Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.mft
File:                     1yELbplCSp6CpNRQAnNvZIOqJ5o.mft (raw, json)
Hash identifier:          bjWs7bccYz1VgTygbvFs1lUW3aAp4RQ3dYts7GCN52k=
Subject key identifier:   C8:AE:BD:F0:3A:7D:23:63:99:12:F0:EC:44:FF:75:3A:39:6A:0C:89
Authority key identifier: D7:21:0B:6E:99:42:4A:9E:82:A4:D4:50:02:73:6F:64:83:AA:27:9A
Certificate issuer:       /CN=A919A909/serialNumber=D7210B6E99424A9E82A4D45002736F6483AA279A
Certificate serial:       010C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1yELbplCSp6CpNRQAnNvZIOqJ5o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.mft
Manifest number:          0105
Signing time:             Sat 25 Oct 2025 08:43:44 +0000
Manifest this update:     Sat 25 Oct 2025 08:43:44 +0000
Manifest next update:     Sat 01 Nov 2025 08:43:44 +0000
Files and hashes:         1: 1yELbplCSp6CpNRQAnNvZIOqJ5o.crl (hash: J4Mv7Pv3GYVCcQObO38MZZHcbutCNLuZKv5qe1a2QlM=)
                          2: 2F5FEDD02E4811EFA2C93552C4F9AE02.roa (hash: nAAKqeX52YyyXJwlWmzPJZzOWJlGdlFjHrIUMleQhJo=)
                          3: CCC81F9A703F11F0AD014F1AC4F9AE02.roa (hash: 5E8RDsoVjXmI/w7ZZOkVeITuRBDxCdB14YXNUGb/6bY=)
                          4: 1D5C0B90475D11EFBD75C15EC4F9AE02.roa (hash: vjvAzTCHT28iPRQdCoJZnbSPvYtHv4wDBYZ54035Ceo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.crl
                          rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1yELbplCSp6CpNRQAnNvZIOqJ5o.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 01 Nov 2025 08:43:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 268 (0x10c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A909, serialNumber=D7210B6E99424A9E82A4D45002736F6483AA279A
        Validity
            Not Before: Oct 25 08:43:44 2025 GMT
            Not After : Nov  1 08:43:44 2025 GMT
        Subject: CN=68fc8dc0-a401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:bb:40:1b:78:8a:cd:fc:e9:27:0d:19:ad:d8:
                    c8:f0:ed:0b:1b:ed:ac:4f:3a:4f:cc:ad:77:e0:28:
                    95:d9:10:ee:30:df:97:d2:36:0a:4e:e1:c3:37:e3:
                    94:3a:46:b9:f8:2e:89:30:d1:eb:6f:c3:b5:ae:a1:
                    3d:2a:c8:2b:35:01:f0:3b:c1:7b:6e:7d:af:bd:1c:
                    0a:55:fe:a5:36:d4:a1:77:e6:3b:ef:0c:ad:fc:05:
                    c5:5c:50:df:32:50:91:9b:cb:45:19:ad:c1:15:ed:
                    9a:90:0e:e8:56:ad:06:89:f6:7e:d1:dd:58:70:91:
                    50:5a:eb:f5:d6:91:f7:f1:3d:91:b9:ac:ed:f2:e9:
                    a2:6d:72:14:9f:42:1f:49:54:1f:05:d8:e5:9c:fc:
                    50:e8:92:e5:de:46:35:e9:82:86:a6:e6:4b:a0:4d:
                    36:6f:7e:e4:92:c5:eb:f2:bd:a6:db:96:0f:2d:91:
                    61:2e:48:1a:e3:4a:ca:ee:6e:2d:1d:72:4a:c2:a0:
                    63:aa:6f:ca:ae:6c:d8:e6:f4:a9:11:4b:3a:55:31:
                    c9:f6:00:ff:0c:26:5e:c1:74:aa:72:53:3b:ae:f8:
                    e1:09:9e:30:b3:27:6d:21:74:57:8c:6e:03:8a:88:
                    e5:3b:b0:bb:0d:7a:e2:cc:5d:7e:e4:aa:68:ee:f4:
                    a3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:AE:BD:F0:3A:7D:23:63:99:12:F0:EC:44:FF:75:3A:39:6A:0C:89
            X509v3 Authority Key Identifier:
                keyid:D7:21:0B:6E:99:42:4A:9E:82:A4:D4:50:02:73:6F:64:83:AA:27:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1yELbplCSp6CpNRQAnNvZIOqJ5o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:39:d7:34:72:1e:33:cc:17:e6:10:ec:2d:d5:9e:83:ec:fc:
         00:5b:4d:c1:88:72:0f:d3:89:98:8d:1c:e9:1f:d8:44:fc:65:
         16:28:7b:2d:f7:e2:b2:61:db:6f:55:23:fc:f9:9d:ce:5f:f8:
         7b:c6:85:7a:c2:6b:1f:88:6b:82:c5:85:a9:52:64:d5:07:4c:
         05:5d:86:b9:9c:96:9f:a9:b4:ec:d3:a7:41:71:7f:1b:48:0b:
         2e:5c:3f:1a:b1:2b:7b:54:03:30:b8:71:35:33:26:f3:7f:d9:
         82:a9:4e:c9:b3:6e:d7:70:92:7e:59:b4:34:97:a0:76:ac:a4:
         08:6c:a6:60:3f:08:b1:7d:2a:70:8f:6e:3f:5b:05:86:db:71:
         f4:3b:22:c2:b4:6e:cb:58:24:e1:ad:b6:38:f6:56:be:6f:a4:
         01:9d:39:80:65:eb:70:ee:3b:d6:5e:0b:0f:7f:d5:09:c7:d5:
         87:2e:1b:ed:58:c9:f2:b9:96:c5:23:86:78:d1:9d:d6:e3:ea:
         54:22:11:32:5c:af:09:bc:9b:87:9a:ac:0a:bd:62:f4:87:3f:
         71:e6:78:3c:4f:d7:9c:7e:df:1e:2a:a0:38:91:0b:a0:00:0c:
         03:a7:3b:36:85:91:3a:90:77:b9:5c:bc:e1:0c:89:53:df:3d:
         c3:1a:12:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 23:15:17 2025 by rpki-client