Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F912/3D8F0646FA1911EAB1704580C4F9AE02/etynHr4-GRMw4DyU0rT0_4mIRcU.mft
File:                     etynHr4-GRMw4DyU0rT0_4mIRcU.mft (raw, json)
Hash identifier:          4wFLrRD2PgO0zblkrFmljv1tFJTAhIw4I5Fao4HP2P4=
Subject key identifier:   F9:26:28:EF:50:F9:A0:05:39:6B:90:7E:BE:D4:BD:0C:81:52:0B:49
Authority key identifier: 7A:DC:A7:1E:BE:3E:19:13:30:E0:3C:94:D2:B4:F4:FF:89:88:45:C5
Certificate issuer:       /CN=A915F912/serialNumber=7ADCA71EBE3E191330E03C94D2B4F4FF898845C5
Certificate serial:       081A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etynHr4-GRMw4DyU0rT0_4mIRcU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F912/3D8F0646FA1911EAB1704580C4F9AE02/etynHr4-GRMw4DyU0rT0_4mIRcU.mft
Manifest number:          0808
Signing time:             Wed 22 Oct 2025 21:44:43 +0000
Manifest this update:     Wed 22 Oct 2025 21:44:42 +0000
Manifest next update:     Wed 29 Oct 2025 21:44:42 +0000
Files and hashes:         1: etynHr4-GRMw4DyU0rT0_4mIRcU.crl (hash: Oehd8qO5olRsXPDQ+InqVPnLyFuTGHXXVUTCUKQSwWk=)
                          2: 86CDBD00FEB711EABA9B645CC4F9AE02.roa (hash: Y424A3Vvh/BUekHBsTE/Lv5kKrOjIed6mILejiBeLbU=)
                          3: B7DF4CB0143711ECA137850DC4F9AE02.roa (hash: laTjFrVubY9e/HqXOTVMQUClw9bKB+tbq9rC5b8xxBQ=)
                          4: 1296A2EEFA1B11EA94AA6082C4F9AE02.roa (hash: QvC0naa2hsBftkpLoa3+nw3P5KmAxn2g2Jy737jOnbM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F912/3D8F0646FA1911EAB1704580C4F9AE02/etynHr4-GRMw4DyU0rT0_4mIRcU.crl
                          rsync://rpki.apnic.net/member_repository/A915F912/3D8F0646FA1911EAB1704580C4F9AE02/etynHr4-GRMw4DyU0rT0_4mIRcU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etynHr4-GRMw4DyU0rT0_4mIRcU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Oct 2025 21:44:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2074 (0x81a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F912, serialNumber=7ADCA71EBE3E191330E03C94D2B4F4FF898845C5
        Validity
            Not Before: Oct 22 21:44:42 2025 GMT
            Not After : Oct 29 21:44:42 2025 GMT
        Subject: CN=68f9504a-aa36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0e:1a:b1:e3:21:a4:97:70:06:cf:66:c8:c3:
                    28:89:8b:d4:ae:59:3c:43:ac:54:b8:72:7b:3e:88:
                    32:26:f1:d6:27:4a:de:a0:de:27:0d:62:e4:43:d9:
                    12:6c:73:6a:47:8d:78:b1:5e:b4:65:f7:09:fe:e8:
                    c6:23:ee:7a:99:37:04:d9:fd:d8:22:38:de:01:0b:
                    8d:d9:8a:e0:27:1f:18:4b:d7:d7:af:9e:0f:81:66:
                    6b:f3:25:7a:0b:89:72:a6:a8:31:df:ea:82:18:34:
                    f9:7a:f8:52:c1:df:b8:a9:7d:d2:55:5f:33:d9:61:
                    24:1f:04:df:b5:06:4b:fa:73:27:f1:7a:f0:a8:44:
                    38:d3:62:d6:d8:3f:0a:4a:a1:97:11:55:70:77:73:
                    2c:63:0a:c7:20:e1:f0:b9:2c:81:d0:2c:55:b4:3d:
                    35:00:0f:2d:39:38:d3:3b:df:b6:19:fe:65:1b:da:
                    77:be:c5:01:da:1a:1a:41:14:76:87:a5:2f:21:76:
                    af:1f:09:55:fb:2d:d3:6c:cd:5c:87:95:34:70:c9:
                    5a:1a:07:56:e5:94:ad:9f:97:44:6a:f1:41:9e:96:
                    b1:ea:b1:0b:11:f0:9d:83:83:b0:5d:10:3c:82:a5:
                    0c:0c:ac:70:63:c1:78:3f:42:15:69:8d:24:d4:16:
                    ac:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:26:28:EF:50:F9:A0:05:39:6B:90:7E:BE:D4:BD:0C:81:52:0B:49
            X509v3 Authority Key Identifier:
                keyid:7A:DC:A7:1E:BE:3E:19:13:30:E0:3C:94:D2:B4:F4:FF:89:88:45:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F912/3D8F0646FA1911EAB1704580C4F9AE02/etynHr4-GRMw4DyU0rT0_4mIRcU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etynHr4-GRMw4DyU0rT0_4mIRcU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F912/3D8F0646FA1911EAB1704580C4F9AE02/etynHr4-GRMw4DyU0rT0_4mIRcU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:29:22:9f:15:06:32:a5:c4:b8:dc:e1:c3:9e:82:a9:9d:ed:
         f0:07:6d:07:0d:74:48:97:c5:9c:88:2d:2c:a8:c0:22:36:ea:
         8d:12:03:11:1d:f9:6d:50:7b:83:bb:ca:f5:ae:d6:c3:3a:c6:
         4e:70:22:8d:2c:4f:ed:7e:60:ea:9c:0b:97:f9:ee:5e:24:da:
         d9:fc:5d:42:7e:09:2c:fe:7e:90:d1:12:aa:92:2e:a5:8a:e0:
         b8:39:b7:78:a8:b1:40:3f:3f:f9:99:1b:42:a1:6e:98:46:44:
         4f:c0:82:bd:14:48:97:c0:57:f4:0a:1f:a7:cf:6f:cb:0e:da:
         fe:2d:03:d9:52:0e:0b:3d:3e:38:62:e6:e8:95:77:d9:4b:d8:
         be:81:40:eb:83:7d:1a:f2:68:2f:f3:a9:30:43:f8:c1:16:82:
         74:df:25:81:2e:87:8d:77:c6:b6:5c:84:87:b4:96:5f:05:65:
         d1:e2:96:08:b0:d5:86:91:ed:42:31:42:c0:bd:56:2f:05:c8:
         c5:d8:31:ee:7f:04:83:7c:c3:fd:92:b3:5b:44:cc:1a:73:92:
         d5:d1:0c:8c:26:6f:02:be:7e:06:88:5b:bf:fb:45:be:f8:4a:
         c8:a8:9b:4b:1b:e1:6b:31:40:5e:25:2e:af:66:7f:63:02:a4:
         8d:d5:86:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 20:32:25 2025 by rpki-client