Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft
File:                     x8kdlvp-jS2SIZUipkBEI3UR4FE.mft (raw, json)
Hash identifier:          qUtuR1aUPX0qekNmSJ3FSgVdixIBhQ7G6cIx4OYzva0=
Subject key identifier:   99:87:FE:E3:BB:50:D9:35:88:8B:06:EB:91:D1:DB:76:EA:A8:DB:FF
Authority key identifier: C7:C9:1D:96:FA:7E:8D:2D:92:21:95:22:A6:40:44:23:75:11:E0:51
Certificate issuer:       /CN=A91F52E8/serialNumber=C7C91D96FA7E8D2D92219522A64044237511E051
Certificate serial:       03C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft
Manifest number:          03B7
Signing time:             Sun 19 Oct 2025 02:41:12 +0000
Manifest this update:     Sun 19 Oct 2025 02:41:12 +0000
Manifest next update:     Sun 26 Oct 2025 02:41:12 +0000
Files and hashes:         1: x8kdlvp-jS2SIZUipkBEI3UR4FE.crl (hash: efk/MC1qEji2nUaPN0/lNJ6Tt0XGNabITEa9TI+Cz9A=)
                          2: 89F6EEC4C82711EEBCC49737C4F9AE02.roa (hash: VO877qnYV5ysyh8xNP6j/NDwnBYHL9P7OWuoQhCU32U=)
                          3: C0BBFCC003A911EF9DE2F919C4F9AE02.roa (hash: Q0wzmAGM0ykkEHN1MJvFlbZ7walQQuiBKFZtznnJWt8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.crl
                          rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 02:41:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 960 (0x3c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F52E8, serialNumber=C7C91D96FA7E8D2D92219522A64044237511E051
        Validity
            Not Before: Oct 19 02:41:12 2025 GMT
            Not After : Oct 26 02:41:12 2025 GMT
        Subject: CN=68f44fc8-e1ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3d:06:37:cb:76:f4:06:10:d8:ab:74:11:2f:
                    a1:4e:a7:a5:a3:62:39:de:6b:ea:50:a9:3b:60:35:
                    81:8b:7c:5e:fc:27:09:4d:b5:02:8f:b6:09:50:47:
                    da:1b:d0:ca:72:21:11:e0:49:05:49:15:4d:b0:69:
                    bb:00:89:06:c2:df:47:5b:6f:9b:77:99:ab:83:a6:
                    23:b2:af:81:5d:e9:ba:9d:29:cc:1e:94:cf:e9:25:
                    a6:45:88:24:c2:18:43:1c:3c:4c:b6:a9:2e:bb:c1:
                    c3:ee:0a:7a:f1:ed:64:41:be:00:5c:62:88:99:af:
                    e7:d1:3a:dd:14:b8:bf:2c:0b:54:bd:ef:a0:3f:bd:
                    ba:36:80:65:a5:3b:59:41:63:dc:d7:d4:cd:a5:67:
                    4f:e6:58:62:59:a2:85:c7:08:f2:4e:7c:07:dc:aa:
                    5d:c2:f5:21:11:3e:2f:9f:78:83:28:b8:3a:9d:b3:
                    9b:93:cf:40:2f:dc:d1:08:c0:33:ef:b8:66:9b:44:
                    2f:88:ad:fb:6a:dd:90:61:2c:8a:b6:ff:6e:dd:ec:
                    e0:be:f4:bd:dd:93:d4:18:d9:08:a9:cc:59:32:a6:
                    18:b6:ba:47:12:45:28:69:a2:c6:2c:f0:81:71:73:
                    6f:7f:04:84:65:0b:9f:25:85:09:2c:af:ea:dd:ea:
                    de:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:87:FE:E3:BB:50:D9:35:88:8B:06:EB:91:D1:DB:76:EA:A8:DB:FF
            X509v3 Authority Key Identifier:
                keyid:C7:C9:1D:96:FA:7E:8D:2D:92:21:95:22:A6:40:44:23:75:11:E0:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:ad:a6:49:c6:b9:fe:94:54:f2:4d:95:49:c5:51:dc:bd:94:
         04:2f:49:a3:48:d1:6c:7a:9d:37:1a:94:e8:da:09:d7:79:c1:
         f6:67:5c:54:b8:38:39:21:cb:01:dc:f8:89:8a:29:5d:ff:77:
         a2:03:3b:aa:7c:9a:c2:8e:81:0a:06:4e:4e:75:64:48:09:c5:
         71:c7:49:77:cf:ca:e1:51:e4:8b:9b:af:66:af:10:d4:ae:b9:
         f3:55:de:91:17:19:6f:a9:c4:5f:e4:05:64:0f:e7:35:9e:5e:
         23:a4:de:12:8c:41:c3:f0:70:69:2f:fb:1a:f9:c4:ab:b4:2a:
         11:88:49:ad:2b:4f:de:23:4d:53:0e:fb:d4:22:74:22:de:7f:
         5f:09:af:fd:1b:3d:73:ce:d4:76:51:67:03:bc:98:92:40:19:
         b7:41:e1:a1:c4:28:87:d3:3c:3d:fa:67:86:fb:2e:89:5a:f2:
         0a:5d:83:42:13:15:da:85:dd:a1:9d:f6:3d:83:52:7b:e9:f0:
         06:01:ac:00:c2:8e:9f:de:8d:36:5d:ae:ef:fc:2f:35:45:57:
         94:d7:db:d7:45:0a:50:5f:66:50:2a:ac:30:a8:aa:f9:49:1a:
         d2:fe:4e:b6:94:e2:ae:04:c7:f8:bb:15:40:03:2e:dd:a3:16:
         9f:c0:02:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:43:14 2025 by rpki-client