Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft
File:                     yGA2V1UkSO1buu1xck0iIPA798Y.mft (raw, json)
Hash identifier:          3bLzVQHe4mki1b38+yr1rxOiQSjyLlYO00acmgsSZXE=
Subject key identifier:   F7:93:74:E0:B7:40:CF:30:67:88:E2:13:F0:6A:97:79:C5:B9:1C:B1
Authority key identifier: C8:60:36:57:55:24:48:ED:5B:BA:ED:71:72:4D:22:20:F0:3B:F7:C6
Certificate issuer:       /CN=A91E782F/serialNumber=C8603657552448ED5BBAED71724D2220F03BF7C6
Certificate serial:       FC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft
Manifest number:          F4
Signing time:             Sun 19 Oct 2025 08:16:21 +0000
Manifest this update:     Sun 19 Oct 2025 08:16:21 +0000
Manifest next update:     Sun 26 Oct 2025 08:16:21 +0000
Files and hashes:         1: yGA2V1UkSO1buu1xck0iIPA798Y.crl (hash: jnZCfj2fUsya7AlezWJPLbeW3adXnM8WupjUGTUdo9c=)
                          2: C006CA2248B311EFB8A4C178C4F9AE02.roa (hash: BB5/p5ExgMeQd5Go8UNqIFMq/xQWZ4tohFPvDD4Zv98=)
                          3: 68EBA63A48B911EFB80D9535C4F9AE02.roa (hash: SDdYRvXnG416X1QTBXKH/HiVb0zTXNC7wcw8Ko4jVbs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.crl
                          rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 08:16:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 252 (0xfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E782F, serialNumber=C8603657552448ED5BBAED71724D2220F03BF7C6
        Validity
            Not Before: Oct 19 08:16:21 2025 GMT
            Not After : Oct 26 08:16:21 2025 GMT
        Subject: CN=68f49e55-aa14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:27:9d:a7:44:d1:c1:11:9c:8b:33:07:40:a1:
                    2d:f4:03:cd:3e:67:06:1d:c4:38:ea:d6:3a:83:ca:
                    36:5f:78:d6:7c:5e:a8:6c:e2:3e:74:b7:fb:28:20:
                    ff:7a:6c:f8:0a:fa:c2:ec:fe:3d:e4:c5:f1:22:14:
                    33:8e:67:1c:1b:04:71:b2:3e:5f:b8:89:d1:13:b8:
                    fa:d0:35:18:84:58:d6:52:86:cd:a5:6f:36:66:d9:
                    d0:ea:57:2a:4e:ec:77:1b:81:dd:8d:f5:f6:ef:60:
                    c3:98:aa:4d:3d:22:75:67:c0:82:3b:12:c4:bd:2c:
                    a9:4e:f5:1a:68:5f:a2:1c:dd:45:c5:a5:1d:75:5c:
                    06:74:0a:36:7c:bd:67:56:cf:f0:11:d9:79:3e:25:
                    9f:05:86:06:db:2e:13:76:90:66:62:75:dc:f2:e2:
                    2f:6b:58:5f:a5:dc:80:6a:e7:c1:58:10:08:72:86:
                    c9:bb:8b:df:45:14:34:d1:52:04:7f:c6:63:2c:72:
                    16:69:73:41:0e:c5:75:dc:a7:08:65:6b:bd:8f:e3:
                    6c:85:0a:c2:2f:da:e9:6c:e3:28:d5:db:62:4c:21:
                    88:63:b8:30:74:dc:d9:f4:dd:3a:75:14:c0:d2:98:
                    a1:c2:cc:45:2d:1d:07:ee:46:87:1f:61:1d:be:ed:
                    13:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:93:74:E0:B7:40:CF:30:67:88:E2:13:F0:6A:97:79:C5:B9:1C:B1
            X509v3 Authority Key Identifier:
                keyid:C8:60:36:57:55:24:48:ED:5B:BA:ED:71:72:4D:22:20:F0:3B:F7:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:5a:0e:d8:d1:ae:53:01:06:11:57:bd:84:ab:72:83:56:0d:
         c8:80:29:ea:81:4f:1b:18:a8:01:c3:af:ea:4e:b8:d3:37:98:
         3e:0d:e7:4c:c6:ec:1a:7e:6b:ff:90:34:af:fd:44:99:00:53:
         66:1a:98:aa:99:b7:63:15:84:ed:30:e5:1d:40:bb:c2:d6:91:
         1c:e3:be:b7:e7:04:b5:78:c3:c1:b4:f5:3b:f4:05:06:e0:43:
         ee:68:a6:6e:31:30:61:77:fe:83:50:37:1e:d5:d4:c9:ae:5e:
         8d:6f:79:73:74:01:48:f5:6c:fd:cf:e5:62:f4:fa:ae:cd:c2:
         e3:98:a8:bf:bf:7b:65:8a:d1:cd:b3:d2:13:ee:44:b0:aa:96:
         cd:79:93:d9:ab:be:21:15:26:39:86:d8:f4:83:8b:26:95:4c:
         d4:4f:9e:2a:32:12:1e:2f:03:92:87:31:2e:63:a3:3d:3e:27:
         22:9b:bf:31:d6:4f:f4:fd:76:3e:f9:75:b2:37:9c:d4:20:f4:
         bd:1d:d9:18:d8:db:6f:ad:a2:bf:87:15:1e:4a:7f:77:39:0a:
         8d:0b:8b:cf:d7:00:47:43:69:42:99:dd:64:04:08:d7:93:0b:
         6a:90:f0:97:28:46:4f:4c:56:74:1c:1a:68:8a:fb:67:63:70:
         2b:8c:4d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:31:04 2025 by rpki-client