Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.mft
File:                     m8FpAIAncr5ikmDEqu1fP-9-s-c.mft (raw, json)
Hash identifier:          VSrBhOTlCzEupTVy5mdcqLLaZ6qAGuquXXD90oa9tuo=
Subject key identifier:   15:03:9E:41:EA:38:6A:E4:88:BF:45:F8:B8:59:98:5B:A5:86:5B:CC
Authority key identifier: 9B:C1:69:00:80:27:72:BE:62:92:60:C4:AA:ED:5F:3F:EF:7E:B3:E7
Certificate issuer:       /CN=A91F91EB/serialNumber=9BC16900802772BE629260C4AAED5F3FEF7EB3E7
Certificate serial:       0D0B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8FpAIAncr5ikmDEqu1fP-9-s-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.mft
Manifest number:          0CE8
Signing time:             Sat 18 Oct 2025 18:51:54 +0000
Manifest this update:     Sat 18 Oct 2025 18:51:54 +0000
Manifest next update:     Sat 25 Oct 2025 18:51:54 +0000
Files and hashes:         1: m8FpAIAncr5ikmDEqu1fP-9-s-c.crl (hash: G+lUa1Ln8lFQw9txYWP4Ir0Z6+8/aQ9kUD9fmycYN7g=)
                          2: 827D7766AACC11EA8113F532C4F9AE02.roa (hash: oguEqhYGf6Whv8PqzIUzLfsgAvX4wE5CZ9/lAxwLLvs=)
                          3: 81CA43EEAD7811EB905E2C41C4F9AE02.roa (hash: twcj5cD600ozwl+LH65FC7h60q+thDGwgx4YQo1a3TQ=)
                          4: 7F4CB00EAAE811EA8412810FC4F9AE02.roa (hash: C+pA9vRBNRgX2w4BOkt7QtiabsJexJBu+hnduYyIgLA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.crl
                          rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8FpAIAncr5ikmDEqu1fP-9-s-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 18:51:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3339 (0xd0b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F91EB, serialNumber=9BC16900802772BE629260C4AAED5F3FEF7EB3E7
        Validity
            Not Before: Oct 18 18:51:54 2025 GMT
            Not After : Oct 25 18:51:54 2025 GMT
        Subject: CN=68f3e1ca-04ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:39:04:d4:03:a5:d6:27:27:c7:ca:45:2d:f4:
                    e4:17:53:8f:fb:7e:0c:1a:25:3f:56:92:e7:18:a1:
                    03:44:72:82:8c:f6:8c:85:0e:61:b1:27:81:2b:b3:
                    e4:b8:66:70:0f:5c:b5:c5:8b:74:a1:06:af:6e:9f:
                    23:73:69:36:bb:12:90:06:b9:0f:e6:aa:e6:0e:35:
                    9d:3f:3f:fd:61:b2:24:a4:10:8d:9d:14:45:73:fa:
                    4a:cc:a1:19:d4:51:26:0d:2a:ea:2b:56:b8:dd:ef:
                    1c:b8:1d:09:f2:cd:dc:34:58:76:89:bb:68:ea:c8:
                    23:9e:6d:20:ef:d8:39:0f:28:64:22:c9:21:2d:e0:
                    68:be:84:36:bd:95:ba:fa:3f:21:24:3d:b4:2e:62:
                    8d:de:c5:20:ce:c5:2f:b4:db:8d:13:eb:30:18:df:
                    b5:33:68:da:83:0a:79:61:17:89:65:f1:d5:79:a2:
                    6c:1f:3b:6e:9a:ad:4a:da:bc:12:0b:e8:9a:8c:4f:
                    dd:34:17:d7:94:ad:92:c6:55:89:a2:db:1d:25:04:
                    fa:d1:56:53:08:05:d1:6a:0b:5b:9a:61:9e:2f:37:
                    29:78:d1:e8:f4:e3:08:7e:69:12:f7:74:af:31:91:
                    73:68:41:06:f5:7b:de:23:fa:bc:0e:0a:c2:a9:b8:
                    f1:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:03:9E:41:EA:38:6A:E4:88:BF:45:F8:B8:59:98:5B:A5:86:5B:CC
            X509v3 Authority Key Identifier:
                keyid:9B:C1:69:00:80:27:72:BE:62:92:60:C4:AA:ED:5F:3F:EF:7E:B3:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8FpAIAncr5ikmDEqu1fP-9-s-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:58:de:8e:48:41:88:6f:6a:b8:81:b3:01:e6:c3:58:f4:a3:
         02:df:7b:d3:07:64:1f:1a:11:ff:f3:18:fe:81:19:1c:73:7d:
         1d:51:f3:5e:32:93:81:e8:28:38:21:18:83:e2:62:aa:6a:3b:
         73:eb:1e:2f:38:0a:a0:b5:d8:2a:7f:a7:d1:93:80:ed:2b:60:
         0e:fe:30:ce:2c:12:61:bf:c0:d9:86:bf:b7:65:d9:99:52:d0:
         8d:84:09:48:4a:c7:f4:9a:55:28:7e:db:14:fd:ed:71:fd:77:
         28:d0:a3:80:90:65:1d:02:74:b4:26:aa:f1:1d:5c:aa:a6:39:
         41:f5:86:4d:c9:3e:40:6f:f0:67:89:43:ec:89:fe:ff:19:4b:
         da:8b:21:be:f0:2a:f5:30:7e:71:ba:e1:fb:5f:31:52:b4:0b:
         f8:9e:50:cd:52:4c:23:7f:df:45:14:ce:aa:75:34:64:b7:67:
         e9:13:e9:8c:67:5d:37:e0:20:b5:7c:04:33:85:4a:4d:de:8d:
         6d:49:a2:57:d9:b4:e5:0e:4c:96:bd:6e:18:c1:9f:a1:03:c6:
         49:b9:58:55:24:73:08:12:24:53:0d:db:c9:21:19:1c:b0:40:
         1a:03:13:c0:e0:9b:b2:9c:87:3d:28:9d:8c:30:70:88:1f:a3:
         d9:af:38:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:11:33 2025 by rpki-client