Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBF27/F1D3E326ABE711EBB85D5147C4F9AE02/0DacIB93rzjycCn7IkbEOF0njKI.mft
File:                     0DacIB93rzjycCn7IkbEOF0njKI.mft (raw, json)
Hash identifier:          rfCrPD6B0th2q1Y3KvzdFqANVR4VYueGc3EdP/4fKgM=
Subject key identifier:   4C:4E:40:FC:C6:E2:46:18:5B:FD:4B:79:55:39:26:FD:2A:0B:B5:79
Authority key identifier: D0:36:9C:20:1F:77:AF:38:F2:70:29:FB:22:46:C4:38:5D:27:8C:A2
Certificate issuer:       /CN=A91EBF27/serialNumber=D0369C201F77AF38F27029FB2246C4385D278CA2
Certificate serial:       063A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DacIB93rzjycCn7IkbEOF0njKI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EBF27/F1D3E326ABE711EBB85D5147C4F9AE02/0DacIB93rzjycCn7IkbEOF0njKI.mft
Manifest number:          063A
Signing time:             Sun 19 Oct 2025 00:15:09 +0000
Manifest this update:     Sun 19 Oct 2025 00:15:09 +0000
Manifest next update:     Sun 26 Oct 2025 00:15:09 +0000
Files and hashes:         1: 0DacIB93rzjycCn7IkbEOF0njKI.crl (hash: pj2mURjSzAvPU6o/9YUwdaSO7CPxk7PTxJiRqQ9waNc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EBF27/F1D3E326ABE711EBB85D5147C4F9AE02/0DacIB93rzjycCn7IkbEOF0njKI.crl
                          rsync://rpki.apnic.net/member_repository/A91EBF27/F1D3E326ABE711EBB85D5147C4F9AE02/0DacIB93rzjycCn7IkbEOF0njKI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DacIB93rzjycCn7IkbEOF0njKI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 00:15:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1594 (0x63a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EBF27, serialNumber=D0369C201F77AF38F27029FB2246C4385D278CA2
        Validity
            Not Before: Oct 19 00:15:09 2025 GMT
            Not After : Oct 26 00:15:09 2025 GMT
        Subject: CN=68f42d8d-8bb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b1:d3:c2:fb:46:60:d8:18:a3:4a:a0:4a:dc:
                    43:1a:f3:05:b8:fb:ff:05:d4:58:6d:df:e1:bc:84:
                    fa:ea:03:37:64:7e:15:3a:07:f5:b6:2c:65:88:ea:
                    d8:df:c3:e7:df:80:71:a6:7d:5f:9e:6a:6f:fd:7c:
                    1d:53:df:87:76:c1:4a:d9:54:fc:42:31:51:42:e3:
                    0f:c7:bf:3c:a0:f6:38:10:28:b5:56:03:78:a4:a2:
                    08:ad:cb:b7:43:d9:11:69:a2:36:a2:c5:3f:1e:ad:
                    79:02:ec:3d:ff:5a:8f:c2:56:50:77:de:5c:63:63:
                    3e:d3:50:fb:5c:e5:ea:f3:69:a9:87:34:ed:17:36:
                    81:a5:1d:4a:d8:ae:78:d6:52:3c:f3:bf:7b:04:44:
                    84:9e:6c:7a:6e:09:2c:29:7d:2b:94:37:0d:6b:16:
                    4a:6c:cc:a5:a2:b0:a0:ef:f1:bc:1d:24:b0:80:ae:
                    7c:f4:92:ab:c0:34:fc:4d:fa:18:88:07:4a:b0:17:
                    81:f7:c8:8a:f1:d7:67:f7:26:12:91:a6:4a:ab:ec:
                    6a:ae:28:b2:15:5a:fc:1d:ea:61:51:d8:a5:f8:63:
                    0f:0c:b1:8d:d2:55:3a:de:3a:59:57:df:5b:aa:62:
                    4b:6e:5b:fa:9d:c5:b6:73:6f:17:ac:3c:fc:99:27:
                    5d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:4E:40:FC:C6:E2:46:18:5B:FD:4B:79:55:39:26:FD:2A:0B:B5:79
            X509v3 Authority Key Identifier:
                keyid:D0:36:9C:20:1F:77:AF:38:F2:70:29:FB:22:46:C4:38:5D:27:8C:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EBF27/F1D3E326ABE711EBB85D5147C4F9AE02/0DacIB93rzjycCn7IkbEOF0njKI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DacIB93rzjycCn7IkbEOF0njKI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBF27/F1D3E326ABE711EBB85D5147C4F9AE02/0DacIB93rzjycCn7IkbEOF0njKI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:e4:58:7b:2e:b4:10:0c:58:24:52:39:dd:21:b2:10:29:be:
         83:56:9e:d2:31:9e:5e:aa:11:bd:4c:41:d1:f6:c9:a4:a2:75:
         31:f4:59:70:7d:f3:e6:de:ab:a8:67:2b:10:2e:09:d3:a7:22:
         a9:52:7d:07:8b:58:2e:1c:2c:15:ab:5c:47:39:e2:0a:86:f0:
         96:63:94:8c:d0:7d:3a:e4:07:8a:0b:72:3d:d8:05:11:22:f3:
         b0:82:de:95:be:69:62:aa:f7:cb:a7:0e:30:b8:d6:ad:3b:a9:
         7b:8a:67:76:92:37:c8:cf:26:43:8c:65:e5:b5:a6:7e:e0:29:
         e3:4f:8c:f9:11:75:68:ec:e6:a8:5e:3d:36:d9:1c:4e:7f:e2:
         ce:34:1e:d0:35:ad:15:63:8e:24:b4:e1:f9:e9:a9:03:91:8b:
         f8:a5:0f:71:82:d6:87:15:85:c1:64:af:dd:a5:5a:0d:f8:07:
         8e:dd:21:a7:46:41:c1:63:ff:a0:83:37:92:30:a6:5e:82:01:
         14:d1:da:a3:a5:8c:50:f1:23:1b:1a:4c:b8:da:ff:81:62:c7:
         a3:99:3a:3a:bf:ae:18:37:d0:cd:44:8c:53:5b:5b:d1:86:c9:
         f5:c8:cd:5d:78:34:e2:33:0d:ff:0c:c7:b6:9d:ff:29:92:82:
         57:f4:16:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:47:26 2025 by rpki-client