Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.mft
File:                     E7J_1GJI9Kcz2SRlHJQMt_GjBgk.mft (raw, json)
Hash identifier:          hZPvbUClQYAVH7i2c68He3Em3Pbf4s3IYhEz7/urA+U=
Subject key identifier:   AC:BF:86:DC:12:E3:7D:2F:4A:D2:80:28:CD:BA:96:8A:BA:7A:35:02
Authority key identifier: 13:B2:7F:D4:62:48:F4:A7:33:D9:24:65:1C:94:0C:B7:F1:A3:06:09
Certificate issuer:       /CN=A91FFEDB/serialNumber=13B27FD46248F4A733D924651C940CB7F1A30609
Certificate serial:       0232
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.mft
Manifest number:          022F
Signing time:             Sun 19 Oct 2025 04:10:22 +0000
Manifest this update:     Sun 19 Oct 2025 04:10:21 +0000
Manifest next update:     Sun 26 Oct 2025 04:10:21 +0000
Files and hashes:         1: E7J_1GJI9Kcz2SRlHJQMt_GjBgk.crl (hash: C1466WXs+HnQv4gvWz1stKQQN59014Pn+Idq+VsXB+M=)
                          2: 26BE1334558F11EDB3A5ED4FC4F9AE02.roa (hash: SUpV5MPTH/BMBi71c7spbVUHkBTzCZVpxBmfHqDrVmM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.crl
                          rsync://rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 04:10:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 562 (0x232)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FFEDB, serialNumber=13B27FD46248F4A733D924651C940CB7F1A30609
        Validity
            Not Before: Oct 19 04:10:21 2025 GMT
            Not After : Oct 26 04:10:21 2025 GMT
        Subject: CN=68f464ad-cb91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:0f:96:79:e2:d5:08:cd:3e:7d:2c:66:69:3a:
                    4a:8c:da:bb:9d:8d:df:b8:99:d4:13:f4:96:26:53:
                    51:e2:6a:64:30:fd:d5:ce:16:5d:33:7c:5c:4c:a7:
                    69:21:03:d9:31:70:6e:67:52:b6:c1:d9:81:aa:b9:
                    a1:60:be:a3:46:c8:54:40:e6:6c:78:ac:2f:8f:22:
                    cb:c8:fe:bd:17:cd:95:2b:da:78:1b:9b:83:b7:f2:
                    6c:33:28:f3:6f:c5:f8:b4:d0:b2:da:92:fe:27:8f:
                    cd:0d:3e:3b:c8:fd:40:d5:05:d0:7c:35:a6:71:8a:
                    1b:a8:84:a9:8b:6f:c1:72:0c:94:b8:fe:0a:42:51:
                    a5:05:45:13:48:21:eb:e6:4c:b9:3d:14:3c:28:3c:
                    9a:3d:90:4a:ee:7a:b0:43:04:0b:eb:1a:71:c7:22:
                    07:82:2d:78:95:ce:4a:5a:54:42:68:c8:80:4e:45:
                    f4:8a:21:5a:bf:b8:c1:21:b1:af:57:98:16:e0:b0:
                    e9:51:41:15:29:ab:d7:c8:e0:0e:55:18:01:6d:52:
                    e5:c0:f4:6a:a4:11:cd:ca:b5:39:24:7c:a3:1f:d8:
                    66:e9:0d:f9:19:34:f3:2c:b9:d2:28:cd:56:6d:97:
                    0a:28:43:ef:a9:3d:6d:d8:33:de:40:2e:e7:a0:c0:
                    7f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:BF:86:DC:12:E3:7D:2F:4A:D2:80:28:CD:BA:96:8A:BA:7A:35:02
            X509v3 Authority Key Identifier:
                keyid:13:B2:7F:D4:62:48:F4:A7:33:D9:24:65:1C:94:0C:B7:F1:A3:06:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:79:ba:7b:38:72:82:f6:1a:f1:95:ec:9a:53:5f:1d:84:63:
         1f:1c:ce:45:64:30:b8:cb:56:76:3b:fe:8e:ae:67:a8:fd:6d:
         26:31:77:53:ef:e0:e3:e8:c7:bf:a9:50:a2:e1:d3:51:59:4e:
         b8:32:ff:50:bd:4d:7c:16:eb:80:e7:1c:43:64:ac:d2:8a:f6:
         15:c2:69:4b:31:84:b2:91:c2:cd:e2:f2:b3:ad:3e:e9:9c:65:
         af:51:04:72:53:70:e5:5e:94:13:8e:ea:6c:31:f8:50:47:74:
         d9:90:06:5d:ac:c0:8e:41:dc:e6:21:11:80:80:d8:c7:15:e0:
         d6:6a:55:49:76:89:70:62:4f:57:4d:97:09:e9:c4:8f:14:ce:
         56:6b:ac:9c:2b:40:f0:48:30:4c:e0:39:1b:91:62:15:b9:ba:
         64:dd:90:4c:04:a4:9c:47:c5:50:7c:76:da:21:ca:7e:61:29:
         1b:cc:b6:c8:6e:c3:06:72:f4:13:5f:66:47:b1:a4:1d:1a:d1:
         7a:86:e1:12:98:8b:d4:3c:b1:0e:6a:d8:20:fe:7c:3a:47:17:
         57:62:12:56:22:be:60:41:73:92:c2:32:f9:43:7d:b9:b0:b0:
         67:b5:89:ea:38:31:1e:e0:75:8a:e9:b9:72:7b:79:94:a5:af:
         8d:9d:56:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:12:11 2025 by rpki-client