e4:
         79:28:07:b1:87:e8:d4:2e:35:d0:b2:4d:6f:2c:4f:f3:b9:52:
         c6:49:b3:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:40:27 2025 by rpki-client