Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft
File:                     hrKx0eeCRIuE9pgY8WofcHtUyGw.mft (raw, json)
Hash identifier:          V9PZTJaCA3AT9kR0sdD57yn+xFrDbkE3Wen1zVNL0Bw=
Subject key identifier:   8A:ED:44:FB:DC:65:27:EA:6B:01:9C:7D:A0:04:14:CE:C2:73:85:E3
Authority key identifier: 86:B2:B1:D1:E7:82:44:8B:84:F6:98:18:F1:6A:1F:70:7B:54:C8:6C
Certificate issuer:       /CN=A91EC979/serialNumber=86B2B1D1E782448B84F69818F16A1F707B54C86C
Certificate serial:       0722
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft
Manifest number:          070E
Signing time:             Sat 18 Oct 2025 23:21:17 +0000
Manifest this update:     Sat 18 Oct 2025 23:21:16 +0000
Manifest next update:     Sat 25 Oct 2025 23:21:16 +0000
Files and hashes:         1: hrKx0eeCRIuE9pgY8WofcHtUyGw.crl (hash: I/6aDHIII2ptFUBNRXhpj61Gz2bksB25OrNzHYLE0W4=)
                          2: E658D57AAB4111F09E35ED65C4F9AE02.roa (hash: Hd39KMCP5bAeu+noj7ulmTIBQfRBGl83787l/+OHLDU=)
                          3: 8A5AA9BAAB4111F09E531265C4F9AE02.roa (hash: 5nVofohvG6M+3k2sujdcV8yvkToMkKYigEUYnGzho5Y=)
                          4: 7A27A6E45FDB11EBA5C9EA7CC4F9AE02.roa (hash: W63Eb+30MCK+wn3+q84oKaizsJ4BNesWyN0s9mJY3b8=)
                          5: 06E6952AAB4211F08DC86D66C4F9AE02.roa (hash: KCCPcPWsDKv1DRkqBbiUhd//6nA7nvgYDQUksRP6Wns=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.crl
                          rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 23:21:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1826 (0x722)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EC979, serialNumber=86B2B1D1E782448B84F69818F16A1F707B54C86C
        Validity
            Not Before: Oct 18 23:21:16 2025 GMT
            Not After : Oct 25 23:21:16 2025 GMT
        Subject: CN=68f420ec-6002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:dc:cb:dd:a4:7a:ea:23:d1:a7:0d:99:01:ea:
                    ee:09:9c:a0:3d:9e:78:59:2b:71:ab:28:49:23:66:
                    2d:0b:f1:69:8b:9f:59:04:bc:f0:bb:96:66:bc:0f:
                    7d:78:2a:46:80:48:ea:c6:75:29:f1:18:6f:9d:25:
                    99:31:44:62:59:b9:35:e4:5c:a9:48:0a:50:ca:f3:
                    44:02:ce:10:26:8a:eb:c2:07:e7:e7:ae:2f:6e:22:
                    be:33:bb:2c:61:f4:e4:90:dc:fa:dd:3e:e5:79:97:
                    06:a7:92:0b:77:87:8d:ae:47:ab:32:55:9d:42:23:
                    ab:7f:53:68:56:68:12:d1:4f:d3:46:30:ae:0c:6e:
                    d4:a7:8a:7d:95:b8:02:38:49:1d:d9:12:30:44:34:
                    ad:58:69:a1:67:74:17:38:d4:91:81:60:ff:88:ca:
                    49:94:38:50:d9:86:c2:00:1d:16:fc:62:72:05:5f:
                    2a:27:0d:c9:4f:30:fe:a0:27:ae:35:81:de:7e:83:
                    1a:3f:19:32:cb:3c:3d:55:d3:fc:67:20:89:a1:53:
                    f7:05:de:43:00:ef:d9:ea:2e:4f:e0:65:25:83:15:
                    55:ff:a0:84:62:71:39:17:22:c6:d9:97:4c:ab:a5:
                    a7:11:b9:23:dc:83:cf:2d:62:5e:e1:2e:40:fa:09:
                    43:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:ED:44:FB:DC:65:27:EA:6B:01:9C:7D:A0:04:14:CE:C2:73:85:E3
            X509v3 Authority Key Identifier:
                keyid:86:B2:B1:D1:E7:82:44:8B:84:F6:98:18:F1:6A:1F:70:7B:54:C8:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:f7:0c:74:5c:be:21:32:e7:b7:21:a1:cb:e0:a6:79:f7:10:
         01:39:47:57:96:bb:08:3f:83:82:54:30:90:f8:a1:df:59:57:
         12:c3:fb:87:07:8c:0b:b1:7f:e7:05:a3:2f:e4:76:fe:e0:c3:
         8b:ef:01:9b:4b:0c:d1:91:9a:b6:a6:25:01:cd:7b:71:f7:5e:
         8e:63:77:79:8d:0b:b1:bd:ed:34:a0:54:5b:8c:08:0e:b4:af:
         8d:0d:c4:23:b3:ec:dd:9e:d9:25:27:06:57:84:78:57:04:91:
         1c:03:fb:19:f3:ee:d5:61:a3:b2:07:64:b5:68:06:62:d4:0f:
         fd:95:f5:36:78:97:2b:10:84:69:48:d8:02:82:c2:e1:05:5d:
         ab:e8:ff:4c:dd:57:fc:b1:d9:cc:e0:63:00:e1:c0:df:8e:8e:
         cc:35:73:80:dc:73:aa:0c:3a:f6:ff:01:f4:5a:de:45:16:43:
         b3:ac:ce:93:10:ea:21:82:e7:d7:bf:b3:2f:94:b8:02:45:bd:
         d5:74:52:23:eb:d3:f0:5e:06:06:c8:c4:d1:8c:f8:72:3b:c6:
         fe:6b:b3:d5:ba:dc:12:8f:fa:33:2c:d8:51:3a:2a:7e:69:1e:
         34:ef:fd:2b:a0:d0:94:44:a3:f3:d0:b4:11:d3:23:69:29:c6:
         46:e0:1b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:27:03 2025 by rpki-client