Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.mft
File:                     jM5ORhldFXBPtWKTLgq2Kg65iiY.mft (raw, json)
Hash identifier:          czcGBQ9/4MbaqOtcEnIsQ1bw8CQGRh94zMDkUEub7Ww=
Subject key identifier:   92:C3:DC:C3:89:AE:4A:EE:BF:EA:5E:16:50:61:8B:20:24:7F:A3:CC
Authority key identifier: 8C:CE:4E:46:19:5D:15:70:4F:B5:62:93:2E:0A:B6:2A:0E:B9:8A:26
Certificate issuer:       /CN=A91F7334/serialNumber=8CCE4E46195D15704FB562932E0AB62A0EB98A26
Certificate serial:       0457
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM5ORhldFXBPtWKTLgq2Kg65iiY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.mft
Manifest number:          044A
Signing time:             Sun 19 Oct 2025 02:07:05 +0000
Manifest this update:     Sun 19 Oct 2025 02:07:05 +0000
Manifest next update:     Sun 26 Oct 2025 02:07:05 +0000
Files and hashes:         1: jM5ORhldFXBPtWKTLgq2Kg65iiY.crl (hash: hEJw0w7rvErWAVYRzMByAAYzQs5/Ff35tEXhvXdCFAg=)
                          2: 96F24818744F11ECBFE4A57DC4F9AE02.roa (hash: Jq+BJa5bIC2ga/tgIn6ID1FhPZxllAOIKx3OxJo/dLg=)
                          3: 8B8B954E6C9011ED9AAF427AC4F9AE02.roa (hash: h3fylE+2YBgfkc7GqGmNPtjnF3D2D39dQ6blUneghIY=)
                          4: 0B7C7B7C751311ECA43F7D3BC4F9AE02.roa (hash: Q81s5XKL5iVaVaoWayTQR37y4XfCEhNVP+1tJwtC+bU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.crl
                          rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM5ORhldFXBPtWKTLgq2Kg65iiY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 02:07:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1111 (0x457)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7334, serialNumber=8CCE4E46195D15704FB562932E0AB62A0EB98A26
        Validity
            Not Before: Oct 19 02:07:05 2025 GMT
            Not After : Oct 26 02:07:05 2025 GMT
        Subject: CN=68f447c9-2135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a1:b5:e6:1a:c6:d2:e5:df:0a:4f:04:6e:ce:
                    30:35:b3:bb:1f:ae:7c:38:da:df:d7:39:df:58:8a:
                    1d:01:14:22:da:77:aa:64:ec:42:21:9e:97:42:f6:
                    a3:fa:05:68:07:fa:b9:de:7e:e8:d1:87:00:e1:94:
                    46:3d:c9:b7:b0:ba:03:bf:a7:75:ed:df:4a:bf:13:
                    7d:a6:8e:dc:6e:6e:d9:62:8f:3d:61:d4:99:c7:0c:
                    c9:92:f1:fa:a7:04:23:96:1b:28:93:a9:db:e0:10:
                    42:af:36:96:39:b8:d4:c5:d0:a6:28:e0:f8:ae:bb:
                    6d:4c:5c:56:55:40:c1:42:69:a3:d0:09:2b:8f:86:
                    c9:e5:11:27:65:f0:99:01:ed:f0:86:ca:42:08:41:
                    09:79:f8:f3:55:00:f9:03:83:22:79:a9:a6:99:4d:
                    b8:f8:ae:27:dd:a0:14:d9:58:82:5b:75:ab:1d:3b:
                    ae:2a:d3:6b:53:c3:c0:88:6c:d2:a7:1c:67:1f:7a:
                    5f:74:8e:a0:a3:52:35:df:ce:6d:fe:45:5d:b2:ad:
                    6f:c3:bb:d9:bd:af:58:53:2a:c8:b2:11:93:52:b5:
                    21:99:ca:e9:45:23:ed:9c:69:fa:b9:b3:fd:53:02:
                    6e:6d:f9:60:b7:c9:3e:65:aa:47:ca:19:91:90:23:
                    d9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:C3:DC:C3:89:AE:4A:EE:BF:EA:5E:16:50:61:8B:20:24:7F:A3:CC
            X509v3 Authority Key Identifier:
                keyid:8C:CE:4E:46:19:5D:15:70:4F:B5:62:93:2E:0A:B6:2A:0E:B9:8A:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM5ORhldFXBPtWKTLgq2Kg65iiY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:18:95:e3:ae:c0:95:57:3e:e4:1b:c8:aa:4b:b9:aa:46:d8:
         d1:8a:9e:55:6f:63:69:03:84:42:37:c9:73:3d:42:cf:6b:c0:
         47:05:61:11:d8:d7:53:00:de:f6:eb:d6:e1:15:0c:57:98:d2:
         af:fa:5f:0c:10:52:65:bf:7d:10:2e:9d:0b:88:c1:ee:24:36:
         6f:7e:22:c7:bf:0b:60:18:54:5a:3f:0e:c9:c1:b6:d0:68:3a:
         ff:d6:24:3a:5e:f8:9a:b4:49:db:d5:a1:e9:8e:44:44:5f:db:
         f2:7f:1d:3f:bb:f6:10:6d:fb:ba:dd:11:6f:08:c4:e2:cf:a0:
         c3:86:c8:88:48:3d:04:dc:b2:ed:87:d2:29:4a:62:a0:6b:8a:
         e9:57:b5:34:49:2f:3c:62:fc:ae:dc:1c:4f:b7:9f:00:eb:51:
         6c:ec:a2:ed:89:a4:a4:ed:8b:66:a8:23:e9:30:91:ca:4b:ec:
         8a:a5:fb:a3:eb:4c:8e:d7:42:18:2f:3f:13:96:70:85:7d:4f:
         fb:93:15:55:41:d7:db:b7:74:bb:04:cb:54:b7:de:ad:79:71:
         10:60:eb:66:b1:bd:10:70:70:46:19:5a:d9:20:37:1a:e6:ec:
         d1:5e:f7:63:30:5c:ad:a5:0e:a9:86:1a:b3:b1:2c:44:14:41:
         a5:d4:37:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:48:17 2025 by rpki-client