Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft
File:                     4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft (raw, json)
Hash identifier:          0W687+beNOZcogpSiBnyDG2JNDONc9SizWO1PPDjT1w=
Subject key identifier:   B6:3E:F5:9A:AE:05:D5:71:0A:AA:96:CB:DA:DE:63:10:5E:59:89:A3
Authority key identifier: E2:B0:DF:A6:90:D2:C7:EA:C4:36:36:75:6E:43:7B:7C:26:26:F4:BB
Certificate issuer:       /CN=A91F6C10/serialNumber=E2B0DFA690D2C7EAC43636756E437B7C2626F4BB
Certificate serial:       4E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft
Manifest number:          4C
Signing time:             Sun 19 Oct 2025 10:45:39 +0000
Manifest this update:     Sun 19 Oct 2025 10:45:38 +0000
Manifest next update:     Sun 26 Oct 2025 10:45:38 +0000
Files and hashes:         1: 4rDfppDSx-rENjZ1bkN7fCYm9Ls.crl (hash: yS7Mv1FW5QZ0ffUv2FMNkKQSOpUhK5qQuvJGs9ZvICQ=)
                          2: 7D7F13983B9D11F08338F965C4F9AE02.roa (hash: iR9RmJIaK9kKAtKzjMGd269EeycB0OEwfaUigxvrCq4=)
                          3: F88154843B9D11F091B39D67C4F9AE02.roa (hash: nNxkYkRl2gKLDvZBsXppHYQmBwtDL7vgL/l44dOoypk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.crl
                          rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 10:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78 (0x4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F6C10, serialNumber=E2B0DFA690D2C7EAC43636756E437B7C2626F4BB
        Validity
            Not Before: Oct 19 10:45:38 2025 GMT
            Not After : Oct 26 10:45:38 2025 GMT
        Subject: CN=68f4c153-2f4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2b:c7:27:97:aa:b2:e3:aa:58:9e:08:39:47:
                    7f:32:30:4f:5f:3d:0c:b3:af:13:85:7f:0a:21:32:
                    11:c2:f3:51:c2:c4:8c:97:17:d2:fd:8f:25:a7:3c:
                    9c:07:ff:c7:1f:b7:cc:8b:38:db:27:99:84:07:ef:
                    aa:48:9c:89:61:68:f6:57:ff:f4:1b:73:b4:09:7d:
                    98:6f:aa:65:74:f2:f3:b2:f8:8c:97:ef:07:11:b5:
                    70:a7:1c:64:64:fd:46:85:fd:d1:bf:cb:f3:2c:51:
                    8b:41:2b:70:ff:6b:72:28:9c:43:58:74:0e:74:54:
                    c1:22:b9:b6:52:4c:51:ff:d5:fc:fd:ff:c4:89:51:
                    e1:19:31:25:71:04:12:da:a6:9f:76:7b:a1:f6:ff:
                    32:c9:85:29:40:04:cc:cc:73:09:19:0e:93:02:ad:
                    ec:8b:e0:4d:1e:4c:bd:a5:2d:e7:73:8e:e4:45:93:
                    61:dd:19:d4:0b:52:64:a8:77:d1:80:54:22:3e:09:
                    5c:02:37:9d:ab:09:41:90:4d:c7:72:d2:cf:54:43:
                    89:fe:53:b9:f9:6c:a3:94:f7:11:8b:ce:3d:0a:35:
                    aa:3a:20:9a:cb:8f:8a:2a:a7:08:eb:dd:03:33:89:
                    34:c4:d2:cc:a4:bd:8f:17:22:87:93:e9:4d:4f:82:
                    78:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:3E:F5:9A:AE:05:D5:71:0A:AA:96:CB:DA:DE:63:10:5E:59:89:A3
            X509v3 Authority Key Identifier:
                keyid:E2:B0:DF:A6:90:D2:C7:EA:C4:36:36:75:6E:43:7B:7C:26:26:F4:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:4f:6f:50:16:73:68:c0:ca:34:02:b6:18:67:e4:4e:3a:e2:
         2e:de:d4:7b:6f:c4:7c:74:f1:ea:7c:a6:d4:74:20:19:ce:3b:
         0d:38:3b:f8:ea:85:3a:25:c8:a0:32:c8:a7:d2:88:3f:92:e7:
         ab:b8:bb:de:a9:ea:c5:69:b4:26:8e:00:da:26:d3:2a:c4:c5:
         a8:62:33:f2:f6:32:cd:07:86:45:e3:fd:a1:21:70:a8:17:d6:
         78:25:e9:a1:f1:d8:ad:6e:59:77:c6:67:07:4f:49:2c:52:69:
         e2:b2:64:f0:22:3e:25:4e:45:61:18:fb:ed:d0:3e:fa:16:95:
         8d:0e:37:0e:75:b9:2c:b4:df:1d:5c:a8:c8:e0:b0:ad:55:9c:
         18:66:fc:d7:b6:63:e8:8d:1b:21:20:c4:d8:75:4b:8b:8a:54:
         e2:14:12:63:4c:e4:39:81:22:05:7b:c5:39:a0:58:06:11:08:
         93:31:a9:ef:3a:59:ef:ec:b9:f5:c5:ee:2b:c6:16:5c:4d:38:
         ed:42:ef:3b:3b:19:b4:09:dc:eb:fc:ec:b4:30:b3:06:79:11:
         2e:be:69:64:7d:fc:91:bd:95:51:e9:1c:1b:70:c4:87:9f:67:
         c6:e2:f4:f1:c3:42:20:8b:23:6f:fc:ab:5b:a6:ba:8e:ed:0d:
         e9:27:75:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:05:05 2025 by rpki-client