Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.mft
File:                     IcjytuAdCoLRPDUYjDyT5vUUupQ.mft (raw, json)
Hash identifier:          t6XYec+KL5W2j+6qXrMbHmIpDFPR05GnspRRKwSBbtA=
Subject key identifier:   62:87:3C:76:8C:CD:7A:84:1D:46:73:36:E4:32:94:68:71:30:8F:BE
Authority key identifier: 21:C8:F2:B6:E0:1D:0A:82:D1:3C:35:18:8C:3C:93:E6:F5:14:BA:94
Certificate issuer:       /CN=A91A9C62/serialNumber=21C8F2B6E01D0A82D13C35188C3C93E6F514BA94
Certificate serial:       2F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcjytuAdCoLRPDUYjDyT5vUUupQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.mft
Manifest number:          2E
Signing time:             Sun 19 Oct 2025 11:12:41 +0000
Manifest this update:     Sun 19 Oct 2025 11:12:40 +0000
Manifest next update:     Sun 26 Oct 2025 11:12:40 +0000
Files and hashes:         1: IcjytuAdCoLRPDUYjDyT5vUUupQ.crl (hash: hXlXNcj+I/LHF5Hm5XFBNoK3eRZK1HxCclz21X5xIAE=)
                          2: 08EAF5106C2111F0B46AAC57C4F9AE02.roa (hash: WDMb5z1Oep3KObXAq9yk+eELcjcBrGqtQZEb/aGlqi4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcjytuAdCoLRPDUYjDyT5vUUupQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 11:12:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9C62, serialNumber=21C8F2B6E01D0A82D13C35188C3C93E6F514BA94
        Validity
            Not Before: Oct 19 11:12:40 2025 GMT
            Not After : Oct 26 11:12:40 2025 GMT
        Subject: CN=68f4c7a8-29dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a4:ef:fe:3c:cd:6b:70:8c:0b:b5:3a:25:97:
                    03:da:28:73:f0:85:d1:be:73:f3:71:2f:77:ab:f4:
                    f0:f7:2b:5e:b4:55:93:cf:3c:d4:a1:5d:d0:86:d8:
                    e1:42:5f:74:c0:8a:24:a2:69:48:07:29:d2:f2:e3:
                    97:8c:3e:8b:a8:6f:9c:f1:9b:6e:9e:86:3b:e3:da:
                    ee:bf:53:1c:05:eb:4e:85:37:a8:de:c2:74:2a:aa:
                    94:f7:de:78:2e:ee:77:95:6b:80:ac:32:53:fa:a5:
                    5b:ae:a1:09:c8:2c:ba:66:65:ee:83:69:d5:ef:e4:
                    dd:76:a2:ea:58:b0:3f:29:16:1a:10:5c:c4:d3:38:
                    2b:b9:64:dc:0b:b4:bc:4d:e3:fd:34:d5:87:96:8c:
                    cf:24:9c:49:2c:1d:8f:86:bf:6d:c1:6d:6a:68:80:
                    57:57:87:6c:db:27:69:e4:2a:a4:03:21:72:be:ff:
                    7d:4b:d1:d3:e2:9f:f7:4e:4c:9a:53:32:50:0f:44:
                    9d:93:24:d9:54:fb:a2:db:0b:9d:e0:e6:54:da:e3:
                    87:3b:6e:09:72:f0:dd:f5:f3:87:c2:80:1f:3e:dd:
                    e6:6f:58:cb:0d:92:99:e4:b7:4a:2f:4e:12:ef:99:
                    0a:35:40:c4:f9:16:64:3f:e7:6a:88:e0:37:21:a6:
                    4a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:87:3C:76:8C:CD:7A:84:1D:46:73:36:E4:32:94:68:71:30:8F:BE
            X509v3 Authority Key Identifier:
                keyid:21:C8:F2:B6:E0:1D:0A:82:D1:3C:35:18:8C:3C:93:E6:F5:14:BA:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcjytuAdCoLRPDUYjDyT5vUUupQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:96:c4:37:4c:68:1e:72:8f:69:0d:12:fd:a0:cd:8d:77:23:
         65:00:39:b5:37:09:cb:bb:23:84:56:66:28:98:5e:d4:63:33:
         b9:b3:57:a0:40:ec:52:3c:89:23:3b:6f:38:26:11:ad:50:21:
         40:b7:b3:cf:f6:c6:ea:ed:00:3d:da:0e:41:9f:d4:70:49:b5:
         31:ce:46:c2:e5:65:3c:b1:d6:72:9a:c5:df:05:3e:95:cb:ff:
         f6:6a:d9:b9:13:07:c4:8f:1d:f3:1c:86:2f:43:44:65:67:c3:
         15:f7:5d:73:ed:93:bf:72:f3:77:20:eb:d1:d5:1e:64:1f:40:
         c9:dc:6b:8b:cf:0e:83:3f:ba:8a:d1:71:74:0e:73:c6:ba:c5:
         aa:21:86:41:d5:de:5f:47:6a:ec:24:99:67:5e:16:1f:fc:6f:
         ef:46:00:d2:b9:a9:b9:aa:80:d8:23:e6:83:fa:a3:f0:2c:2e:
         35:42:ef:03:60:7c:96:24:a5:78:4f:5e:b2:6a:d6:a0:bd:89:
         25:0b:0b:8b:8d:01:89:cb:25:d0:44:10:5b:97:02:1d:84:f0:
         51:d7:51:54:90:8a:89:a0:40:fb:a1:41:94:d5:92:be:13:e6:
         e0:a0:42:7a:a6:4f:64:89:7e:d7:6b:e4:66:4c:8d:40:56:87:
         7f:b6:11:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:37:08 2025 by rpki-client