Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/aQwWqX7kC4mmTLMfYqmaVjAILcM.mft
File:                     aQwWqX7kC4mmTLMfYqmaVjAILcM.mft (raw, json)
Hash identifier:          RefeG1OXk1WGehE3WaLx5I+6JQdmghvVZRzYQ98bDj8=
Subject key identifier:   64:B0:18:0C:5E:9F:FC:C2:CE:F6:24:55:97:98:0A:90:E2:27:6F:66
Authority key identifier: 69:0C:16:A9:7E:E4:0B:89:A6:4C:B3:1F:62:A9:9A:56:30:08:2D:C3
Certificate issuer:       /CN=A916763E/serialNumber=690C16A97EE40B89A64CB31F62A99A5630082DC3
Certificate serial:       68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQwWqX7kC4mmTLMfYqmaVjAILcM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/aQwWqX7kC4mmTLMfYqmaVjAILcM.mft
Manifest number:          66
Signing time:             Wed 17 Sep 2025 07:43:31 +0000
Manifest this update:     Wed 17 Sep 2025 07:43:30 +0000
Manifest next update:     Wed 24 Sep 2025 07:43:30 +0000
Files and hashes:         1: aQwWqX7kC4mmTLMfYqmaVjAILcM.crl (hash: s5+o//RUJDR/gZsV2faHlb5641bGbR11wFeqfSYsSJg=)
                          2: 8D2816C4F90211EF99692E40C4F9AE02.roa (hash: +NqGztaEhZpUZkM4BrFHd/HmjU1Jxg/vDaPsvxdwGGQ=)
                          3: 8DD9218AF90211EF99692E40C4F9AE02.roa (hash: 3CWgpxVwX8rXbxNTGaUyko/Ji2jUUIx/aqwN4MmZ++Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/aQwWqX7kC4mmTLMfYqmaVjAILcM.crl
                          rsync://rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/aQwWqX7kC4mmTLMfYqmaVjAILcM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQwWqX7kC4mmTLMfYqmaVjAILcM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Sep 2025 07:43:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104 (0x68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916763E, serialNumber=690C16A97EE40B89A64CB31F62A99A5630082DC3
        Validity
            Not Before: Sep 17 07:43:30 2025 GMT
            Not After : Sep 24 07:43:30 2025 GMT
        Subject: CN=68ca66a2-40f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1a:19:c3:85:8e:48:ff:a1:c6:d2:35:b6:5b:
                    a4:8b:b8:94:19:3c:f1:61:a4:46:62:79:9e:32:c8:
                    f2:45:92:27:0b:9c:6d:0e:9e:9b:f1:a0:be:e0:55:
                    8e:73:ef:81:7f:69:a3:d6:d8:9f:2d:5d:9e:8c:71:
                    68:4b:af:73:22:db:24:66:49:8e:69:a4:a5:4a:d6:
                    9f:08:9f:ad:c2:23:81:61:8f:a1:5a:d5:f5:e5:8c:
                    06:c9:5e:ef:cd:f2:e2:19:d0:1f:e5:10:03:ff:ae:
                    c5:df:2d:bc:e6:c8:58:91:83:91:97:1d:53:7b:eb:
                    26:6e:c1:36:b7:c0:e2:5d:ef:85:bd:0a:04:11:f4:
                    4d:7d:42:89:2c:d5:84:a5:90:2a:0a:2d:9c:cb:8e:
                    c9:19:8e:9a:81:9a:ac:6e:47:f2:26:df:84:77:1f:
                    52:1f:2e:49:f9:a7:9c:f3:0b:3f:53:60:dc:ba:82:
                    7f:68:07:64:73:0d:f5:cd:fd:3c:e6:8e:a3:fb:ee:
                    2d:b4:21:4c:3b:ab:f2:6f:6b:af:bb:17:6f:47:06:
                    17:49:c6:07:72:20:24:21:e4:7c:4a:7d:6f:15:72:
                    0a:c1:e2:a0:00:24:bf:f2:88:9f:48:4c:4b:32:8a:
                    59:47:14:47:fe:9d:3a:71:bf:ef:de:1d:8c:7b:ce:
                    2c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:B0:18:0C:5E:9F:FC:C2:CE:F6:24:55:97:98:0A:90:E2:27:6F:66
            X509v3 Authority Key Identifier:
                keyid:69:0C:16:A9:7E:E4:0B:89:A6:4C:B3:1F:62:A9:9A:56:30:08:2D:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/aQwWqX7kC4mmTLMfYqmaVjAILcM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQwWqX7kC4mmTLMfYqmaVjAILcM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/aQwWqX7kC4mmTLMfYqmaVjAILcM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:4c:c4:2f:c0:42:6d:9a:15:cd:82:af:dc:e8:03:6f:60:3a:
         91:41:6c:a4:69:27:dd:3f:75:1c:41:63:d7:f2:4f:1b:bb:57:
         f5:85:2b:1b:9e:02:dc:7e:4c:94:07:b8:c4:3c:43:31:58:36:
         b3:7c:93:48:b5:34:0b:fb:68:7e:5d:59:35:a4:bb:f7:79:04:
         37:e0:ea:8a:30:ff:de:24:62:af:62:54:f4:72:38:cd:54:c9:
         7e:fa:39:84:3d:c6:cf:b8:b7:b9:16:8b:e7:ea:d7:d1:01:ec:
         64:e1:28:c0:26:88:cc:6b:75:c5:09:03:3f:59:4c:72:49:5c:
         59:15:72:72:7d:6a:4d:18:4a:a2:a7:53:1d:3b:20:a3:fb:8c:
         3c:4c:6a:00:ff:15:42:42:94:9b:2b:77:a2:c4:3c:7b:00:26:
         05:a6:df:29:14:52:99:02:ad:13:2f:92:72:28:ac:24:12:3d:
         1d:37:6b:ff:d7:f1:45:23:03:7d:79:d6:83:2d:65:f1:71:fc:
         39:e7:c1:06:f6:49:51:69:d8:97:66:a7:11:7e:6f:c2:9e:e8:
         30:91:d5:0f:89:a5:c9:30:11:1c:17:7f:f9:0d:bf:10:65:07:
         df:42:6e:80:63:b7:bf:e6:e4:dc:c8:68:92:81:26:90:bf:74:
         fb:a7:b6:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 05:17:44 2025 by rpki-client