Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.mft
File:                     dx0jxd8ac3HdkvAhBv7lnFunwEE.mft (raw, json)
Hash identifier:          bGQ40wOmlslfIkuQdbLrUoVb+gFWdxoxVK5+f4Mt6cA=
Subject key identifier:   C9:AF:A4:3E:E4:DA:D5:1A:9E:AB:C4:44:78:15:50:D3:1B:9A:F7:14
Authority key identifier: 77:1D:23:C5:DF:1A:73:71:DD:92:F0:21:06:FE:E5:9C:5B:A7:C0:41
Certificate issuer:       /CN=A911898E/serialNumber=771D23C5DF1A7371DD92F02106FEE59C5BA7C041
Certificate serial:       0191
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dx0jxd8ac3HdkvAhBv7lnFunwEE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.mft
Manifest number:          018E
Signing time:             Wed 17 Sep 2025 04:01:12 +0000
Manifest this update:     Wed 17 Sep 2025 04:01:11 +0000
Manifest next update:     Wed 24 Sep 2025 04:01:11 +0000
Files and hashes:         1: dx0jxd8ac3HdkvAhBv7lnFunwEE.crl (hash: +bmcoEZ4pZwXejqDLiMRYvnPY3OSeabuEN/Ddg/pzuU=)
                          2: 671E96C631D811EE8F448240C4F9AE02.roa (hash: 6LgZz9VjDAr6MMe5pXsyjBo64OXT91fOAbUroJrtOs4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.crl
                          rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dx0jxd8ac3HdkvAhBv7lnFunwEE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Sep 2025 04:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 401 (0x191)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911898E, serialNumber=771D23C5DF1A7371DD92F02106FEE59C5BA7C041
        Validity
            Not Before: Sep 17 04:01:11 2025 GMT
            Not After : Sep 24 04:01:11 2025 GMT
        Subject: CN=68ca3288-83ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:84:cf:8c:cf:f2:18:3f:22:a2:96:90:cb:24:
                    7e:cf:4a:96:50:7b:47:39:bd:50:8a:ec:3c:60:c6:
                    2b:44:8c:43:76:d0:90:c7:29:08:dc:d1:f6:27:31:
                    5a:fb:e9:a9:46:14:3a:3e:3c:05:6c:e3:f7:b9:ba:
                    51:e0:27:bf:fa:fc:59:ae:66:71:46:08:9d:3c:56:
                    4b:11:e0:76:ad:a7:f0:71:8b:b2:a0:29:36:a1:63:
                    58:73:b9:9e:13:d8:b7:76:47:ec:fa:ae:df:ac:6a:
                    56:fe:9d:f7:c0:90:82:17:3c:41:06:df:a7:b3:cd:
                    8d:e9:41:12:90:25:69:b9:58:a2:f8:2e:90:a1:07:
                    c2:66:f7:3d:87:b1:2f:e0:04:7e:e3:dc:a3:c1:3b:
                    a9:98:78:6e:6d:e8:79:2d:83:78:da:bb:52:f6:74:
                    3d:bd:2e:91:33:83:7a:0c:4f:17:74:7a:a0:12:e3:
                    f5:93:c1:c2:10:30:9a:89:80:79:bd:cb:36:17:66:
                    58:4d:ae:9c:49:54:bc:29:2d:a8:a1:b4:9d:bc:4c:
                    31:12:df:7f:f2:60:b9:86:fd:94:bc:56:50:8b:b9:
                    cc:af:74:aa:a3:4e:98:45:af:7f:fc:6c:e4:66:0f:
                    8b:da:0d:01:2d:5e:53:6f:9b:b3:f5:a3:b1:0d:44:
                    05:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:AF:A4:3E:E4:DA:D5:1A:9E:AB:C4:44:78:15:50:D3:1B:9A:F7:14
            X509v3 Authority Key Identifier:
                keyid:77:1D:23:C5:DF:1A:73:71:DD:92:F0:21:06:FE:E5:9C:5B:A7:C0:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dx0jxd8ac3HdkvAhBv7lnFunwEE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:1c:66:14:a7:41:78:5e:9c:18:d2:3d:0f:4a:3f:ce:9a:d3:
         af:5f:d7:98:da:d6:fd:57:07:56:93:a9:8e:cb:c7:14:e0:fb:
         62:73:14:a7:16:25:1b:42:3c:9d:67:99:f6:5c:3d:ca:b6:e4:
         08:89:31:e5:1d:0b:bd:e1:c1:de:52:09:de:8c:45:88:d6:76:
         0a:9e:ec:53:45:e9:6e:bc:20:a0:0e:13:62:99:c5:0f:f2:4a:
         15:84:e4:74:b2:0a:88:5f:15:2b:db:b7:43:c2:27:7d:06:bf:
         a8:84:a4:4a:e0:ea:de:52:c0:f6:1e:07:d1:98:7e:ef:d4:cd:
         8b:98:ba:29:87:05:12:e5:90:10:25:8a:55:1b:f2:37:a3:28:
         bd:f8:ad:47:af:dd:a1:f6:62:22:24:9e:a7:34:14:15:7e:23:
         dc:c5:69:fc:a3:5f:72:39:df:0b:04:6a:51:43:b0:a2:b1:5f:
         d5:56:38:a8:ca:c1:3f:4b:94:65:90:3d:cb:d6:8a:08:fd:f5:
         d2:87:46:d5:b9:40:6a:66:e0:4c:31:6c:85:35:2c:8b:ef:88:
         64:8d:2f:d9:d6:cf:ae:74:6e:e9:a4:00:6d:0d:73:db:f0:28:
         fa:5e:36:44:50:d4:06:b4:42:17:06:ae:89:75:67:6c:ed:06:
         b6:8f:7d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 02:14:46 2025 by rpki-client