Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBA31/79870596893D11F0BCE7A720C4F9AE02/Egl6r4V7Yr00qic9P5s-2c5t8WE.mft
File:                     Egl6r4V7Yr00qic9P5s-2c5t8WE.mft (raw, json)
Hash identifier:          1rU5H/Ee+rnl8AxTSVP9FUTDlpTcOWc644b0nNZhtEw=
Subject key identifier:   51:97:CF:CE:AD:C2:6C:6D:2F:A0:3A:7B:33:DA:29:7E:AC:B7:5B:0F
Authority key identifier: 12:09:7A:AF:85:7B:62:BD:34:AA:27:3D:3F:9B:3E:D9:CE:6D:F1:61
Certificate issuer:       /CN=A91BBA31/serialNumber=12097AAF857B62BD34AA273D3F9B3ED9CE6DF161
Certificate serial:       18
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Egl6r4V7Yr00qic9P5s-2c5t8WE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BBA31/79870596893D11F0BCE7A720C4F9AE02/Egl6r4V7Yr00qic9P5s-2c5t8WE.mft
Manifest number:          17
Signing time:             Fri 17 Oct 2025 11:40:18 +0000
Manifest this update:     Fri 17 Oct 2025 11:40:17 +0000
Manifest next update:     Fri 24 Oct 2025 11:40:17 +0000
Files and hashes:         1: Egl6r4V7Yr00qic9P5s-2c5t8WE.crl (hash: VLDRBwEh9s58TVk8/Tao5bKGW5+WgUleLLYvMieNRGQ=)
                          2: D7F890AE893D11F0AE546821C4F9AE02.roa (hash: 4a6fbz8UZzVK6hEq/BSQUj0RZPgaTHrh70mEvlwuZdo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BBA31/79870596893D11F0BCE7A720C4F9AE02/Egl6r4V7Yr00qic9P5s-2c5t8WE.crl
                          rsync://rpki.apnic.net/member_repository/A91BBA31/79870596893D11F0BCE7A720C4F9AE02/Egl6r4V7Yr00qic9P5s-2c5t8WE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Egl6r4V7Yr00qic9P5s-2c5t8WE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Oct 2025 11:40:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BBA31, serialNumber=12097AAF857B62BD34AA273D3F9B3ED9CE6DF161
        Validity
            Not Before: Oct 17 11:40:17 2025 GMT
            Not After : Oct 24 11:40:17 2025 GMT
        Subject: CN=68f22b22-8b04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3f:3e:93:c2:76:8c:c3:ec:25:26:b4:7c:4a:
                    d5:6f:1e:8c:c7:05:a1:d8:1f:8e:9f:00:d0:e5:77:
                    4a:dd:dc:7e:81:e1:69:70:3a:b4:c8:89:e3:f2:29:
                    97:7b:a5:b2:8e:de:65:83:b5:e7:64:68:62:e3:17:
                    67:90:6f:ec:40:67:14:15:f9:bc:54:e3:e3:3b:58:
                    86:33:d8:d2:cb:de:e2:f9:27:72:fe:87:79:65:bd:
                    1a:8d:b1:f3:70:a7:b1:e7:80:1a:6f:43:cd:cf:d9:
                    39:ee:ed:43:6d:da:22:17:68:c0:02:4c:e1:86:2f:
                    2b:82:d0:a4:76:bb:e0:d6:e2:9a:a8:6d:3a:c8:a6:
                    0e:13:c3:21:d1:8e:70:8c:6c:7c:7b:66:98:e7:eb:
                    5b:8d:53:55:76:e1:ad:41:34:b7:e4:28:82:29:fc:
                    e3:b5:06:b7:b6:29:f3:1f:18:67:66:81:df:d2:ab:
                    00:af:25:6c:26:de:b2:ac:fe:c9:c9:a3:c4:2c:38:
                    7b:74:6d:b6:06:44:cc:c8:6b:36:37:20:f9:e4:16:
                    43:f9:2f:d3:49:7f:13:0b:3f:4d:d4:b8:d5:96:3d:
                    a3:5c:fd:c3:09:1a:3e:2f:28:bc:f0:1f:ff:8e:c6:
                    59:c2:36:c0:e3:65:61:62:f5:a4:27:bf:df:3f:54:
                    ad:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:97:CF:CE:AD:C2:6C:6D:2F:A0:3A:7B:33:DA:29:7E:AC:B7:5B:0F
            X509v3 Authority Key Identifier:
                keyid:12:09:7A:AF:85:7B:62:BD:34:AA:27:3D:3F:9B:3E:D9:CE:6D:F1:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BBA31/79870596893D11F0BCE7A720C4F9AE02/Egl6r4V7Yr00qic9P5s-2c5t8WE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Egl6r4V7Yr00qic9P5s-2c5t8WE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBA31/79870596893D11F0BCE7A720C4F9AE02/Egl6r4V7Yr00qic9P5s-2c5t8WE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:93:27:68:c3:52:4e:62:a9:7e:57:9b:5b:19:05:4d:7e:31:
         88:b4:2e:61:70:1d:86:dd:ff:30:24:ba:55:2c:6d:26:c4:35:
         d1:3b:b1:14:8a:88:aa:9e:2e:f2:2c:8a:74:3b:f3:e1:1d:1e:
         93:28:b8:c8:c1:9e:10:0e:f1:1f:54:83:e7:7d:31:ba:bf:40:
         0e:bf:58:83:4c:5a:11:00:8f:2b:64:0b:f6:29:b1:da:57:17:
         86:8f:d2:22:d7:0e:37:3b:34:c1:e9:00:19:1e:0d:89:78:9b:
         98:a4:62:12:e2:bd:19:bb:6a:eb:cd:f3:88:35:fd:f4:36:26:
         aa:ab:66:51:23:59:e6:87:1d:1b:c8:fb:e2:aa:3b:4d:42:59:
         dc:b6:d3:91:8e:90:1b:74:88:9d:0c:2c:85:51:45:bb:c9:9b:
         74:e7:ce:5e:22:47:8c:4a:15:70:b8:20:7e:4a:7f:7b:58:e3:
         8a:a0:8a:0b:47:6c:3b:cc:ad:5f:a2:95:d2:e4:60:66:50:66:
         97:27:9b:aa:1c:67:3e:2a:69:59:3a:75:b7:0a:c0:6f:70:9a:
         cc:3a:fc:2c:54:c7:d7:c1:20:80:22:8e:48:63:eb:89:39:9f:
         37:44:5a:a2:43:a6:40:07:96:65:90:4d:73:a0:22:b6:09:c5:
         19:c4:63:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 23:26:33 2025 by rpki-client