Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.mft
File:                     xsGRae6n0Ga8m8py3YgwvBg6EmY.mft (raw, json)
Hash identifier:          /ADbnODviyl9oRnCDrCUSpFTfZurVTqNwHYXjQ6gvng=
Subject key identifier:   42:DE:9A:CB:73:75:FD:C0:F7:9A:A2:19:58:60:18:40:C6:DC:5E:87
Authority key identifier: C6:C1:91:69:EE:A7:D0:66:BC:9B:CA:72:DD:88:30:BC:18:3A:12:66
Certificate issuer:       /CN=A91F1C46/serialNumber=C6C19169EEA7D066BC9BCA72DD8830BC183A1266
Certificate serial:       0828
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xsGRae6n0Ga8m8py3YgwvBg6EmY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.mft
Manifest number:          081F
Signing time:             Sat 18 Oct 2025 22:03:16 +0000
Manifest this update:     Sat 18 Oct 2025 22:03:15 +0000
Manifest next update:     Sat 25 Oct 2025 22:03:15 +0000
Files and hashes:         1: xsGRae6n0Ga8m8py3YgwvBg6EmY.crl (hash: j7Br2JoNZ3Jcme+qQKBaKJgXcXSjs3PNHEFAoR6jwGY=)
                          2: D3EA977EF32D11EA8498822CC4F9AE02.roa (hash: W17rFdVVlgGDVf5Sl4I92TD7UhWdwp3Z8iY6u8GBaHw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.crl
                          rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xsGRae6n0Ga8m8py3YgwvBg6EmY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 22:03:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2088 (0x828)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1C46, serialNumber=C6C19169EEA7D066BC9BCA72DD8830BC183A1266
        Validity
            Not Before: Oct 18 22:03:15 2025 GMT
            Not After : Oct 25 22:03:15 2025 GMT
        Subject: CN=68f40ea3-5ed3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:60:5a:a0:1b:74:b2:0c:f0:4d:d3:4d:8b:fc:
                    f3:7c:2b:2d:1f:d1:2f:1e:51:19:87:cd:45:9b:88:
                    ea:9c:5b:6d:38:d7:bb:e0:73:36:88:4c:9a:59:94:
                    a7:e5:f0:80:eb:f9:de:fa:56:e4:11:d7:b6:d1:58:
                    45:e2:c9:65:f1:fc:88:51:42:84:66:e2:03:c6:7d:
                    f2:71:fe:c1:ed:1d:3a:e2:f8:1c:08:bd:43:d0:8e:
                    33:9b:9c:83:f3:46:27:fa:03:87:ec:22:84:35:a7:
                    0f:9b:6a:da:49:ea:cd:1b:87:e2:ed:9e:69:64:42:
                    c8:b4:5f:64:85:6c:d7:08:3a:1a:35:95:a7:91:22:
                    83:a5:42:e7:f8:84:19:15:68:b6:7e:51:0a:24:26:
                    c2:7d:98:2a:41:17:64:05:94:f2:b9:ca:9e:7d:60:
                    73:68:b5:ad:b6:04:b3:e0:fa:30:08:bf:89:83:c7:
                    69:7b:e9:bc:8e:d7:cd:d2:0e:7c:41:ef:42:0e:29:
                    7f:82:61:dc:f0:e9:03:92:d4:42:e8:d8:65:b4:d9:
                    a0:87:04:de:3b:21:73:a6:2d:79:27:89:dc:4a:b6:
                    37:cd:63:7b:11:9e:24:4f:6e:eb:96:58:b2:c6:d3:
                    ca:5e:7d:69:ae:c9:e9:d0:06:a3:05:b0:35:f0:f1:
                    64:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:DE:9A:CB:73:75:FD:C0:F7:9A:A2:19:58:60:18:40:C6:DC:5E:87
            X509v3 Authority Key Identifier:
                keyid:C6:C1:91:69:EE:A7:D0:66:BC:9B:CA:72:DD:88:30:BC:18:3A:12:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xsGRae6n0Ga8m8py3YgwvBg6EmY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:c1:5f:ec:ca:e5:1d:f7:b2:9c:b1:73:a4:8e:2c:97:93:26:
         5c:9c:e3:3a:8b:aa:d7:2e:82:40:e4:f9:09:05:96:2d:14:40:
         61:c3:e2:eb:9d:9d:81:92:04:4a:53:52:91:a1:08:37:57:f5:
         0a:5d:78:bb:26:e6:27:27:5e:06:bc:b4:2d:f0:48:b8:cd:fa:
         9d:4e:5d:6c:d0:75:3b:1b:63:8e:a6:98:3e:91:81:8e:c0:2b:
         fb:c6:05:8e:63:97:fa:84:aa:ac:10:c4:48:39:75:59:c7:6c:
         cc:d6:94:78:50:77:da:8f:ed:53:d3:0d:bf:f9:cb:73:fe:79:
         b5:40:71:74:a2:0b:4d:1a:e3:95:d9:7a:97:32:d3:a2:60:41:
         1a:db:12:61:7c:7a:22:23:45:75:a6:26:91:5c:72:ed:fd:dd:
         bf:cd:78:29:93:7d:23:08:b0:db:a1:e3:f4:bd:44:3e:a6:a1:
         3f:f3:63:f4:b2:8b:61:c8:a3:61:39:92:43:7d:17:4a:64:ac:
         36:fa:8a:4e:54:7b:48:26:24:5e:3b:8e:6c:d2:dc:a9:1a:54:
         3f:76:5f:82:bd:c5:bd:94:33:b5:e5:76:e4:3b:80:41:3d:2c:
         ec:24:a9:e7:c0:7e:4e:d6:c8:ad:c6:35:89:50:27:ec:81:be:
         01:79:e3:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:11:17 2025 by rpki-client