Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft
File:                     1j3oKnWfllf48HOyUSUarme6S6Y.mft (raw, json)
Hash identifier:          0JcJwm0PwYqHP3org93szrPT8F+lujf/E3q1NPYnM/c=
Subject key identifier:   3B:63:A4:C0:17:C1:E0:86:8F:2F:83:94:BA:CA:5D:67:A4:6C:00:36
Authority key identifier: D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6
Certificate issuer:       /CN=A91262CA/serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
Certificate serial:       04BC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft
Manifest number:          0453
Signing time:             Thu 23 Oct 2025 01:39:52 +0000
Manifest this update:     Thu 23 Oct 2025 01:39:52 +0000
Manifest next update:     Thu 30 Oct 2025 01:39:51 +0000
Files and hashes:         1: 1j3oKnWfllf48HOyUSUarme6S6Y.crl (hash: PsfFarAzz8RxFULDmccorsjm+XLHQZMqqO3MOdQOheg=)
                          2: ABE3468CBB5611EE936F4785C4F9AE02.roa (hash: kNSRGelQeR661p/seibqDgqqXH+dLwJkNc/ESxx+yZ8=)
                          3: A15115E6DF3E11EC83CCFE1EC4F9AE02.roa (hash: abj/lLGFaHcnznksM80abqsRFzwo6V6mDWUcL5ZKF2Y=)
                          4: 9FEE9516DF3E11EC83CCFE1EC4F9AE02.roa (hash: xXSyKHJ3NBPSi2dne5M9cyAkwhzfAyBhVMB+xnu2wEw=)
                          5: A09F8E52DF3E11EC83CCFE1EC4F9AE02.roa (hash: BGVu1jIpiElRBOykLyn1hbruAkUCwbhE94Wkt2miz84=)
                          6: BA39BBAE524E11F099DE067AC4F9AE02.roa (hash: +3Z3o9JekC+LGEyEOl3WT5vRlSduXk5lWhpRA5yPV1E=)
                          7: F563D916248D11EF93237035C4F9AE02.roa (hash: VCFvtvA9YE6AwHB0R1pkgWrJ/+HVkrKuimdliRgUT8Y=)
                          8: 1DFB74B4693511F098DA961FC4F9AE02.roa (hash: P1znYhl/eQ/i09BqcFgYUncqu9PsKuk8MGDDrGmikWA=)
                          9: 9DEFF2FADF3E11EC83CCFE1EC4F9AE02.roa (hash: sHzhZYgKFDSrJep2AA9b5WnbHJBUPXm7OpsiWNM3z8U=)
                          10: B5036DB4694211F08D05BF0AC4F9AE02.roa (hash: Wpf+grxS494Kl48brRQfPg+4hbzaXuWnS4JVs5+US7M=)
                          11: 86C8EBA2B12A11EF985A2D32C4F9AE02.roa (hash: BId9IUS1+4nSQcy9VYkqTv0EYMTtK2hCnt14fFjrgA0=)
                          12: 9F598EEEDF3E11EC83CCFE1EC4F9AE02.roa (hash: +LYfza0pA5mBToccYjjpbZ76FKkIwdZ+QclyNNezPE8=)
                          13: 9D13F282DF3E11EC83CCFE1EC4F9AE02.roa (hash: ziC/UsLbhf5/G3tuI/q+osXhJiEj6DXrnZAE7DlftT0=)
                          14: 56EC4CB4927911EFABEC2D46C4F9AE02.roa (hash: 45qX+XGqxCtDzsxlyTpzd4A9iCQp1Kx2SECxGbiiC1I=)
                          15: A1FED136DF3E11EC83CCFE1EC4F9AE02.roa (hash: JU4szI7h2fyO1JL8D+jKobys4IJjxvAjtFvc+97hytM=)
                          16: 05163DEADD8711EC9BF56E5BC4F9AE02.roa (hash: 04IkSuQjN5iNoBHNEnhW0185UxD8n8l9rsTvIawl80g=)
