Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft
File:                     IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft (raw, json)
Hash identifier:          bQOIpx2SNfdSJ8iDwsf+Xqyw/3ifyc+o6s/d6NW912c=
Subject key identifier:   10:94:CF:E6:1E:E6:06:CC:E3:84:2D:96:66:1D:79:02:15:1F:AC:08
Authority key identifier: 23:3C:0D:3B:2A:75:C4:1A:B8:2E:5B:EB:70:DB:E2:E7:34:2D:66:1F
Certificate issuer:       /CN=A91FE26E/serialNumber=233C0D3B2A75C41AB82E5BEB70DBE2E7342D661F
Certificate serial:       1D24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IzwNOyp1xBq4LlvrcNvi5zQtZh8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft
Manifest number:          1D0F
Signing time:             Sat 18 Oct 2025 16:27:56 +0000
Manifest this update:     Sat 18 Oct 2025 16:27:55 +0000
Manifest next update:     Sat 25 Oct 2025 16:27:55 +0000
Files and hashes:         1: IzwNOyp1xBq4LlvrcNvi5zQtZh8.crl (hash: pOXu2EC6wUVo6mL17GfiECk/D0SkBCikgJ2etMsFZ8E=)
                          2: 40EAC2C0685111F0A688505EC4F9AE02.roa (hash: 2aGejYYAILu+vq+h9Ds1ItJ4A2WEADfQRUwQnuAzQp4=)
                          3: 402AE4B4685111F0A688505EC4F9AE02.roa (hash: dyKQZQJFWOlaLCos4pICmePW3GQtvzVk28wWqQnX6xA=)
                          4: E8FF9A526FDE11E9AF945067C4F9AE02.roa (hash: RrfRQiaJQ/K/F0pEWCxhmnA6Eh04yX02RfUKJUyZudE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.crl
                          rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IzwNOyp1xBq4LlvrcNvi5zQtZh8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 16:27:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7460 (0x1d24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE26E, serialNumber=233C0D3B2A75C41AB82E5BEB70DBE2E7342D661F
        Validity
            Not Before: Oct 18 16:27:55 2025 GMT
            Not After : Oct 25 16:27:55 2025 GMT
        Subject: CN=68f3c00c-1d02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7a:f7:23:ad:ae:e8:75:54:28:98:1f:bb:bf:
                    e4:2a:a0:08:57:55:1b:d6:82:a1:02:43:e7:d7:8b:
                    18:69:4a:05:14:31:03:71:68:0b:d3:e3:c4:d1:74:
                    65:8d:cc:34:be:88:fd:d9:ab:ed:4d:a9:01:4a:e3:
                    c5:88:5e:58:52:f7:65:99:db:53:b5:95:98:63:ae:
                    44:13:9b:5b:5d:e8:02:24:7b:c5:7a:22:2f:9d:ab:
                    99:24:4c:80:13:c2:8a:e3:2d:c8:e4:5a:5f:ab:ae:
                    29:3c:25:0c:97:5c:ef:7b:ab:31:61:00:92:47:ab:
                    e9:94:52:e2:f3:af:15:84:a5:0d:be:a8:c6:07:77:
                    42:05:2c:cb:92:d7:a3:a4:51:72:4e:bc:3d:27:90:
                    a6:05:f3:17:15:20:33:dc:5e:52:fd:5f:8a:e4:f8:
                    a3:d8:35:c1:9c:e5:11:92:4b:88:84:9f:72:47:03:
                    40:b3:06:2b:80:56:61:3f:97:c0:94:67:2f:91:eb:
                    80:a7:79:56:dd:d0:86:35:1b:61:de:47:4e:aa:8a:
                    b7:06:f0:ee:aa:b4:03:d7:9a:00:84:4a:0a:dc:bd:
                    07:a4:fe:1e:28:1c:9a:eb:5b:ee:94:86:b8:3d:c8:
                    51:78:d5:9f:4d:53:b6:f5:56:db:a0:f5:da:a5:b2:
                    6b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:94:CF:E6:1E:E6:06:CC:E3:84:2D:96:66:1D:79:02:15:1F:AC:08
            X509v3 Authority Key Identifier:
                keyid:23:3C:0D:3B:2A:75:C4:1A:B8:2E:5B:EB:70:DB:E2:E7:34:2D:66:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IzwNOyp1xBq4LlvrcNvi5zQtZh8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         f2:9b:a7:c5:a2:a3:c9:55:d2:ab:8e:8b:02:57:97:ed:4a:8f:
         b4:53:83:02:73:46:2b:a5:61:39:ad:9f:84:5f:96:e9:58:6f:
         12:6e:02:1b:9f:93:8e:b4:dd:a0:0f:fd:fb:b6:1b:9d:5a:f7:
         35:20:e0:c2:c6:29:0f:27:02:4b:fe:41:32:e8:5d:5e:e6:d1:
         50:8f:6e:cd:8c:30:9b:c2:2b:28:7f:f7:e9:29:39:b9:34:2e:
         65:9c:94:6e:ad:ee:e4:a1:62:32:63:4c:4b:93:99:29:37:e2:
         ce:44:3e:c4:8b:cf:b4:89:5e:22:53:e2:b2:81:28:01:16:32:
         f6:37:01:7e:df:87:c5:d1:93:d0:12:65:6e:5e:87:4a:36:04:
         ab:71:07:fd:56:e2:0b:f4:ee:d3:15:16:2d:76:6a:4b:f0:75:
         9d:3b:ac:8a:e1:d3:76:50:d5:15:92:4b:58:6d:6a:0c:05:5d:
         c2:94:7e:5d:97:15:dc:67:bd:9f:2d:bc:54:9d:0a:61:6f:df:
         01:18:91:01:e7:cf:f7:45:24:01:06:76:44:df:6e:02:61:87:
         5e:4d:e2:ce:64:58:e3:90:3b:4e:e4:2f:1d:a1:a5:a5:f2:80:
         a9:47:5e:6d:cc:ca:07:d7:78:e0:ae:5c:51:ae:03:e5:22:91:
         36:7e:b8:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:39:23 2025 by rpki-client