Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft
File:                     RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft (raw, json)
Hash identifier:          dduh2jVSFebHwYvatumNuGxiC0SBWgqx3Z7ySbCjepQ=
Subject key identifier:   BF:52:08:D5:F9:C9:8B:1B:46:47:DE:4F:5F:C6:DA:2E:28:A6:24:AA
Authority key identifier: 44:F8:D1:53:B7:7B:09:2B:11:ED:F0:0A:93:E4:BB:64:09:1C:24:47
Certificate issuer:       /CN=A91F3C11/serialNumber=44F8D153B77B092B11EDF00A93E4BB64091C2447
Certificate serial:       09CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft
Manifest number:          09CC
Signing time:             Sat 18 Oct 2025 15:07:21 +0000
Manifest this update:     Sat 18 Oct 2025 15:07:20 +0000
Manifest next update:     Sat 25 Oct 2025 15:07:20 +0000
Files and hashes:         1: RPjRU7d7CSsR7fAKk-S7ZAkcJEc.crl (hash: kUrHpbthAJMTV1A96QIKg0cJokmAKtZFvQCJO3neSGU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.crl
                          rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 15:07:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2508 (0x9cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3C11, serialNumber=44F8D153B77B092B11EDF00A93E4BB64091C2447
        Validity
            Not Before: Oct 18 15:07:20 2025 GMT
            Not After : Oct 25 15:07:20 2025 GMT
        Subject: CN=68f3ad28-90ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c1:ef:8a:51:33:bb:dd:ff:a1:74:f0:1c:64:
                    00:0f:82:b1:a7:40:6a:a9:e4:95:cb:a0:3f:03:e9:
                    22:6f:5f:df:e6:3e:16:7b:aa:f4:81:aa:65:8c:fb:
                    9a:ee:1a:7f:96:f3:f5:39:14:1a:5f:26:01:af:92:
                    4b:8d:1a:2b:f0:57:10:fd:0d:c6:06:90:97:6a:e5:
                    b9:28:d4:9b:6c:90:33:28:45:95:45:f0:05:70:38:
                    02:85:f9:50:96:4e:7d:36:87:f5:8e:09:c9:2a:39:
                    3c:13:2e:fa:52:d8:1e:e6:02:46:3e:8e:60:49:06:
                    26:d6:c7:c8:dd:9a:35:b1:86:78:c4:8a:be:41:62:
                    7e:da:6e:3e:6d:93:fc:fd:87:c8:ae:d6:9d:30:f4:
                    46:56:e4:68:ff:d8:9c:05:39:f5:ac:23:c6:ee:1b:
                    d8:8f:b5:ea:ee:b9:23:37:db:96:87:43:ee:7a:76:
                    c6:81:cb:a0:79:e0:24:64:cc:89:2f:54:ce:0a:93:
                    ea:31:1d:c4:2c:cd:02:9e:91:45:34:cf:a9:d5:b9:
                    5e:81:fb:bb:e7:0b:6e:2e:d9:2d:21:b6:34:69:9f:
                    4a:53:31:6c:73:31:2c:3e:b2:1a:e5:9c:20:5b:79:
                    e8:f7:4e:a1:7a:4c:55:9e:61:67:b9:2a:97:77:f5:
                    02:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:52:08:D5:F9:C9:8B:1B:46:47:DE:4F:5F:C6:DA:2E:28:A6:24:AA
            X509v3 Authority Key Identifier:
                keyid:44:F8:D1:53:B7:7B:09:2B:11:ED:F0:0A:93:E4:BB:64:09:1C:24:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:c9:c2:32:83:4f:ce:c6:a4:da:63:f2:10:21:34:45:8e:6c:
         26:c6:93:85:b6:c2:eb:09:ea:d4:47:ec:48:e9:69:6d:8a:49:
         7a:5e:40:0a:d4:35:a0:81:f8:2f:ac:b5:96:c0:0a:4a:e7:16:
         4b:68:ae:00:7d:ec:87:85:02:89:3a:a6:87:74:ee:0a:c6:82:
         0a:35:62:03:2b:ea:f2:cb:75:cc:41:0c:13:b6:d7:8c:9d:77:
         6b:01:40:39:03:40:1d:48:f2:6a:fc:5a:ef:7e:79:8f:5e:47:
         a0:70:8f:cb:1a:15:3e:e6:b0:e3:36:c7:91:03:05:ef:e0:40:
         01:6f:81:e9:19:4d:58:90:7b:72:c2:17:08:9e:76:37:2f:bd:
         ea:23:ce:fd:0c:d9:b2:ad:9b:54:3d:c3:c3:88:94:0d:b8:4e:
         82:7c:32:cb:d0:bd:5a:3d:41:ad:94:1e:e1:f4:93:3f:8f:5b:
         d3:56:94:ca:b9:f8:df:c0:d0:fb:3f:85:08:77:10:40:05:a5:
         08:43:21:76:eb:8d:76:43:36:99:2f:03:aa:89:be:f8:75:19:
         b9:58:9c:94:23:98:90:07:54:71:34:09:2a:8a:54:4b:ed:26:
         69:6f:48:ed:79:43:2f:94:9a:6c:de:b5:e8:f7:92:6d:68:01:
         e4:72:10:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:14:59 2025 by rpki-client