Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.mft
File:                     j5ZyrK2aUfA9SLxDtjOpVzSY494.mft (raw, json)
Hash identifier:          2JL/KYbO9Qpz509jb7Sye8FR7f4HZCxKhHdRB9SCuro=
Subject key identifier:   88:EA:2A:C8:BC:0E:0F:BA:01:59:F0:F4:98:7E:99:0A:D7:80:60:A8
Authority key identifier: 8F:96:72:AC:AD:9A:51:F0:3D:48:BC:43:B6:33:A9:57:34:98:E3:DE
Certificate issuer:       /CN=A91FC1DE/serialNumber=8F9672ACAD9A51F03D48BC43B633A9573498E3DE
Certificate serial:       027C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5ZyrK2aUfA9SLxDtjOpVzSY494.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.mft
Manifest number:          027B
Signing time:             Sun 19 Oct 2025 03:50:52 +0000
Manifest this update:     Sun 19 Oct 2025 03:50:52 +0000
Manifest next update:     Sun 26 Oct 2025 03:50:52 +0000
Files and hashes:         1: j5ZyrK2aUfA9SLxDtjOpVzSY494.crl (hash: 6PXbpW3BSYPdji2fqmdSNn2ZqtKgUUp83XQ75locGl4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.crl
                          rsync://rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5ZyrK2aUfA9SLxDtjOpVzSY494.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 03:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 636 (0x27c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FC1DE, serialNumber=8F9672ACAD9A51F03D48BC43B633A9573498E3DE
        Validity
            Not Before: Oct 19 03:50:52 2025 GMT
            Not After : Oct 26 03:50:52 2025 GMT
        Subject: CN=68f4601c-84e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:cb:14:e5:8f:f7:e8:ef:44:42:d0:ef:64:e8:
                    10:5f:f7:6c:66:f4:ef:a0:40:d5:56:25:16:a4:5c:
                    1f:f0:3f:20:3c:2f:21:94:8d:e5:6b:c3:b4:f5:38:
                    da:ed:04:bb:ec:a6:d9:57:0a:47:42:94:6f:d9:d0:
                    7a:c7:1c:1a:c5:47:69:77:7a:57:60:38:9c:14:2f:
                    80:2c:0a:4f:b8:83:ee:0b:21:80:83:e7:18:d2:f3:
                    f6:6e:69:5c:26:6b:15:64:4a:b1:d0:ef:78:ea:e8:
                    d7:65:c3:16:f2:aa:4b:17:45:92:78:48:1b:41:25:
                    33:f7:e7:83:a7:18:91:5f:e3:17:03:d4:48:23:93:
                    62:b3:4d:14:13:f3:fa:ff:c5:03:ca:aa:49:f6:14:
                    e1:8b:33:e0:b9:ba:e2:a2:ff:7c:a5:b9:af:74:fc:
                    a8:42:59:2c:e6:17:64:54:c1:7b:e0:49:3c:51:0e:
                    fa:aa:4a:fd:33:ba:cd:bc:8b:3d:f9:0d:fc:b4:af:
                    c2:f2:0d:f8:4e:73:f6:f1:00:5a:da:7d:58:af:2e:
                    f3:ae:5c:92:21:64:d4:4e:0e:fe:92:05:0b:fb:ed:
                    cd:22:67:79:e4:fa:ba:ff:b8:24:49:7e:61:0b:95:
                    37:59:19:17:89:ba:1b:15:f5:21:d3:93:03:1b:a2:
                    13:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:EA:2A:C8:BC:0E:0F:BA:01:59:F0:F4:98:7E:99:0A:D7:80:60:A8
            X509v3 Authority Key Identifier:
                keyid:8F:96:72:AC:AD:9A:51:F0:3D:48:BC:43:B6:33:A9:57:34:98:E3:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5ZyrK2aUfA9SLxDtjOpVzSY494.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:c0:30:d3:cc:c3:d4:b1:56:c3:11:16:69:28:10:ab:6c:2c:
         82:42:96:ca:22:c0:dc:3b:ed:6f:9f:3c:a1:c3:7d:e1:30:e6:
         6d:00:d8:e1:e3:75:f0:e6:48:12:f9:a4:4e:ae:d7:30:9f:33:
         48:d2:4b:92:1c:2b:32:30:85:19:02:0a:35:23:8b:63:20:de:
         cc:53:09:45:b5:44:d6:ef:9f:a2:ce:55:ac:17:0e:73:0d:6f:
         28:e0:f7:fb:ab:bb:2e:b1:1c:5b:9a:41:a6:5d:7d:90:d8:50:
         c4:a2:0c:36:e2:b9:e3:53:0c:1d:a7:f3:bb:e0:99:4a:de:7d:
         70:3d:94:7d:2a:45:8d:39:73:66:e9:ed:ed:93:91:85:bd:4a:
         b8:b5:96:95:18:d6:cf:0c:16:2d:91:1e:92:49:ac:df:10:23:
         82:3d:cc:e1:05:dc:46:2b:cb:b6:55:3a:14:8d:7e:9e:28:a3:
         0f:bb:9a:10:98:ab:26:3d:59:07:65:46:ba:74:90:48:63:a2:
         25:8c:98:da:b1:00:1f:31:28:ca:61:fa:f6:65:4a:c0:2a:00:
         81:93:9d:a6:4a:43:00:48:57:17:ad:29:31:ce:f6:43:0c:23:
         72:3c:64:90:84:28:aa:67:c7:44:bf:35:99:fd:f7:c2:20:84:
         a0:47:c1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:02:49 2025 by rpki-client