Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F680E/D6F7BAD87EE511EC94EB5D6CC4F9AE02/F19zLkbbq-mqcYHfg8cm729vW8I.mft
File:                     F19zLkbbq-mqcYHfg8cm729vW8I.mft (raw, json)
Hash identifier:          VgEYktwVPd+Ts4T3FAyAiqGPJNrptv0L8VLH7hA3jIg=
Subject key identifier:   DC:A5:FE:62:A4:15:DF:FC:D8:0C:B8:3A:1A:DA:02:DF:60:8A:BA:D1
Authority key identifier: 17:5F:73:2E:46:DB:AB:E9:AA:71:81:DF:83:C7:26:EF:6F:6F:5B:C2
Certificate issuer:       /CN=A91F680E/serialNumber=175F732E46DBABE9AA7181DF83C726EF6F6F5BC2
Certificate serial:       042F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F19zLkbbq-mqcYHfg8cm729vW8I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F680E/D6F7BAD87EE511EC94EB5D6CC4F9AE02/F19zLkbbq-mqcYHfg8cm729vW8I.mft
Manifest number:          042B
Signing time:             Sun 19 Oct 2025 02:12:39 +0000
Manifest this update:     Sun 19 Oct 2025 02:12:38 +0000
Manifest next update:     Sun 26 Oct 2025 02:12:38 +0000
Files and hashes:         1: F19zLkbbq-mqcYHfg8cm729vW8I.crl (hash: gQQrpwepd2J06alWghsLQJGQWRC9tgVYKeMd7kWF19E=)
                          2: 76FA00E87EE811EC8D796C6EC4F9AE02.roa (hash: wgDb1KnVQWBoZ1T5BXpX71TMMnESBtSdKYU93dImmgE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F680E/D6F7BAD87EE511EC94EB5D6CC4F9AE02/F19zLkbbq-mqcYHfg8cm729vW8I.crl
                          rsync://rpki.apnic.net/member_repository/A91F680E/D6F7BAD87EE511EC94EB5D6CC4F9AE02/F19zLkbbq-mqcYHfg8cm729vW8I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F19zLkbbq-mqcYHfg8cm729vW8I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 02:12:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1071 (0x42f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F680E, serialNumber=175F732E46DBABE9AA7181DF83C726EF6F6F5BC2
        Validity
            Not Before: Oct 19 02:12:38 2025 GMT
            Not After : Oct 26 02:12:38 2025 GMT
        Subject: CN=68f44916-6a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d6:65:21:38:1e:5d:f6:b5:51:85:20:de:59:
                    14:db:ab:ca:8d:a8:53:23:1e:7e:00:66:f0:c4:60:
                    50:79:51:e3:4f:60:c0:5d:ba:95:eb:6d:07:15:95:
                    c5:36:cd:0a:46:2c:72:9b:ee:77:6e:16:5a:55:3a:
                    b9:f3:9f:63:b5:2a:89:68:73:8a:db:c9:d4:6f:25:
                    b7:24:ca:59:e0:f4:bd:f7:85:50:cc:50:54:23:a9:
                    ed:69:35:7e:0a:d4:5e:05:ae:97:4e:4c:68:95:85:
                    40:ad:7d:da:93:b9:6e:76:35:f4:28:90:28:d0:7c:
                    72:b7:a4:53:12:10:88:cb:f1:6e:7e:dc:1b:0f:d5:
                    6d:1d:61:51:f9:df:c7:f8:c1:a9:32:14:e0:bd:78:
                    85:16:cd:b7:87:97:31:50:10:ac:ef:7e:a0:d0:e2:
                    12:29:95:ed:29:a2:a3:37:9f:47:97:8c:a7:68:9a:
                    79:26:78:a8:2b:81:90:c0:26:92:37:4c:97:4b:38:
                    a5:0d:91:f5:dc:04:93:1b:4e:56:f9:9c:f2:b5:fa:
                    a5:9a:2f:18:fa:01:0a:0a:89:a1:ec:56:35:e2:d6:
                    9a:5b:ac:9d:9f:34:07:07:c0:5a:d7:bf:b3:2a:28:
                    7f:1e:84:83:95:18:2a:bd:eb:a5:a8:1d:58:4f:44:
                    d5:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:A5:FE:62:A4:15:DF:FC:D8:0C:B8:3A:1A:DA:02:DF:60:8A:BA:D1
            X509v3 Authority Key Identifier:
                keyid:17:5F:73:2E:46:DB:AB:E9:AA:71:81:DF:83:C7:26:EF:6F:6F:5B:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F680E/D6F7BAD87EE511EC94EB5D6CC4F9AE02/F19zLkbbq-mqcYHfg8cm729vW8I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F19zLkbbq-mqcYHfg8cm729vW8I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F680E/D6F7BAD87EE511EC94EB5D6CC4F9AE02/F19zLkbbq-mqcYHfg8cm729vW8I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:ed:ac:50:01:5e:9a:31:74:0c:48:91:ed:d2:2b:2d:c0:8e:
         31:67:95:62:11:3a:b8:d5:4b:8c:5a:59:ca:eb:12:07:76:63:
         66:e9:33:1d:30:f0:35:ed:4b:98:36:bb:d2:ce:e0:d0:8a:e2:
         ac:01:d4:27:03:6d:81:45:d8:11:cd:23:c0:9e:45:ea:fe:18:
         fd:82:44:41:39:a7:a9:f8:f1:56:11:b5:f1:ce:a6:eb:ee:36:
         a9:22:1c:6e:2f:e0:22:34:a8:45:7f:a7:ec:e2:a8:24:8b:95:
         d9:f0:27:07:4d:1b:5d:d7:02:d5:1d:16:17:a3:03:08:34:0b:
         f3:55:db:eb:22:c2:f9:8d:e3:54:e4:88:8a:56:7e:93:88:b6:
         ac:27:ed:23:d5:f4:fc:70:3b:f8:38:e3:75:16:97:a4:b5:b7:
         18:9c:f2:19:67:77:dd:79:e0:81:88:99:1a:96:60:5a:a0:e8:
         72:50:9f:0a:a8:06:fb:ba:7b:c9:24:2d:2d:21:ed:d3:76:34:
         76:de:72:c3:fe:7f:85:76:d6:2e:d4:d7:d6:f5:1d:6e:df:82:
         53:a3:0a:de:3f:eb:72:f7:4c:d7:b7:31:78:32:21:a0:00:c3:
         d9:84:4f:a1:c0:b1:6c:ad:56:f2:6c:f7:ee:61:5b:60:ec:55:
         43:31:3a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:31:41 2025 by rpki-client