Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.mft
File:                     N0X7n36iweJS0pvv2GphV3YNiMA.mft (raw, json)
Hash identifier:          3Q7L6oK2BFin2BSLY43Wc43rUdinIZOIspaPxgvri5o=
Subject key identifier:   A7:A0:52:EB:45:E7:83:35:C4:4D:AA:C9:5A:BA:59:27:B1:CA:74:78
Authority key identifier: 37:45:FB:9F:7E:A2:C1:E2:52:D2:9B:EF:D8:6A:61:57:76:0D:88:C0
Certificate issuer:       /CN=A91EEAD3/serialNumber=3745FB9F7EA2C1E252D29BEFD86A6157760D88C0
Certificate serial:       010A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N0X7n36iweJS0pvv2GphV3YNiMA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.mft
Manifest number:          0107
Signing time:             Sun 19 Oct 2025 07:55:50 +0000
Manifest this update:     Sun 19 Oct 2025 07:55:49 +0000
Manifest next update:     Sun 26 Oct 2025 07:55:49 +0000
Files and hashes:         1: N0X7n36iweJS0pvv2GphV3YNiMA.crl (hash: HhS9NNuDDRIujx8jLGBe67BwKoeS8Gdr+Rfi+qQL0CE=)
                          2: E989DE0C1E2E11EFB8D12A2BC4F9AE02.roa (hash: PkN1Jtt374CIHLZsHPqXl9liocYOPeAQiQHQB34mvOQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.crl
                          rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N0X7n36iweJS0pvv2GphV3YNiMA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 07:55:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 266 (0x10a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EEAD3, serialNumber=3745FB9F7EA2C1E252D29BEFD86A6157760D88C0
        Validity
            Not Before: Oct 19 07:55:49 2025 GMT
            Not After : Oct 26 07:55:49 2025 GMT
        Subject: CN=68f49985-f2ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4c:ac:5a:a3:16:21:8c:c0:62:c4:81:c6:01:
                    b2:ba:4a:0b:90:5a:72:3f:a7:90:b5:34:b3:54:33:
                    f9:ed:c7:7d:5a:f7:cf:39:1e:3b:ad:a2:3d:72:a0:
                    ac:93:73:33:51:b3:e4:51:36:fd:03:a2:fb:59:f6:
                    16:03:a8:e5:65:41:9a:7c:00:1e:5b:e1:4b:27:2b:
                    0f:bb:91:62:45:6d:97:36:86:14:74:f1:f1:ab:9d:
                    11:0d:2e:af:bb:7b:9a:12:7e:f6:5e:88:b8:60:19:
                    bb:aa:e7:86:ca:13:66:ac:eb:d2:ce:6b:98:dc:8a:
                    ce:a5:eb:d9:82:5b:17:ff:b9:65:02:7b:81:e8:bc:
                    42:a0:a8:92:06:2e:08:c7:58:d7:25:ac:3c:1a:7c:
                    78:c8:d0:23:fe:db:8e:9a:ca:10:e3:dd:83:56:b6:
                    4a:ce:cd:57:a1:30:ec:84:5a:9c:1f:97:82:c5:b4:
                    3d:a8:f9:6c:63:f4:5b:e4:2f:99:67:5c:48:db:c3:
                    33:77:f8:3a:05:b5:76:18:9a:00:4f:ea:49:45:ac:
                    f4:70:85:3c:a6:1d:c1:64:38:02:46:e8:72:fc:f4:
                    4e:82:dd:a4:e0:73:38:f5:08:bd:ee:33:43:59:ba:
                    ba:c0:84:17:38:e9:bf:66:ff:75:00:79:c8:f5:d3:
                    74:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:A0:52:EB:45:E7:83:35:C4:4D:AA:C9:5A:BA:59:27:B1:CA:74:78
            X509v3 Authority Key Identifier:
                keyid:37:45:FB:9F:7E:A2:C1:E2:52:D2:9B:EF:D8:6A:61:57:76:0D:88:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N0X7n36iweJS0pvv2GphV3YNiMA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:8f:16:23:6b:2c:96:4d:3d:43:38:88:bc:be:e8:ee:54:e1:
         37:10:40:76:c3:56:27:46:e3:77:e6:ae:75:4b:2b:66:a1:e7:
         03:84:fa:e9:01:dc:10:1a:80:c0:29:1c:0e:a2:77:05:05:6a:
         b2:0e:a0:c3:82:ab:7d:c3:29:34:52:d5:9c:f5:c7:78:ad:62:
         e7:9c:d5:b5:0e:77:06:61:74:a6:ba:e3:20:67:ff:13:08:ac:
         5e:d1:7d:b0:c3:bc:4e:7c:44:1b:b0:f0:e8:2c:7e:39:6e:62:
         c4:3f:26:5b:02:96:57:dc:b1:32:c6:54:33:01:c5:fc:2a:1d:
         12:51:11:fa:10:7b:0b:94:87:93:e4:39:5a:7a:6a:8e:78:32:
         54:c6:08:88:21:51:c4:cf:52:66:bc:ee:5f:20:e8:37:c0:5c:
         02:37:0f:bb:c1:9b:36:37:5d:73:f7:7d:ef:1e:bd:36:c4:59:
         dc:c7:8a:97:95:73:7e:ce:2c:1a:a9:ae:36:0c:cf:1e:83:da:
         d9:45:55:26:cc:ac:59:a5:7e:db:7a:1b:28:4a:65:ef:3a:4f:
         37:bf:be:f0:00:c2:b0:d4:4b:8d:9a:c9:92:de:f8:d2:27:89:
         ee:86:1a:9c:ba:0e:82:20:72:49:0f:12:36:68:22:44:ea:10:
         54:d4:74:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:49:22 2025 by rpki-client