Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft
File:                     c72yoCvL7DyQAPZfcFyW6AgOlzA.mft (raw, json)
Hash identifier:          R28uNEF71zEnnR0tbqdGuM0TXl9lVcdv0bAnJuwANXw=
Subject key identifier:   D2:18:8B:1C:0D:0A:05:2F:76:77:1F:A9:6E:90:68:BE:C9:64:E5:76
Authority key identifier: 73:BD:B2:A0:2B:CB:EC:3C:90:00:F6:5F:70:5C:96:E8:08:0E:97:30
Certificate issuer:       /CN=A91F34BF/serialNumber=73BDB2A02BCBEC3C9000F65F705C96E8080E9730
Certificate serial:       0165
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft
Manifest number:          015F
Signing time:             Sun 19 Oct 2025 06:50:38 +0000
Manifest this update:     Sun 19 Oct 2025 06:50:38 +0000
Manifest next update:     Sun 26 Oct 2025 06:50:38 +0000
Files and hashes:         1: c72yoCvL7DyQAPZfcFyW6AgOlzA.crl (hash: GvnXzhiOIJ8nZc0HmtqmuhAkOhXGqQuS87j1ZEVa4t4=)
                          2: D4F8CEB8FE4211EF958ABE3BC4F9AE02.roa (hash: e+itOOHa2GS7haggfAySbnRHvgH3I9TscI3l9ZgslXk=)
                          3: 13310E94FCD011EF8F21DE62C4F9AE02.roa (hash: pCYjff74rDvqaSSHh6b2YJXJxIU8kNQvxw7uQ6aFFQ8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.crl
                          rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 06:50:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 357 (0x165)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F34BF, serialNumber=73BDB2A02BCBEC3C9000F65F705C96E8080E9730
        Validity
            Not Before: Oct 19 06:50:38 2025 GMT
            Not After : Oct 26 06:50:38 2025 GMT
        Subject: CN=68f48a3e-fba1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:e2:4d:a6:a3:d1:5f:6a:94:73:c7:c7:e3:0b:
                    82:39:2e:fd:dd:7e:39:2a:ec:ca:ad:38:b8:ec:f4:
                    74:b4:78:04:5d:d2:50:35:d7:6e:7e:f0:dd:1f:89:
                    46:3d:67:5b:6a:05:ca:a4:78:d1:ba:6c:63:e1:5c:
                    ed:b3:19:32:00:bb:33:2d:a7:4d:fc:15:7b:f2:31:
                    42:ee:be:7c:8f:20:92:75:60:67:45:cc:1c:28:56:
                    eb:e2:5b:c0:81:8a:74:8a:27:fa:c9:e7:95:20:d4:
                    3c:ba:d2:90:3c:f1:21:86:b1:8c:64:e0:ca:81:84:
                    c8:77:87:f8:24:c8:db:81:b0:26:0c:17:be:20:52:
                    ec:60:d6:2a:8b:5b:25:77:42:be:9a:a7:72:45:11:
                    94:c0:a3:18:9e:e5:40:ec:de:39:b9:e6:d1:13:54:
                    7d:3d:01:87:3a:59:9d:bc:95:9a:73:64:d5:88:2b:
                    b6:97:02:80:3c:1c:87:73:53:ab:3c:5b:7e:a1:cc:
                    a9:ef:7b:5a:90:ed:ef:d1:bd:4d:18:ce:94:1f:49:
                    ef:ed:8a:1f:21:37:e1:0f:61:7e:bc:34:e5:86:82:
                    d8:2c:22:07:ea:cd:ed:db:97:c8:be:a4:21:2b:02:
                    cd:bd:3c:fc:ff:20:e7:10:21:cb:0b:18:d8:2e:e1:
                    ef:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:18:8B:1C:0D:0A:05:2F:76:77:1F:A9:6E:90:68:BE:C9:64:E5:76
            X509v3 Authority Key Identifier:
                keyid:73:BD:B2:A0:2B:CB:EC:3C:90:00:F6:5F:70:5C:96:E8:08:0E:97:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:a0:85:a1:3d:20:d9:2a:41:53:5f:99:24:5c:25:8f:b5:bf:
         51:32:80:13:34:3b:0b:61:b1:c6:d5:16:8f:82:6e:79:01:2a:
         6e:0c:f7:72:01:df:ed:7c:db:70:78:cf:ad:d8:17:02:46:2c:
         3e:06:c5:4a:3b:a7:4b:85:0c:44:0f:32:58:fc:65:be:6f:b5:
         7d:06:8f:95:a7:f5:cc:e2:24:af:d7:d8:d2:9b:0f:1d:e8:f1:
         08:8d:99:ce:7b:7e:b1:9a:44:57:e8:c0:fd:86:30:fc:64:d0:
         5e:2d:10:dd:50:a4:39:28:ed:62:e4:e5:20:89:09:d5:eb:b0:
         8e:74:b2:e3:6a:18:43:d0:61:a2:93:79:68:a3:cb:b6:38:a8:
         08:8b:38:0b:bc:54:b0:9e:0f:b7:79:44:f0:7c:92:2c:4f:72:
         ef:1e:14:6a:b8:eb:ad:76:9b:ba:d7:22:19:c4:74:e2:ac:6d:
         26:91:0a:5e:1f:1e:ed:b5:92:c9:3e:b1:3c:da:db:6c:ad:39:
         15:79:33:cd:d9:44:b8:99:16:3e:aa:43:ff:2a:66:fd:62:54:
         a5:8e:f1:a3:1d:c2:45:ff:9f:6d:68:63:f6:51:80:aa:fe:55:
         ae:1b:df:3b:06:68:bf:3b:86:c1:f8:82:1e:58:14:f7:ef:5d:
         ea:0f:4c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:07:38 2025 by rpki-client