Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/EdT02sf7qLXBIiQwBTm9xhVEXeU.mft
File:                     EdT02sf7qLXBIiQwBTm9xhVEXeU.mft (raw, json)
Hash identifier:          Y4Icj66OwcQ6lGrt4iCVIOxGpkl8/mupA8f8ajK4Rjk=
Subject key identifier:   65:48:8B:E5:AF:F9:F4:BB:2E:F7:55:61:06:DD:7E:FE:84:CA:BA:72
Authority key identifier: 11:D4:F4:DA:C7:FB:A8:B5:C1:22:24:30:05:39:BD:C6:15:44:5D:E5
Certificate issuer:       /CN=A91F79A2/serialNumber=11D4F4DAC7FBA8B5C12224300539BDC615445DE5
Certificate serial:       0107
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdT02sf7qLXBIiQwBTm9xhVEXeU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/EdT02sf7qLXBIiQwBTm9xhVEXeU.mft
Manifest number:          0105
Signing time:             Sun 19 Oct 2025 08:01:34 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:33 +0000
Manifest next update:     Sun 26 Oct 2025 08:01:33 +0000
Files and hashes:         1: EdT02sf7qLXBIiQwBTm9xhVEXeU.crl (hash: lb1B5QipWOWODaQLbH0d++oBPriNBF+H0Xjvryz2IpQ=)
                          2: 6B10AF52379A11F0B3AC7740C4F9AE02.roa (hash: rykf5EiwJxMbaGGZx16BKp2POKraZb9uuOUjLdA5j+M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/EdT02sf7qLXBIiQwBTm9xhVEXeU.crl
                          rsync://rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/EdT02sf7qLXBIiQwBTm9xhVEXeU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdT02sf7qLXBIiQwBTm9xhVEXeU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 08:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 263 (0x107)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F79A2, serialNumber=11D4F4DAC7FBA8B5C12224300539BDC615445DE5
        Validity
            Not Before: Oct 19 08:01:33 2025 GMT
            Not After : Oct 26 08:01:33 2025 GMT
        Subject: CN=68f49add-466f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:43:2f:6c:7e:ab:dc:42:96:48:6c:7d:b2:67:
                    cb:40:ed:25:39:1c:91:54:25:51:4c:5a:e2:47:7f:
                    b6:cf:b6:24:aa:a1:4d:b3:7f:68:4a:32:c8:45:a0:
                    ac:a5:22:be:97:ce:98:48:c4:93:fd:31:d4:d8:b7:
                    87:10:31:08:74:36:75:e1:e4:c3:77:54:5e:c8:c1:
                    ed:ce:80:87:39:d9:01:c8:6b:49:b6:65:3a:69:d1:
                    db:a5:6f:23:bb:4a:a0:24:92:87:2b:82:78:db:53:
                    f7:74:20:ef:6e:5f:88:14:67:d0:6f:87:b7:8f:3e:
                    f1:de:36:76:6b:e9:63:fb:e7:85:d1:76:26:c0:ea:
                    03:43:bd:ba:20:14:6e:9d:d1:17:e2:70:b1:06:0c:
                    37:48:ec:2b:8d:18:ec:c5:ff:80:42:a1:56:9b:a7:
                    8d:e5:d3:b0:b2:56:ff:16:71:07:f4:3b:52:6e:d9:
                    ee:70:94:84:51:1a:cb:e6:18:f8:0c:02:16:5e:56:
                    41:18:5e:7c:12:da:7b:4e:f0:e7:cb:c6:4b:fa:ba:
                    8f:ea:44:af:0b:6b:93:4f:c1:2d:d8:23:33:76:ca:
                    a1:27:bc:ff:cc:34:9f:3d:e7:f5:a2:a9:60:d4:7f:
                    41:31:96:19:9a:eb:9b:2d:59:f4:fc:7a:90:89:46:
                    93:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:48:8B:E5:AF:F9:F4:BB:2E:F7:55:61:06:DD:7E:FE:84:CA:BA:72
            X509v3 Authority Key Identifier:
                keyid:11:D4:F4:DA:C7:FB:A8:B5:C1:22:24:30:05:39:BD:C6:15:44:5D:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/EdT02sf7qLXBIiQwBTm9xhVEXeU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdT02sf7qLXBIiQwBTm9xhVEXeU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/EdT02sf7qLXBIiQwBTm9xhVEXeU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:b3:a2:c9:fe:2a:ef:ec:5b:17:24:41:fe:d0:06:db:d1:84:
         91:77:c7:76:36:51:a9:9e:06:db:03:bc:60:d5:c7:13:37:b6:
         af:c0:fe:e5:4c:eb:ae:d1:83:c2:9f:3b:c4:9d:8e:06:cb:6f:
         9f:4b:0b:d4:2d:1e:91:70:2d:25:e9:84:9e:a6:53:e7:d5:fb:
         cf:b9:4d:46:f2:91:51:91:41:b7:4e:b4:83:ba:d1:08:47:23:
         cf:16:2d:cc:49:51:f7:ae:19:52:3e:29:bd:17:0b:dd:69:2e:
         f5:58:ed:94:50:b5:01:d8:ea:5f:12:c0:9b:ed:72:d7:fb:ad:
         ae:95:98:87:4e:da:0a:15:9b:a6:b0:d0:bf:4c:9f:3f:6e:48:
         db:b4:02:9f:4c:e8:44:0f:f1:5a:86:d1:37:3a:88:18:a9:2d:
         71:2b:fe:bf:b0:4f:92:43:9f:2b:ff:d8:cf:d5:a1:6e:ae:d0:
         27:60:f5:0e:d6:5f:63:66:d7:cf:f0:3b:45:ef:c6:09:db:9b:
         f4:11:72:63:de:d8:50:d5:e4:48:5c:20:3f:93:2f:41:46:5c:
         2e:c9:3f:99:59:c1:ad:b7:4e:4f:3d:0a:0f:bf:d7:0a:39:5b:
         6e:fb:a2:b7:9c:30:ce:31:5d:54:08:9c:84:01:fa:2e:be:07:
         01:2d:82:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:37:19 2025 by rpki-client