Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915DAF1/0B2B90A42D7511EB936E3458C4F9AE02/u59Cz844jtxLKepl3rYWKyVtIQI.mft
File:                     u59Cz844jtxLKepl3rYWKyVtIQI.mft (raw, json)
Hash identifier:          PuQzdsgpNdfV1BQEPkBDm+QIt9GLG1jR+VNJd/Cc/7A=
Subject key identifier:   A7:22:EC:64:31:B2:E4:D0:5F:52:E0:19:32:27:23:7F:8C:89:40:B1
Authority key identifier: BB:9F:42:CF:CE:38:8E:DC:4B:29:EA:65:DE:B6:16:2B:25:6D:21:02
Certificate issuer:       /CN=A915DAF1/serialNumber=BB9F42CFCE388EDC4B29EA65DEB6162B256D2102
Certificate serial:       0793
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u59Cz844jtxLKepl3rYWKyVtIQI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915DAF1/0B2B90A42D7511EB936E3458C4F9AE02/u59Cz844jtxLKepl3rYWKyVtIQI.mft
Manifest number:          0789
Signing time:             Sat 18 Oct 2025 22:51:55 +0000
Manifest this update:     Sat 18 Oct 2025 22:51:54 +0000
Manifest next update:     Sat 25 Oct 2025 22:51:54 +0000
Files and hashes:         1: u59Cz844jtxLKepl3rYWKyVtIQI.crl (hash: bd7OJ3EYk1GlJXEmQLn0IpcEk6loLK/LSQq1p2iHfUM=)
                          2: 84F992E67BB911EFA4CC334CC4F9AE02.roa (hash: YklgGoKPIC5Pmt2tOtwd4ysgwGERG7auCGi5OoDyTlg=)
                          3: 5A9BEA702D7611EB9827C368C4F9AE02.roa (hash: ebO9+Vms5oQoG4HlIUTD5BkVkXKCz/huR2BUpn+lQwI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915DAF1/0B2B90A42D7511EB936E3458C4F9AE02/u59Cz844jtxLKepl3rYWKyVtIQI.crl
                          rsync://rpki.apnic.net/member_repository/A915DAF1/0B2B90A42D7511EB936E3458C4F9AE02/u59Cz844jtxLKepl3rYWKyVtIQI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u59Cz844jtxLKepl3rYWKyVtIQI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 22:51:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1939 (0x793)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915DAF1, serialNumber=BB9F42CFCE388EDC4B29EA65DEB6162B256D2102
        Validity
            Not Before: Oct 18 22:51:54 2025 GMT
            Not After : Oct 25 22:51:54 2025 GMT
        Subject: CN=68f41a0a-7abd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:38:2c:b6:f9:07:33:0a:d3:97:58:e3:9e:5f:
                    ae:48:0b:d2:9e:1f:82:11:8b:ee:a0:4b:12:6b:2d:
                    04:83:1a:1c:ce:af:3b:38:f7:47:a7:f3:b6:b9:5a:
                    9d:73:5b:6d:e9:cf:53:e3:eb:c6:15:2c:f1:4c:16:
                    7d:4e:19:2a:4b:b7:4c:ff:d7:38:fc:13:d7:84:5b:
                    73:38:bd:62:9c:ca:51:ed:35:98:94:ce:c7:3e:35:
                    3f:11:23:c5:26:ca:e1:2a:ed:31:1a:30:86:65:c3:
                    b3:38:06:c6:0e:84:18:07:c6:b7:01:92:18:6d:bf:
                    5f:8a:3d:61:4a:07:ab:3a:1e:33:a9:4d:dc:e7:14:
                    d4:3e:6d:0f:88:5e:be:66:78:23:d4:b9:00:11:9a:
                    60:62:49:49:44:40:d9:11:21:95:15:80:7c:df:cf:
                    e8:05:17:c7:53:96:ab:e7:c2:eb:44:ef:e7:69:31:
                    0c:49:18:c7:13:4a:83:f0:95:bf:e5:b7:2c:61:5b:
                    0c:19:57:ea:f9:ab:a1:06:99:8d:ac:58:89:ad:9a:
                    b0:f8:24:e0:6f:5c:67:43:59:11:b6:f4:b7:bc:0b:
                    62:25:f3:ad:28:d2:f6:c9:2b:da:ff:29:02:14:44:
                    0f:b8:26:f4:98:dd:66:00:79:8e:83:44:1f:5a:51:
                    01:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:22:EC:64:31:B2:E4:D0:5F:52:E0:19:32:27:23:7F:8C:89:40:B1
            X509v3 Authority Key Identifier:
                keyid:BB:9F:42:CF:CE:38:8E:DC:4B:29:EA:65:DE:B6:16:2B:25:6D:21:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915DAF1/0B2B90A42D7511EB936E3458C4F9AE02/u59Cz844jtxLKepl3rYWKyVtIQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u59Cz844jtxLKepl3rYWKyVtIQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DAF1/0B2B90A42D7511EB936E3458C4F9AE02/u59Cz844jtxLKepl3rYWKyVtIQI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:52:de:6c:e1:5f:3a:81:c4:68:b6:06:71:de:8a:8f:1c:63:
         88:c2:dd:f7:dc:71:70:79:df:fa:a3:dd:8e:d2:2a:ad:22:19:
         c2:c4:52:9f:6a:a1:fd:ad:3e:af:57:5c:cf:ae:f5:61:c9:db:
         a0:f5:9c:1a:d5:98:0a:bd:81:d1:15:fb:af:3e:11:5f:94:a5:
         97:c2:cb:32:a6:24:51:5b:ff:12:29:d2:30:b7:db:3a:48:c5:
         79:d3:56:46:40:a5:48:bb:31:7b:d6:ab:7b:4e:22:e4:d0:b7:
         26:43:5a:85:8c:98:d1:ef:48:93:bf:80:a2:f7:36:60:c2:41:
         19:83:ca:96:f5:84:a4:c3:2e:66:5a:06:83:36:a2:8b:1b:4c:
         6e:55:9e:fb:a9:9a:b1:13:2d:b1:c1:ab:b8:5e:60:67:c3:04:
         f5:25:eb:48:93:66:93:e9:ec:b4:43:bd:9f:fa:71:09:4c:b0:
         0a:16:1e:22:12:6d:62:ab:71:8d:16:c0:47:f0:de:33:cd:0f:
         f4:32:7b:f7:3e:bd:95:0a:6c:0e:ec:db:b2:eb:fd:29:36:4e:
         dc:3d:b3:03:3b:12:6d:65:4f:43:19:3e:03:dc:68:ec:ab:f2:
         9e:ec:a1:d3:8c:eb:e1:ad:7e:43:60:bb:8d:db:d8:73:a0:26:
         e8:eb:da:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:08:44 2025 by rpki-client