Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft
File:                     dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft (raw, json)
Hash identifier:          wU8rwz7Yr4pBJDHNlmD5eOU3ZD/GyXbwlzEdsf64FKY=
Subject key identifier:   39:C7:A4:F3:E7:10:57:27:F5:9A:DA:FB:48:43:7D:7F:73:5C:33:A3
Authority key identifier: 75:7C:DD:98:84:42:03:E9:CB:41:3D:7E:5C:58:08:D1:5E:54:B1:CF
Certificate issuer:       /CN=A91972B6/serialNumber=757CDD98844203E9CB413D7E5C5808D15E54B1CF
Certificate serial:       2045
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dXzdmIRCA-nLQT1-XFgI0V5Usc8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft
Manifest number:          18C4
Signing time:             Mon 06 Oct 2025 17:20:08 +0000
Manifest this update:     Mon 06 Oct 2025 17:20:08 +0000
Manifest next update:     Mon 13 Oct 2025 17:20:07 +0000
Files and hashes:         1: dXzdmIRCA-nLQT1-XFgI0V5Usc8.crl (hash: g9beDXtnjjEEkZgdyDQ87GDUTQFi96FIut5LHjZdeJo=)
                          2: BB676D067C9B11EBB1A0BD0FC4F9AE02.roa (hash: EHblWN/sQZKLg9HDhv2zyoanKhtnruUlRN2jtd5a8fY=)
                          3: C3F52172A3E611EAA751A46EC4F9AE02.roa (hash: vkLbx3UKTR9g9Nkc39hdbcDwUn28d/ORpVf5hXTtd6k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.crl
                          rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dXzdmIRCA-nLQT1-XFgI0V5Usc8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Oct 2025 17:20:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8261 (0x2045)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91972B6, serialNumber=757CDD98844203E9CB413D7E5C5808D15E54B1CF
        Validity
            Not Before: Oct  6 17:20:08 2025 GMT
            Not After : Oct 13 17:20:07 2025 GMT
        Subject: CN=68e3fa48-44d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7c:60:94:87:09:d5:d2:41:20:db:80:93:6a:
                    86:73:f4:13:2d:ae:5c:f3:ea:a4:ff:1c:4d:85:2f:
                    1a:f5:d5:66:e3:c7:6e:f7:51:35:05:bb:d9:17:43:
                    1a:2e:eb:96:26:f5:1c:b1:c8:a8:9c:ce:dc:34:7c:
                    30:75:cf:df:5b:6c:2d:5d:fb:8c:1f:6b:ec:81:15:
                    02:2c:70:68:ea:3d:1c:e8:03:95:42:13:75:6b:2e:
                    62:21:8c:24:82:bd:6f:79:28:12:3f:54:23:4b:c2:
                    c7:bc:e1:67:28:7f:75:9c:17:ad:af:bf:a2:38:02:
                    b3:ba:4d:af:41:f1:d9:49:0d:16:db:a8:4b:a7:d2:
                    80:b8:a5:81:57:4f:ed:c1:de:1b:e3:ff:d5:3a:a1:
                    10:7e:8e:95:89:d3:32:39:2b:7c:09:7c:a7:27:54:
                    47:32:6b:69:88:c3:a0:6f:14:44:a7:a4:c7:e5:11:
                    66:eb:d3:25:85:71:69:67:f7:aa:ad:88:ea:c6:7b:
                    90:67:73:6a:e5:8a:19:81:59:9d:d7:01:d3:c5:c7:
                    a1:fb:4d:9d:35:9c:75:ef:e7:42:49:05:00:64:f4:
                    5e:6b:6b:7c:cc:b1:d4:e9:16:5b:ee:32:3a:11:46:
                    4d:eb:02:ef:fc:9b:77:bd:1e:20:f4:85:91:f3:cf:
                    02:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:C7:A4:F3:E7:10:57:27:F5:9A:DA:FB:48:43:7D:7F:73:5C:33:A3
            X509v3 Authority Key Identifier:
                keyid:75:7C:DD:98:84:42:03:E9:CB:41:3D:7E:5C:58:08:D1:5E:54:B1:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dXzdmIRCA-nLQT1-XFgI0V5Usc8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:99:27:51:a3:49:0c:ed:52:df:ec:9d:4f:40:2c:73:94:94:
         9c:e7:46:fd:89:d9:0e:9e:b1:81:c4:4d:7a:db:70:95:e2:23:
         ba:23:2f:b4:18:56:23:73:70:14:5e:f5:6d:5e:4a:ed:36:36:
         34:5e:49:71:97:02:fd:b3:5b:00:cb:38:12:0e:e3:17:5f:15:
         80:b7:95:ea:b0:77:56:a2:72:b5:60:69:9f:06:32:ba:7e:9d:
         15:5f:02:fb:ef:90:ce:51:32:e3:f9:6d:95:1c:78:19:a8:41:
         63:fa:f3:60:26:d7:4b:ef:f5:51:ce:c4:bb:4e:d5:b6:b0:34:
         8b:9e:ce:f7:c3:7d:c0:74:9e:59:0b:95:cc:34:f7:9e:ee:7d:
         1a:5e:24:c3:a7:dd:6b:65:95:1b:9c:16:72:0c:9f:0d:3a:81:
         87:89:73:12:ac:70:24:ce:b3:80:e9:ef:98:0b:84:2d:8b:96:
         6a:56:40:ea:6c:d8:83:a8:bc:71:6f:bd:2b:63:e4:0e:59:66:
         e3:9c:d8:27:fc:90:ae:b3:bb:ce:38:9e:27:9b:c0:a7:2f:fc:
         25:9a:50:32:c1:85:04:fc:ce:c7:4b:21:62:b3:e6:94:f6:b6:
         b1:20:1a:04:bf:23:0f:e6:83:5b:7a:a8:9d:16:64:6c:a6:6c:
         cc:eb:57:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 15:48:55 2025 by rpki-client