Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.mft
File:                     909zX9xaW5M28yTDLLpVjrvSjZc.mft (raw, json)
Hash identifier:          Bv6nOOl+8myPBjeGnACyYgCvGbBwYV9FKOAUegkGc0g=
Subject key identifier:   81:8A:75:DC:A8:58:B1:E9:7C:24:B1:99:A2:6B:D5:23:6C:5A:D3:B2
Authority key identifier: F7:4F:73:5F:DC:5A:5B:93:36:F3:24:C3:2C:BA:55:8E:BB:D2:8D:97
Certificate issuer:       /CN=A915123C/serialNumber=F74F735FDC5A5B9336F324C32CBA558EBBD28D97
Certificate serial:       12C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/909zX9xaW5M28yTDLLpVjrvSjZc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.mft
Manifest number:          12C5
Signing time:             Sun 26 Oct 2025 17:19:21 +0000
Manifest this update:     Sun 26 Oct 2025 17:19:20 +0000
Manifest next update:     Sun 02 Nov 2025 17:19:20 +0000
Files and hashes:         1: 909zX9xaW5M28yTDLLpVjrvSjZc.crl (hash: BecLRI2vbczo42dsgh7Ri9DTl1nwrkMkNyEmmA+q1eQ=)
                          2: 5232D4B6926B11F09CB88A3FC4F9AE02.roa (hash: jBTeH0H27v9k59mlKnmetbexdDYe956dNh5Wylij75M=)
                          3: 51C3E830926B11F09CB88A3FC4F9AE02.roa (hash: QvsgBXY2pHOmfBdUrJt5ZO919gY3lcDyrvdiRsNFCPU=)
                          4: 5144F80E926B11F09CB88A3FC4F9AE02.roa (hash: DgEDuUiux8hU4nHush9Glrrai/CzBmzaMoX7rIYUbLM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.crl
                          rsync://rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/909zX9xaW5M28yTDLLpVjrvSjZc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Nov 2025 17:19:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4808 (0x12c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915123C, serialNumber=F74F735FDC5A5B9336F324C32CBA558EBBD28D97
        Validity
            Not Before: Oct 26 17:19:20 2025 GMT
            Not After : Nov  2 17:19:20 2025 GMT
        Subject: CN=68fe5818-387c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d1:4d:7d:10:2f:7b:2b:4f:99:dd:4d:86:cf:
                    3c:ef:92:46:45:04:05:c4:a0:47:53:fe:95:9e:21:
                    8e:5d:60:14:35:6f:86:2b:4b:51:49:c5:de:3b:b8:
                    2f:cf:cc:f3:74:7f:da:04:47:eb:bd:f2:24:e0:b4:
                    80:5e:18:90:0b:26:0c:ba:e3:52:d2:e6:f4:24:9a:
                    f9:f3:5d:e9:db:b6:86:af:1b:31:02:0c:f7:70:9e:
                    11:4d:02:22:f1:c6:01:28:fb:df:ec:c7:19:e5:be:
                    56:09:75:55:f4:41:13:46:92:77:e2:ce:78:3a:21:
                    5a:c7:82:00:c5:bc:af:6a:1c:0c:b6:9f:f8:42:e1:
                    61:fa:29:de:b0:16:19:f1:42:09:f9:f7:07:7f:2a:
                    69:c8:14:ee:08:62:41:6a:f2:12:f9:28:fd:61:f6:
                    2d:b3:94:54:26:55:09:f0:6f:97:e4:c7:ea:cd:9b:
                    11:30:e1:9f:af:f1:5d:37:40:ee:85:45:32:a2:d5:
                    5d:50:92:49:e2:b7:af:b2:e2:6d:09:fc:60:fb:06:
                    63:d8:f3:b3:1d:07:22:ea:52:a5:98:0d:b5:cc:e7:
                    26:b9:2e:a5:6b:42:89:00:eb:8c:a2:73:57:2a:bf:
                    2d:4b:76:78:cb:2a:06:ac:02:29:a8:54:d1:d4:f7:
                    4f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:8A:75:DC:A8:58:B1:E9:7C:24:B1:99:A2:6B:D5:23:6C:5A:D3:B2
            X509v3 Authority Key Identifier:
                keyid:F7:4F:73:5F:DC:5A:5B:93:36:F3:24:C3:2C:BA:55:8E:BB:D2:8D:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/909zX9xaW5M28yTDLLpVjrvSjZc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:9e:09:6a:1e:f3:54:f5:23:0e:9d:e7:ee:dc:ee:90:55:98:
         14:f5:48:05:70:fb:00:e9:0b:b1:16:c6:65:21:0e:73:5d:67:
         f4:cc:1c:3f:c1:3e:d1:01:e7:52:11:14:c3:5f:95:bb:e0:b7:
         c4:6a:41:00:ee:dd:57:e9:4f:03:ad:62:b1:b7:c7:0e:2c:ef:
         80:bb:59:e8:40:71:2e:b5:2d:31:9d:ef:ce:bb:2d:d6:8e:4c:
         2e:f2:5c:35:64:da:d9:2e:8e:d3:5b:8b:0f:a8:24:18:ba:36:
         bc:5a:8d:a5:13:ab:ee:f2:fa:e2:3a:74:7c:29:6a:a5:f9:db:
         dd:da:b4:51:42:c6:88:fb:d2:9a:3b:63:44:ff:dc:fa:00:be:
         e8:42:a7:6a:c6:2a:80:a0:8d:3d:65:70:8c:6a:11:d7:82:5a:
         b9:ec:12:d8:d1:22:b7:38:b4:15:d9:9f:34:09:c8:5b:c7:95:
         74:1d:e1:e7:35:f7:17:be:36:0b:46:52:e4:39:5e:86:04:0a:
         05:94:2a:ae:c9:d7:2d:77:63:e6:35:e2:5d:93:37:70:33:16:
         14:ae:61:c7:fe:66:27:b8:d7:35:d3:c1:79:e3:f2:5c:d0:81:
         4d:11:13:20:23:21:16:bc:1b:5d:6f:86:42:12:61:49:b1:54:
         42:c0:ed:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 02:24:43 2025 by rpki-client