                          17: 9EB0F9FADF3E11EC83CCFE1EC4F9AE02.roa (hash: SFtqEei/cNuFxoRwcmV0ulAeh3eMTUDtIcuJGqQ9i50=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Oct 2025 01:39:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1212 (0x4bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA, serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
        Validity
            Not Before: Oct 23 01:39:52 2025 GMT
            Not After : Oct 30 01:39:51 2025 GMT
        Subject: CN=68f98768-27bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:04:2f:9c:6e:94:f4:bc:4f:e5:af:22:7f:b2:
                    bd:ae:ff:49:0b:f4:c7:4c:3f:cd:89:fd:4d:30:aa:
                    c0:8d:58:11:42:5c:09:3c:f7:58:f4:b0:63:b2:80:
                    5e:d6:c7:2e:05:26:ad:b2:21:5b:4d:7b:ae:78:e4:
                    c1:89:8c:5d:58:a2:2c:dd:45:96:3b:7b:5a:21:b5:
                    ca:08:39:34:e8:b4:fd:4f:0c:2c:b7:76:8b:da:ec:
                    1a:88:a9:cb:5c:71:f5:7e:c8:52:6b:ee:29:80:c4:
                    e7:a0:f0:2f:75:3b:5c:eb:f6:7b:07:20:6f:d2:82:
                    6c:7d:49:ec:06:9f:89:4f:5b:9a:60:82:68:df:5f:
                    36:00:01:9d:c5:ba:35:27:71:0b:4d:51:00:c4:96:
                    29:36:cf:bb:bb:af:bf:78:f8:8a:6b:c9:fb:bc:27:
                    29:0d:b6:a4:d7:f2:2f:e7:a3:8c:6f:ae:26:e4:d3:
                    ee:6a:e9:0d:81:a6:3d:0f:ec:4b:83:e8:38:44:eb:
                    f8:f2:05:8d:a8:08:b1:c5:fd:98:f6:4b:3b:eb:8c:
                    ae:a3:9d:65:26:9e:38:81:95:59:70:95:42:74:82:
                    f0:78:f5:7d:8e:9f:9b:59:02:c4:fd:21:2c:e0:5e:
                    1c:c0:14:f4:f5:2c:2d:0a:74:32:57:a7:51:dc:8e:
                    2b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:63:A4:C0:17:C1:E0:86:8F:2F:83:94:BA:CA:5D:67:A4:6C:00:36
            X509v3 Authority Key Identifier:
                keyid:D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:e3:e0:2f:5a:b7:e8:4d:34:0b:b8:50:7d:de:f7:e5:2f:1f:
         63:83:20:b7:c4:0a:eb:a8:7c:7a:d6:57:49:45:6f:16:cb:41:
         64:d3:56:fc:70:72:0f:4b:03:d0:42:b5:32:68:be:59:0b:b1:
         57:92:d3:c1:4d:d4:5c:db:bf:a3:1b:b0:23:ef:18:6e:fc:4d:
         9d:2c:c2:d5:76:2d:37:55:21:fd:b0:56:36:2e:b1:b3:7a:08:
         c9:36:f0:00:2b:a8:28:7a:ee:f6:43:8d:b4:12:94:dd:b9:57:
         0d:b2:51:70:21:32:4e:57:ec:90:42:ac:24:8f:61:c5:08:43:
         6a:89:7c:34:d8:65:fa:a2:bc:0e:95:19:ec:6e:7b:38:fb:d5:
         5b:62:94:58:61:37:2f:cc:99:96:c8:f5:7e:13:5b:cc:f8:9a:
         03:4d:ad:c4:1e:be:40:92:49:32:37:df:10:b4:44:89:96:d2:
         30:42:c4:b1:34:de:81:14:21:4f:1c:83:bc:ee:a5:5a:5e:78:
         c6:54:37:f9:ab:16:ad:e2:40:cf:a6:d2:2a:ca:4f:63:19:e3:
         0b:b7:62:c8:d4:cb:48:87:42:de:cc:e6:93:cf:48:6d:10:00:
         8b:be:ed:5e:ba:67:c0:1c:b9:19:79:57:20:c1:e4:b6:6e:85:
         3b:21:e4:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 06:43:35 2025 by rpki-client