Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft
File:                     h25oE78sGBHNEd6ZKBrNRL7A3nM.mft (raw, json)
Hash identifier:          xNizjc59IERwaINycMonj6pkQfIZdamCzAY3VHiMvqY=
Subject key identifier:   74:30:34:65:D8:5D:4B:3A:59:75:A5:94:EF:03:FF:CE:6F:7D:72:7A
Authority key identifier: 87:6E:68:13:BF:2C:18:11:CD:11:DE:99:28:1A:CD:44:BE:C0:DE:73
Certificate issuer:       /CN=A91F4FB0/serialNumber=876E6813BF2C1811CD11DE99281ACD44BEC0DE73
Certificate serial:       0150
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h25oE78sGBHNEd6ZKBrNRL7A3nM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft
Manifest number:          012E
Signing time:             Sun 19 Oct 2025 07:54:10 +0000
Manifest this update:     Sun 19 Oct 2025 07:54:09 +0000
Manifest next update:     Sun 26 Oct 2025 07:54:09 +0000
Files and hashes:         1: h25oE78sGBHNEd6ZKBrNRL7A3nM.crl (hash: 11mHa83yTHeQmUlJ5GOwL0TMRMLzSck1lGV6N06WPdc=)
                          2: EEC42F86232311EFAF815012C4F9AE02.roa (hash: dmDX5d8Ee6EDnk/9c9IbholerFQLcJ0sPLUNE3zziAE=)
                          3: 0B5DBB081C0311EF8B8AB54DC4F9AE02.roa (hash: +l7KzNw3VW+RHOqRN7o7MYFbDiz9Uue5nL0WGR6JFyA=)
                          4: 2EFBFF901C0611EF883D807CC4F9AE02.roa (hash: UX1cRz51Yc/EPgI7Avdxh/+oTCoX8i2QidlgdW8Epmk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.crl
                          rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h25oE78sGBHNEd6ZKBrNRL7A3nM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 07:54:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 336 (0x150)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4FB0, serialNumber=876E6813BF2C1811CD11DE99281ACD44BEC0DE73
        Validity
            Not Before: Oct 19 07:54:09 2025 GMT
            Not After : Oct 26 07:54:09 2025 GMT
        Subject: CN=68f49921-77d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8b:48:66:37:52:58:3c:d1:ae:ff:df:81:47:
                    45:ad:f0:ef:40:7f:3a:b1:ec:78:c2:86:cb:30:dd:
                    1b:24:b7:d0:b1:3a:c2:01:af:6d:5e:07:28:20:60:
                    50:00:21:d9:0d:1a:92:32:08:a0:76:93:70:2a:b8:
                    f7:c0:19:aa:16:44:cc:90:9e:f2:4c:ed:74:95:d6:
                    e4:d9:d7:38:56:2b:a0:20:cd:4a:83:22:6c:3b:db:
                    6b:4c:da:ec:96:60:f6:87:09:4f:6a:bf:16:0c:dc:
                    2e:d6:ef:58:75:75:c0:c6:1a:47:be:dc:4e:fb:44:
                    ac:13:ac:bb:63:f8:b3:4b:1c:73:25:2f:b2:04:83:
                    cc:a5:65:cd:00:55:6e:16:59:17:b4:7d:69:56:89:
                    b5:bf:ab:f1:28:ce:63:0a:a8:cc:7b:6d:40:a3:27:
                    c4:76:69:1d:99:9d:f1:e1:20:3f:49:20:4c:cb:14:
                    60:af:2b:56:0b:f1:34:01:8c:ea:57:65:88:a4:5f:
                    c7:3f:22:63:3c:e2:92:73:4b:e7:52:69:95:45:56:
                    b6:19:b4:43:06:ed:d4:c4:ca:76:ae:18:27:d6:a6:
                    29:57:e7:a5:7f:ce:df:67:2b:07:67:b2:75:37:72:
                    44:1f:00:09:42:c9:c0:04:a3:52:85:96:58:0a:9f:
                    6b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:30:34:65:D8:5D:4B:3A:59:75:A5:94:EF:03:FF:CE:6F:7D:72:7A
            X509v3 Authority Key Identifier:
                keyid:87:6E:68:13:BF:2C:18:11:CD:11:DE:99:28:1A:CD:44:BE:C0:DE:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h25oE78sGBHNEd6ZKBrNRL7A3nM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:1d:7e:45:4f:ac:08:fe:cb:7c:27:b7:ca:7d:00:57:8d:6e:
         95:cb:43:90:1b:f9:3a:73:db:7b:b3:07:73:4a:c5:90:fa:46:
         fa:ce:6e:99:3d:4b:f4:07:4d:f4:35:69:3f:41:eb:3c:97:00:
         23:29:14:b7:81:21:96:4a:6b:d6:69:73:09:b8:78:73:23:dc:
         78:16:d1:a3:be:19:df:e4:81:29:72:ae:07:6b:20:a0:e5:90:
         fb:bc:49:d8:0e:75:80:b8:ec:25:1e:92:63:bd:82:b5:10:62:
         17:d9:4d:a1:95:b2:bc:c1:e9:18:f0:43:65:13:02:9f:2c:1b:
         99:67:f4:d6:e8:26:91:2a:16:7e:58:e5:26:a7:3a:7d:9d:b3:
         0c:20:ad:16:4f:cf:49:20:92:85:5e:e9:4b:4c:c0:e4:ad:4d:
         62:60:ce:41:a0:d0:1a:3f:e1:e0:e9:ca:8c:66:50:f3:46:08:
         7d:7c:d1:22:1d:34:8f:cc:f5:41:b1:7d:c6:71:2e:b4:35:6e:
         68:60:23:78:85:31:19:1e:15:d8:41:67:ce:05:bf:20:97:0d:
         ae:c1:92:4b:9c:c0:1c:b3:48:4f:db:96:7e:cf:c0:c0:9a:8b:
         9a:6c:fd:1d:67:8d:66:0b:0c:01:35:bc:0c:cf:53:93:67:75:
         b8:b8:9f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:44:27 2025 by rpki-client