Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/f30yDyoH5DPdvf4oV_XTGTVFF7k.mft
File:                     f30yDyoH5DPdvf4oV_XTGTVFF7k.mft (raw, json)
Hash identifier:          y3QhNRtUTeDlM7jrpVTmaNodNL9eAlpTgV8rhf0v9RU=
Subject key identifier:   D0:F1:3A:58:27:4A:53:6C:C8:82:AC:14:FC:D2:E5:86:F8:AB:C6:9D
Authority key identifier: 7F:7D:32:0F:2A:07:E4:33:DD:BD:FE:28:57:F5:D3:19:35:45:17:B9
Certificate issuer:       /CN=A914877B/serialNumber=7F7D320F2A07E433DDBDFE2857F5D319354517B9
Certificate serial:       0C22
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f30yDyoH5DPdvf4oV_XTGTVFF7k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/f30yDyoH5DPdvf4oV_XTGTVFF7k.mft
Manifest number:          0C1B
Signing time:             Sun 02 Nov 2025 18:42:26 +0000
Manifest this update:     Sun 02 Nov 2025 18:42:26 +0000
Manifest next update:     Sun 09 Nov 2025 18:42:25 +0000
Files and hashes:         1: f30yDyoH5DPdvf4oV_XTGTVFF7k.crl (hash: R0dbd9Ou7KU0lslO7cdWOY5q/caLE8ZG48UV9cFXxLo=)
                          2: 800676321BD311EAA341A62DC4F9AE02.roa (hash: RHZCYYPvQQbME4QEcXK5NVornLFSgAMnD5MRoiwlBuM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/f30yDyoH5DPdvf4oV_XTGTVFF7k.crl
                          rsync://rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/f30yDyoH5DPdvf4oV_XTGTVFF7k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f30yDyoH5DPdvf4oV_XTGTVFF7k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 18:42:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3106 (0xc22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914877B, serialNumber=7F7D320F2A07E433DDBDFE2857F5D319354517B9
        Validity
            Not Before: Nov  2 18:42:26 2025 GMT
            Not After : Nov  9 18:42:25 2025 GMT
        Subject: CN=6907a612-2e05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:86:7b:14:e4:2c:50:94:f2:00:28:5d:e8:f9:
                    bd:48:bc:81:06:cc:9d:24:21:1e:83:49:76:22:58:
                    5e:fd:2c:5d:8f:fd:45:fa:4e:1d:61:4c:73:14:77:
                    16:1c:3b:03:03:4d:4b:04:34:c6:7c:e8:0a:61:4b:
                    f2:29:56:24:d0:a9:1f:06:78:a2:7d:00:72:84:88:
                    e1:96:24:b0:ed:78:e7:d3:d9:06:71:64:94:ac:3a:
                    bc:4f:3d:9a:0d:97:90:aa:6a:63:47:a0:21:62:b5:
                    da:08:ff:48:2f:48:12:41:a0:39:52:3a:df:15:a9:
                    d3:1e:34:3a:84:28:b6:0c:0a:ed:99:71:d7:08:43:
                    f1:64:d3:03:16:79:27:61:de:32:21:ae:5b:8b:26:
                    bc:9d:f3:c8:13:36:ca:d8:f5:7b:15:19:22:a6:0d:
                    e5:c0:f1:50:f7:d7:73:66:fe:7f:54:fe:84:94:a4:
                    00:65:ed:d1:c5:8e:33:5c:a3:1a:bc:1f:74:ad:9d:
                    c9:c3:02:b1:9f:4b:d2:f8:27:a0:d8:46:79:23:5c:
                    5c:d2:3c:b7:17:fa:e3:82:1b:41:f9:a0:6a:7e:5b:
                    5f:b9:15:cb:44:87:4e:c7:da:a8:30:6e:e9:6e:a8:
                    38:ae:3f:90:10:16:08:26:29:08:43:f9:29:da:ce:
                    49:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:F1:3A:58:27:4A:53:6C:C8:82:AC:14:FC:D2:E5:86:F8:AB:C6:9D
            X509v3 Authority Key Identifier:
                keyid:7F:7D:32:0F:2A:07:E4:33:DD:BD:FE:28:57:F5:D3:19:35:45:17:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/f30yDyoH5DPdvf4oV_XTGTVFF7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f30yDyoH5DPdvf4oV_XTGTVFF7k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/f30yDyoH5DPdvf4oV_XTGTVFF7k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:1a:fa:b6:41:14:66:f2:b1:1a:e0:f9:d3:e9:4e:7a:75:b6:
         3f:2e:96:ec:9c:57:33:e4:a9:0f:d3:39:0b:e0:1c:21:02:76:
         ab:28:39:ef:a3:c6:d9:fc:51:cf:d5:f3:2a:61:9a:90:d5:40:
         1c:f1:51:64:15:93:bc:35:a7:53:e5:09:b9:81:b8:99:a6:c9:
         59:53:2c:fe:7f:e2:3a:40:eb:bf:54:3b:6a:95:2b:60:94:8e:
         c3:5e:f2:5b:45:dd:a1:5c:4f:c9:bc:54:87:42:30:4b:ce:86:
         dd:1e:86:2e:c3:07:81:32:fd:83:4c:62:9d:b7:94:cb:61:29:
         1a:3e:e6:e7:eb:65:78:b1:05:bd:8a:c3:f4:b7:b0:f8:fe:dc:
         6f:12:32:25:da:bb:79:e1:0c:ab:ef:60:d9:b1:4e:c1:20:d9:
         8e:e0:2a:4a:a7:dd:4d:85:d4:5a:cb:c9:71:d0:cd:4e:e2:ea:
         14:63:f2:9d:c9:86:19:be:88:c5:a7:a7:af:5a:02:21:2f:37:
         db:9c:23:a4:ed:fa:41:c4:f5:a1:ad:de:c7:b1:7b:9c:5d:9d:
         bb:18:18:83:60:bd:e6:8c:cc:26:1d:ed:12:a0:22:41:78:57:
         6f:65:46:f4:b5:be:84:dc:59:32:ba:a3:34:2e:f5:35:40:2f:
         61:30:57:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 01:05:18 2025 by rpki-client