Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/_eDYrIjb_GreZ9__WjrC7yZsXNw.mft
File:                     _eDYrIjb_GreZ9__WjrC7yZsXNw.mft (raw, json)
Hash identifier:          558hKC1Heyo1Raz/huy3bjAkJo4RwV9lXdP5AcycuDI=
Subject key identifier:   78:75:75:41:FE:60:C9:A3:CB:51:1B:C3:2B:51:43:69:25:76:96:AD
Authority key identifier: FD:E0:D8:AC:88:DB:FC:6A:DE:67:DF:FF:5A:3A:C2:EF:26:6C:5C:DC
Certificate issuer:       /CN=A91E7FA1/serialNumber=FDE0D8AC88DBFC6ADE67DFFF5A3AC2EF266C5CDC
Certificate serial:       56
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eDYrIjb_GreZ9__WjrC7yZsXNw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/_eDYrIjb_GreZ9__WjrC7yZsXNw.mft
Manifest number:          54
Signing time:             Sun 19 Oct 2025 10:37:27 +0000
Manifest this update:     Sun 19 Oct 2025 10:37:26 +0000
Manifest next update:     Sun 26 Oct 2025 10:37:26 +0000
Files and hashes:         1: _eDYrIjb_GreZ9__WjrC7yZsXNw.crl (hash: YRT3QGWxyMh1DXgShsUmsPoIwTs05bwZtf18YgZcrEA=)
                          2: 292A3CF0376511F0A9D2D035C4F9AE02.roa (hash: qQ/o26aFQ3fCsqKdZcgYj7qgKbMCzj8e65hKr1gdKM8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/_eDYrIjb_GreZ9__WjrC7yZsXNw.crl
                          rsync://rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/_eDYrIjb_GreZ9__WjrC7yZsXNw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eDYrIjb_GreZ9__WjrC7yZsXNw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 10:37:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86 (0x56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E7FA1, serialNumber=FDE0D8AC88DBFC6ADE67DFFF5A3AC2EF266C5CDC
        Validity
            Not Before: Oct 19 10:37:26 2025 GMT
            Not After : Oct 26 10:37:26 2025 GMT
        Subject: CN=68f4bf66-34c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c0:2e:a8:c2:e4:68:4b:71:f9:75:aa:e9:dd:
                    03:30:5b:7d:ec:73:1a:68:3c:d3:6f:aa:8c:27:d4:
                    57:5e:0f:91:72:65:c2:8b:50:55:45:e2:0d:7f:21:
                    cd:a0:ac:99:fe:44:79:3f:3e:bf:bf:8f:95:72:21:
                    2d:38:1f:32:6b:3b:7c:e6:e5:9b:ad:ed:5b:59:fa:
                    45:41:c0:dc:9f:b5:2a:79:68:d3:fc:47:54:b7:5a:
                    0a:8d:9a:47:71:1d:b7:9f:22:c7:09:96:c6:74:2c:
                    e5:a4:bf:f8:59:ea:84:c3:e1:c9:21:ad:b5:5d:13:
                    5b:4d:b5:9f:5d:f2:02:41:41:03:25:c7:96:3e:80:
                    22:4d:a2:70:67:d8:b5:51:b0:e4:46:bf:b9:9f:35:
                    d2:0f:56:da:5d:a4:1c:fc:5e:2c:75:88:ac:07:d7:
                    20:2d:db:40:cd:f3:a4:3e:3a:b6:79:b6:f2:93:48:
                    ee:16:04:e4:ae:ef:3d:f9:b7:07:d7:66:8f:26:7d:
                    a3:9f:48:b3:7e:46:fc:18:bd:c4:e4:99:eb:29:02:
                    6a:a5:d3:81:18:8f:c2:ca:b3:57:8c:9d:a8:37:8f:
                    43:d5:cb:a2:91:34:58:a8:d2:3a:d5:7d:ba:f5:7c:
                    b3:81:c5:65:04:d3:95:8c:94:49:97:64:f1:6f:78:
                    40:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:75:75:41:FE:60:C9:A3:CB:51:1B:C3:2B:51:43:69:25:76:96:AD
            X509v3 Authority Key Identifier:
                keyid:FD:E0:D8:AC:88:DB:FC:6A:DE:67:DF:FF:5A:3A:C2:EF:26:6C:5C:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/_eDYrIjb_GreZ9__WjrC7yZsXNw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eDYrIjb_GreZ9__WjrC7yZsXNw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/_eDYrIjb_GreZ9__WjrC7yZsXNw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:bb:3e:36:e6:f8:1d:26:75:e9:5a:71:84:84:66:33:67:fa:
         ae:1d:3e:7e:28:37:aa:36:61:6b:d2:97:fa:7d:6e:b5:51:ef:
         15:cb:95:c1:f9:2f:0b:f5:a1:a5:7b:32:a6:17:09:25:33:de:
         18:b7:10:9b:bb:f7:36:50:04:35:87:e3:e6:fc:f9:ad:7d:3c:
         a4:cb:bf:e4:7e:aa:aa:16:3c:95:ad:f0:f0:d4:e9:e3:d2:82:
         7d:60:c9:f3:f1:79:ea:ed:d3:ff:99:10:80:fe:3c:c2:a4:a7:
         34:74:0e:c4:73:13:db:5c:34:8e:53:23:9d:54:ac:6b:42:c9:
         7e:25:69:f8:e7:98:16:fe:e0:a9:7e:ec:85:e9:8f:a2:ee:e8:
         27:f8:a8:99:bf:fa:b6:07:25:37:d0:6d:d7:97:8d:7a:e7:3f:
         32:8a:10:e4:01:0e:08:77:87:32:bc:f1:b2:0f:f3:10:23:65:
         8e:47:65:7b:9e:3c:e6:14:d6:22:91:61:70:03:21:6f:29:3a:
         6c:99:bf:fb:99:6a:48:6e:41:4a:7c:1e:60:2e:e2:ab:66:34:
         dc:0d:e0:b6:90:41:4b:7c:71:3f:3d:b2:ed:33:39:19:4c:4f:
         40:50:e6:6b:ae:01:0b:61:e5:07:4e:fb:58:89:99:b6:30:e1:
         9d:78:b8:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:45:53 2025 by rpki-client