Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4E89/C533D7242AF411EAA48F1541C4F9AE02/Df2AHulmIu0X31XXqqZMce_5t70.mft
File:                     Df2AHulmIu0X31XXqqZMce_5t70.mft (raw, json)
Hash identifier:          Ah0BbM/qjqr4JQ+ykVWPSipU7/jDGWeYLjCG0ATBKx4=
Subject key identifier:   F4:53:6A:96:50:3C:EA:9D:DC:34:22:1C:E3:AD:50:61:87:75:86:27
Authority key identifier: 0D:FD:80:1E:E9:66:22:ED:17:DF:55:D7:AA:A6:4C:71:EF:F9:B7:BD
Certificate issuer:       /CN=A91F4E89/serialNumber=0DFD801EE96622ED17DF55D7AAA64C71EFF9B7BD
Certificate serial:       0BCB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Df2AHulmIu0X31XXqqZMce_5t70.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4E89/C533D7242AF411EAA48F1541C4F9AE02/Df2AHulmIu0X31XXqqZMce_5t70.mft
Manifest number:          0BC5
Signing time:             Sat 18 Oct 2025 19:45:20 +0000
Manifest this update:     Sat 18 Oct 2025 19:45:19 +0000
Manifest next update:     Sat 25 Oct 2025 19:45:19 +0000
Files and hashes:         1: Df2AHulmIu0X31XXqqZMce_5t70.crl (hash: aKAwDn2JqIOGYYECh3Amvw+6d7Dsa+vUGDEI4C5B6NQ=)
                          2: 72F52C962AF511EA8C989441C4F9AE02.roa (hash: VUxxRKza4YtkY3CW36/yWhqdjkRvkusFphcVpxC9+Yc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4E89/C533D7242AF411EAA48F1541C4F9AE02/Df2AHulmIu0X31XXqqZMce_5t70.crl
                          rsync://rpki.apnic.net/member_repository/A91F4E89/C533D7242AF411EAA48F1541C4F9AE02/Df2AHulmIu0X31XXqqZMce_5t70.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Df2AHulmIu0X31XXqqZMce_5t70.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 19:45:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3019 (0xbcb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4E89, serialNumber=0DFD801EE96622ED17DF55D7AAA64C71EFF9B7BD
        Validity
            Not Before: Oct 18 19:45:19 2025 GMT
            Not After : Oct 25 19:45:19 2025 GMT
        Subject: CN=68f3ee50-564f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bc:81:0c:92:b8:39:af:7d:05:30:77:ab:a8:
                    44:05:4d:e7:3a:16:c6:75:60:58:29:10:f3:bf:3b:
                    df:86:33:ef:2f:38:a2:78:ac:ef:e8:79:13:c2:26:
                    c8:08:54:29:44:c7:0a:9f:47:f6:d5:19:a0:14:b8:
                    dd:d4:23:41:8f:c5:7f:42:52:dd:f9:48:55:24:c8:
                    f8:95:ad:6f:d7:d0:66:ca:f6:e8:a5:3d:97:0e:da:
                    fa:20:6a:a6:95:01:af:15:78:9e:00:db:31:38:2a:
                    de:54:fc:b0:5a:d9:61:13:92:73:c8:cc:11:f0:2e:
                    f5:9a:26:8e:22:29:0c:84:d3:7f:37:cd:7f:74:a9:
                    5d:8a:21:ab:65:16:40:7a:6e:82:81:5c:f3:bf:64:
                    1a:39:b7:fc:bb:43:a1:22:e3:86:17:03:ec:f4:0b:
                    df:be:7c:c9:57:d7:bd:3a:97:04:61:7e:be:a7:60:
                    3a:28:ab:91:e8:e3:0a:ed:40:25:f6:20:b2:51:60:
                    7e:4c:b5:b3:d9:0b:4e:f4:3e:7f:af:78:67:48:5d:
                    1e:72:f2:a4:5f:21:2c:b5:52:38:0d:ba:4f:48:71:
                    50:26:be:37:14:13:58:55:7b:f3:0f:b8:ca:74:7d:
                    6b:8a:f0:98:ef:0b:37:0f:bb:a4:97:8d:21:c4:44:
                    92:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:53:6A:96:50:3C:EA:9D:DC:34:22:1C:E3:AD:50:61:87:75:86:27
            X509v3 Authority Key Identifier:
                keyid:0D:FD:80:1E:E9:66:22:ED:17:DF:55:D7:AA:A6:4C:71:EF:F9:B7:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4E89/C533D7242AF411EAA48F1541C4F9AE02/Df2AHulmIu0X31XXqqZMce_5t70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Df2AHulmIu0X31XXqqZMce_5t70.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4E89/C533D7242AF411EAA48F1541C4F9AE02/Df2AHulmIu0X31XXqqZMce_5t70.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:ea:d8:12:98:14:3c:65:ec:1c:c1:e7:cd:12:75:91:76:ab:
         b8:6a:d5:48:7e:d4:ca:e7:a4:76:24:c6:4e:bf:e6:a1:2b:45:
         60:75:0e:b3:f1:19:61:8f:8a:cf:5c:89:3f:1c:dc:71:21:a8:
         a4:fe:50:64:00:c0:ed:83:41:9a:8e:95:cc:5f:55:63:08:6c:
         85:f6:82:c6:a5:33:d8:e7:53:e1:c0:f7:a5:8b:2e:91:63:ba:
         77:4e:5d:37:42:3e:e1:09:5b:62:66:f3:40:2b:0e:44:96:ab:
         9b:82:ca:f6:24:55:ec:4e:74:d2:dc:27:5f:c2:3d:97:53:e5:
         f6:5c:71:e1:8c:1a:5e:f5:96:90:cf:52:6a:3d:d6:29:e2:a0:
         1a:b0:e5:be:08:1e:d8:83:ba:34:77:fd:f9:12:e3:61:9e:1f:
         fe:89:ff:89:0c:8a:2b:2c:6f:5a:a5:80:24:7a:6d:f8:bc:d8:
         41:dd:44:3c:aa:ef:2c:2e:51:44:77:93:75:ba:74:92:61:02:
         72:95:00:f1:23:10:f8:43:cc:03:57:67:72:80:b7:ed:be:41:
         4d:16:bc:56:61:fd:64:69:25:32:73:0d:a0:f7:7b:17:44:bb:
         f8:0a:15:33:6f:29:5e:fc:c4:56:11:f9:4d:f8:a0:9a:3e:73:
         8f:d7:c4:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:44:09 2025 by rpki-client