Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.mft
File:                     d4O93Owt-bn8-48Qm3PU95Shc4Y.mft (raw, json)
Hash identifier:          9XxVa3YDYOQs5+OjWnLCrPGvMBLJ7xVfbESQOujAzeE=
Subject key identifier:   59:7C:25:36:7F:00:53:52:40:9A:26:83:91:84:07:6F:81:3E:3A:7A
Authority key identifier: 77:83:BD:DC:EC:2D:F9:B9:FC:FB:8F:10:9B:73:D4:F7:94:A1:73:86
Certificate issuer:       /CN=A91EAD63/serialNumber=7783BDDCEC2DF9B9FCFB8F109B73D4F794A17386
Certificate serial:       0260
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4O93Owt-bn8-48Qm3PU95Shc4Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.mft
Manifest number:          025C
Signing time:             Sun 19 Oct 2025 03:57:10 +0000
Manifest this update:     Sun 19 Oct 2025 03:57:09 +0000
Manifest next update:     Sun 26 Oct 2025 03:57:09 +0000
Files and hashes:         1: d4O93Owt-bn8-48Qm3PU95Shc4Y.crl (hash: B+eLssl81NJ73m3X5+yffxXee9TVfgictfaXT4lMVRw=)
                          2: 9BA13212344C11ED8F22CB70C4F9AE02.roa (hash: dSvt8WCJ5sX7UlCP0MxYFfwdeu8sA3Ot5FCk8B7masI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.crl
                          rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4O93Owt-bn8-48Qm3PU95Shc4Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 03:57:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 608 (0x260)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAD63, serialNumber=7783BDDCEC2DF9B9FCFB8F109B73D4F794A17386
        Validity
            Not Before: Oct 19 03:57:09 2025 GMT
            Not After : Oct 26 03:57:09 2025 GMT
        Subject: CN=68f46196-7446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ca:76:e2:51:17:5e:ac:87:f5:0d:7a:ba:d2:
                    c2:68:27:22:04:62:78:56:9b:47:81:fa:ca:fe:2f:
                    43:29:1a:29:e6:e7:76:e7:fa:26:84:c7:ee:77:f2:
                    f5:33:d1:72:b0:b9:50:97:84:f6:29:3d:c7:3c:b2:
                    67:d1:41:b9:e9:43:e5:50:7e:7b:54:01:37:f9:5c:
                    cd:d9:7c:82:1d:c7:61:ac:b8:2a:0e:9f:03:b2:9d:
                    94:04:45:f7:73:29:18:d0:af:a0:71:72:91:77:6a:
                    ad:d9:6e:27:b5:d7:62:af:d2:66:56:30:88:2e:a4:
                    f3:62:f4:91:4e:b8:e8:c5:07:64:63:56:3e:a8:e7:
                    1f:e4:de:ea:d1:1a:49:30:2e:17:eb:e6:54:4c:0c:
                    ca:09:13:24:0d:73:9b:0d:4b:7b:0c:f9:1d:00:c6:
                    6e:d0:2c:0d:d2:77:ac:4c:b5:e0:b0:76:bc:a2:d0:
                    73:b1:8f:87:f3:d0:aa:0c:2b:5b:ea:8e:18:4a:0e:
                    bf:73:44:48:d2:51:c9:8e:f6:07:7d:01:a6:e8:1c:
                    37:d7:6c:33:e6:01:b1:ac:ea:3c:67:5d:2e:2f:a0:
                    a6:a0:e9:dc:a1:31:4f:b6:82:1c:dc:1c:a1:82:63:
                    15:71:24:57:3e:e7:ff:e7:0a:02:6f:b8:4f:11:04:
                    fa:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:7C:25:36:7F:00:53:52:40:9A:26:83:91:84:07:6F:81:3E:3A:7A
            X509v3 Authority Key Identifier:
                keyid:77:83:BD:DC:EC:2D:F9:B9:FC:FB:8F:10:9B:73:D4:F7:94:A1:73:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4O93Owt-bn8-48Qm3PU95Shc4Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:bf:81:ea:71:3c:41:ca:36:b2:16:36:1d:8e:aa:1f:58:9b:
         84:3d:79:45:d9:c8:88:03:09:2e:cf:9e:3d:df:46:8e:f0:6c:
         28:c4:1b:8c:c9:ed:c6:2d:c8:80:16:b2:aa:a3:20:53:8d:59:
         4d:1b:b5:2c:df:56:72:03:39:fb:4f:3d:41:9d:f3:41:95:5e:
         8b:bb:22:75:f1:28:1c:6d:a6:b0:ac:fe:9d:7b:8a:d2:49:f3:
         d4:bc:45:c5:b6:c8:27:26:2e:be:b2:bb:9b:22:95:bc:67:25:
         87:0c:05:0d:6b:66:5f:46:26:84:a9:1f:25:8a:25:c2:e3:17:
         67:47:a4:ec:10:41:67:70:eb:12:f0:55:8e:17:27:2b:e5:31:
         8e:6d:bb:7c:05:20:1f:17:ae:64:23:14:0c:82:90:0f:59:09:
         10:19:db:52:14:bb:1b:68:3a:44:7c:be:6c:cf:72:c8:94:2b:
         a6:c9:d5:58:a1:42:da:fd:5a:dd:af:de:ce:d4:fc:d2:9a:01:
         a9:b5:cc:d2:62:8e:5c:55:0c:cc:84:88:93:48:38:65:83:18:
         cb:20:6f:32:3b:5f:29:95:6c:a3:33:cf:d4:cc:da:c1:6a:dc:
         83:eb:ed:a7:9e:34:83:ee:64:44:2b:e8:bb:62:89:8b:94:d6:
         12:0f:23:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:30:51 2025 by rpki-client