Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft
File:                     Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft (raw, json)
Hash identifier:          +KbKEsYMWKiGqRqyNpumMFFNVQCDloDYKF7JlTLKbaY=
Subject key identifier:   55:53:52:85:C0:32:6C:15:C8:F1:93:0C:F4:BB:6C:43:5B:CC:D2:5E
Authority key identifier: 5F:38:F4:19:51:61:62:BD:88:6E:40:BD:A9:27:F5:5D:C6:FF:3E:62
Certificate issuer:       /CN=A91F8119/serialNumber=5F38F419516162BD886E40BDA927F55DC6FF3E62
Certificate serial:       25F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft
Manifest number:          25D9
Signing time:             Sat 18 Oct 2025 15:56:54 +0000
Manifest this update:     Sat 18 Oct 2025 15:56:53 +0000
Manifest next update:     Sat 25 Oct 2025 15:56:53 +0000
Files and hashes:         1: Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.crl (hash: O5U5+zO5q+jJDVd4cZVfmDNnlNCJXKCFruhsJZS1o3w=)
                          2: 171130AE15F011EC805A0A2FC4F9AE02.roa (hash: 41BdfwHnGG7Imzeq7lbaqU4+u/YDHu3w/vuTNhAYy2M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.crl
                          rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 15:56:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9715 (0x25f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8119, serialNumber=5F38F419516162BD886E40BDA927F55DC6FF3E62
        Validity
            Not Before: Oct 18 15:56:53 2025 GMT
            Not After : Oct 25 15:56:53 2025 GMT
        Subject: CN=68f3b8c6-0825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:90:43:99:5b:a3:5f:9e:f6:6b:e7:0b:9f:3b:
                    e2:e6:f0:45:5c:1d:08:01:7a:63:06:d2:74:9c:a7:
                    97:43:e5:44:0f:ec:82:07:91:db:c6:9c:a4:0a:df:
                    9b:12:b8:9d:18:74:1d:3f:70:26:86:c1:05:83:8d:
                    82:dc:1e:e2:b6:0b:c2:41:2c:77:c9:65:d2:89:bb:
                    dd:76:c4:5f:7e:cf:bf:82:f2:1e:4c:79:00:1d:38:
                    cb:3c:d5:b2:32:48:df:d7:f4:55:02:91:2c:e0:e2:
                    1d:96:30:18:c4:de:4b:a0:2f:71:fb:72:ae:ed:e9:
                    af:5f:cf:65:e7:b3:3a:bf:00:9d:46:7f:ae:8c:24:
                    2e:a4:03:79:76:32:b0:e0:dc:f7:ec:84:c9:05:73:
                    31:bc:a6:3f:5c:ab:89:ce:ea:bb:5d:62:4e:d7:2b:
                    7b:92:4a:f9:ae:33:6c:f3:95:62:1b:9c:8b:e9:0c:
                    d9:31:1c:ec:fb:6d:ca:2b:f5:92:be:37:e4:f0:48:
                    e9:e0:c3:0c:b5:c5:0d:18:b7:11:f0:07:c1:bb:e4:
                    fd:f8:a2:a7:6c:87:a6:1c:3f:44:c9:20:c1:a1:d1:
                    1c:3c:08:f1:c8:52:c3:0c:b1:3d:16:38:44:70:e6:
                    f9:93:47:8e:4f:04:75:2f:eb:e3:cf:4c:41:3d:ab:
                    67:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:53:52:85:C0:32:6C:15:C8:F1:93:0C:F4:BB:6C:43:5B:CC:D2:5E
            X509v3 Authority Key Identifier:
                keyid:5F:38:F4:19:51:61:62:BD:88:6E:40:BD:A9:27:F5:5D:C6:FF:3E:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:e6:32:db:c1:96:1d:07:10:5a:46:6b:a0:d8:75:1f:e4:c6:
         8a:95:33:4f:85:97:32:f8:a3:60:f8:7c:29:be:f5:34:24:a3:
         1b:fb:53:18:48:50:d5:52:fa:52:b0:c8:93:e7:52:49:0b:f3:
         9a:99:c5:21:9f:e8:df:2e:1e:9a:14:8c:c6:b7:d1:20:9e:66:
         14:08:03:c2:f5:94:b7:64:7a:a8:33:28:50:68:b6:82:66:32:
         02:2d:01:ee:59:86:22:d4:7c:7c:a0:8b:6b:bf:ec:f2:e6:51:
         b0:5d:b3:51:c8:19:ee:2b:16:a6:65:2f:1c:fc:49:51:19:fa:
         bb:66:17:a7:fd:e4:3c:94:d9:a5:0f:90:ae:44:c2:32:3d:3d:
         b5:39:7a:0b:83:28:63:28:39:4a:ce:78:45:ed:2a:5c:3d:70:
         87:5e:4e:50:fa:e7:97:1e:50:41:39:1f:11:4a:6c:56:bb:86:
         87:fb:a4:37:b7:83:16:ba:cb:7f:01:5f:c2:ad:f5:52:b5:b8:
         2c:66:b8:f6:6a:66:d3:81:e0:8a:91:79:bd:55:4d:16:6b:cf:
         df:e1:aa:96:23:1d:0f:df:e4:d1:61:27:19:70:f0:19:c1:39:
         8a:68:44:e0:80:8c:9e:d5:f6:f0:63:f3:d4:fb:63:71:9a:3b:
         40:7b:47:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:00:41 2025 by rpki-client