Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.mft
File:                     lSamckeK-nVEXY0H3MV8BYlm7-I.mft (raw, json)
Hash identifier:          8jga3aE64m3ujWFZ0p7em9JdX/gH69UA2CPM1SYZzXc=
Subject key identifier:   15:D6:A2:20:E3:84:A0:E5:94:8E:E5:EA:5D:9F:D8:C6:68:6D:53:A9
Authority key identifier: 95:26:A6:72:47:8A:FA:75:44:5D:8D:07:DC:C5:7C:05:89:66:EF:E2
Certificate issuer:       /CN=A91FA1BE/serialNumber=9526A672478AFA75445D8D07DCC57C058966EFE2
Certificate serial:       0277
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSamckeK-nVEXY0H3MV8BYlm7-I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.mft
Manifest number:          026F
Signing time:             Sun 19 Oct 2025 03:53:32 +0000
Manifest this update:     Sun 19 Oct 2025 03:53:31 +0000
Manifest next update:     Sun 26 Oct 2025 03:53:31 +0000
Files and hashes:         1: lSamckeK-nVEXY0H3MV8BYlm7-I.crl (hash: +vyTjsurRF1njIHMKCblzM5iDZIYPCbM/lVyQ3x/t3U=)
                          2: 6F46908C2D3411ED92165562C4F9AE02.roa (hash: sR0eTjFYTlKs7mzVHMIl7telIMsp7nYju6MlYaiMBkg=)
                          3: 6E98B3182D3411ED92165562C4F9AE02.roa (hash: 64gg/L8X7dQV3AAOAv3MN1klInujbmxMEcZ9X63m+I4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.crl
                          rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSamckeK-nVEXY0H3MV8BYlm7-I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 03:53:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 631 (0x277)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA1BE, serialNumber=9526A672478AFA75445D8D07DCC57C058966EFE2
        Validity
            Not Before: Oct 19 03:53:31 2025 GMT
            Not After : Oct 26 03:53:31 2025 GMT
        Subject: CN=68f460bb-18a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:d7:78:90:8c:d4:64:3a:c5:50:c2:d9:5e:41:
                    9a:60:83:81:61:2a:47:17:00:38:0e:95:74:6e:fb:
                    cb:2e:99:02:25:4f:5e:3c:b1:a5:fd:da:57:62:16:
                    34:86:ce:d6:28:33:10:d8:eb:c8:67:07:50:05:32:
                    cb:b7:ff:64:81:e9:5e:c4:ed:3e:f8:ba:89:2b:7d:
                    c1:f5:71:f5:53:77:6b:29:6b:a1:93:8f:71:a0:24:
                    0e:0c:a0:07:c9:73:56:c7:4a:61:22:b4:15:d6:9e:
                    4b:4f:1d:b7:f6:8c:7c:c6:60:8b:15:84:c4:e4:6b:
                    ad:2e:f3:9d:46:d4:95:59:aa:08:63:54:ad:49:69:
                    d1:50:86:65:95:22:96:5d:f9:f0:33:6f:eb:59:e3:
                    42:e6:30:9f:c0:30:7e:8c:93:a0:c0:72:77:1a:bc:
                    9b:af:0c:28:eb:d3:23:b4:94:07:21:d1:36:c9:28:
                    50:12:c6:e4:ad:e8:98:b4:61:5a:a5:3b:f2:62:b7:
                    cb:c3:2d:da:0d:0a:1b:81:06:d1:c4:e9:23:a5:11:
                    2a:b9:8a:1f:92:51:54:36:6d:43:53:7a:bc:6b:dd:
                    de:4f:68:9a:85:da:54:b9:e6:7a:5e:d3:f3:8c:e2:
                    9b:78:6d:f0:64:09:97:ef:43:56:b7:cd:7f:a0:fa:
                    1c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:D6:A2:20:E3:84:A0:E5:94:8E:E5:EA:5D:9F:D8:C6:68:6D:53:A9
            X509v3 Authority Key Identifier:
                keyid:95:26:A6:72:47:8A:FA:75:44:5D:8D:07:DC:C5:7C:05:89:66:EF:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSamckeK-nVEXY0H3MV8BYlm7-I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:12:07:20:de:cb:9b:30:91:31:c0:9a:a7:6c:2d:78:16:dc:
         ef:f7:25:1d:df:e8:ae:c3:eb:f4:99:0d:40:f6:0f:98:60:37:
         a5:65:0f:01:f7:31:56:a0:48:a6:98:f0:81:db:c7:35:25:76:
         14:b9:e0:50:18:ce:7e:58:44:1e:4f:96:c0:f9:89:05:fe:54:
         42:77:26:35:60:50:70:d8:3a:3d:29:90:31:d4:3d:ed:04:05:
         0f:1f:f6:69:00:65:30:3e:7a:94:2d:01:97:72:d0:d6:4c:f1:
         93:81:bb:e2:af:7b:3b:7e:82:87:a2:99:90:f1:23:8f:c9:c9:
         c2:12:20:52:30:38:25:ad:39:f7:6d:63:ad:a6:ed:e1:a0:53:
         39:b3:1a:c3:25:f1:e7:c4:b1:01:5d:57:aa:3f:03:68:33:9a:
         c5:ad:31:5c:d6:ea:b8:46:91:87:ca:fd:4b:50:2a:41:66:07:
         57:69:72:9e:bf:6e:ee:47:26:d5:fe:0f:a6:21:01:47:59:ab:
         0f:0e:c0:0b:d0:93:9d:ee:21:81:4e:95:eb:e1:b8:d6:32:74:
         c6:ec:99:5d:23:5f:bc:f2:b5:16:80:3e:e9:15:e1:fd:5f:2e:
         ce:55:6d:68:19:ad:fb:36:e4:f5:3d:80:13:a5:4d:8c:aa:a4:
         48:d2:ec:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:15:31 2025 by rpki-client