Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/ME1k4_EFEpfktirH3jSA9Hoprg8.mft
File:                     ME1k4_EFEpfktirH3jSA9Hoprg8.mft (raw, json)
Hash identifier:          fnfSO6BRfNl62sQ4rVTalVdxvuA/xXOz64wZX2W6PvU=
Subject key identifier:   B7:9B:2D:88:28:1B:90:A3:A1:94:3B:CC:B7:19:37:12:0D:A7:0E:C7
Authority key identifier: 30:4D:64:E3:F1:05:12:97:E4:B6:2A:C7:DE:34:80:F4:7A:29:AE:0F
Certificate issuer:       /CN=A919EC2D/serialNumber=304D64E3F1051297E4B62AC7DE3480F47A29AE0F
Certificate serial:       B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ME1k4_EFEpfktirH3jSA9Hoprg8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/ME1k4_EFEpfktirH3jSA9Hoprg8.mft
Manifest number:          041B
Signing time:             Thu 23 Oct 2025 04:05:57 +0000
Manifest this update:     Thu 23 Oct 2025 04:05:56 +0000
Manifest next update:     Thu 30 Oct 2025 04:05:56 +0000
Files and hashes:         1: ME1k4_EFEpfktirH3jSA9Hoprg8.crl (hash: 7aW7WDqkagWxakD5rRONrzPWU5bj7mdx4M0JHJ4UsoI=)
                          2: A8EF2B58A89A11EFA52A9970C4F9AE02.roa (hash: 0yuiUuTSODKUKXLNsgQCShKjboLS3TAY6lYLYOs9OQU=)
                          3: A9B82544A89A11EFA52A9970C4F9AE02.roa (hash: SIcxhOEIM41kk3geT6tTo6gosphamPrjvTMVkyrZL2U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/ME1k4_EFEpfktirH3jSA9Hoprg8.crl
                          rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/ME1k4_EFEpfktirH3jSA9Hoprg8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ME1k4_EFEpfktirH3jSA9Hoprg8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Oct 2025 04:05:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 178 (0xb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EC2D, serialNumber=304D64E3F1051297E4B62AC7DE3480F47A29AE0F
        Validity
            Not Before: Oct 23 04:05:56 2025 GMT
            Not After : Oct 30 04:05:56 2025 GMT
        Subject: CN=68f9a9a5-2f34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:84:74:f8:83:5c:9f:26:98:a4:17:57:35:24:
                    a3:4c:5a:4f:7e:f2:3f:a9:2e:93:92:72:83:97:f3:
                    e8:f4:b3:55:20:23:66:74:b4:e6:92:6f:b9:4d:ab:
                    4d:a7:91:45:04:1e:d2:93:2a:03:5f:90:2a:dc:a4:
                    3b:8a:c6:f7:a9:d1:b5:16:3a:b0:1a:40:ed:c3:db:
                    65:6d:18:a2:22:f1:6c:d9:ba:a2:8d:05:3d:71:ed:
                    60:75:69:0c:07:8c:e7:2f:6a:42:4a:7f:93:e8:b9:
                    05:9f:27:d3:09:71:c2:49:93:72:53:17:d3:4c:5e:
                    20:5a:0b:83:d8:40:93:29:b4:b9:5a:8f:60:16:51:
                    66:2e:96:09:66:a8:1f:d3:f6:f1:4d:a5:4b:32:6d:
                    3a:ce:c7:23:fc:68:16:31:9e:f1:ee:0f:c0:75:33:
                    bc:3a:de:7b:3c:df:2f:19:77:e1:56:ae:20:ca:4c:
                    0b:09:e2:c5:b7:31:09:81:e4:4b:57:b8:22:28:52:
                    6f:44:03:e6:fc:2a:a1:8a:e0:a4:db:43:0e:a8:6a:
                    75:4f:b9:b4:b7:d7:b2:0e:47:25:23:b8:d1:e4:22:
                    5a:e3:dd:61:01:4a:4e:56:f5:68:49:c5:89:d3:37:
                    74:e0:5b:84:a0:c6:10:49:55:95:fe:34:e5:02:f4:
                    65:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:9B:2D:88:28:1B:90:A3:A1:94:3B:CC:B7:19:37:12:0D:A7:0E:C7
            X509v3 Authority Key Identifier:
                keyid:30:4D:64:E3:F1:05:12:97:E4:B6:2A:C7:DE:34:80:F4:7A:29:AE:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/ME1k4_EFEpfktirH3jSA9Hoprg8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ME1k4_EFEpfktirH3jSA9Hoprg8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/ME1k4_EFEpfktirH3jSA9Hoprg8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:ba:2a:c1:50:69:7c:a9:a3:80:10:b4:fc:d4:a1:4e:44:5d:
         1e:51:d7:fe:0b:4d:6e:02:bc:b9:68:00:e8:fe:4a:52:df:81:
         fa:47:a5:65:81:95:cb:f7:29:03:ac:91:08:34:76:52:44:39:
         7f:c7:5d:17:18:e9:83:45:8a:30:d4:f6:63:45:81:0d:95:0e:
         a7:99:90:e0:2c:a4:17:3f:f1:14:81:9e:6f:d6:63:21:bd:e7:
         64:b5:e6:31:3a:d9:a1:10:5b:19:1a:ef:e9:17:29:4b:7b:cb:
         b2:89:1d:4b:e8:99:9e:85:fb:df:22:ca:67:e7:78:79:82:1b:
         11:f6:9a:ec:de:12:ba:00:32:50:ac:18:d4:5e:af:c5:3b:ea:
         90:03:af:75:ac:c2:64:3f:89:44:b6:e3:c0:ea:c8:ae:40:7d:
         9b:a6:5a:48:4c:65:f6:3a:20:bc:44:46:ed:a3:92:90:9e:a5:
         e2:95:38:9a:26:8d:57:6a:d2:64:dd:cc:ac:b9:1e:0f:63:de:
         92:cf:41:be:86:51:ff:48:31:c4:25:f9:61:dd:d6:f0:f8:29:
         16:1c:b3:69:1a:ee:30:e2:fd:a2:87:60:72:4c:d3:70:f5:44:
         e3:0d:a9:50:93:7c:b7:7c:09:67:6c:d1:ec:36:48:bf:77:28:
         80:40:c4:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 09:57:49 2025 by rpki-client