Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF076/A408F582B90411E9B1D50B41C4F9AE02/R4pL3QESHRxrMz7MPiW6Gohxmao.mft
File:                     R4pL3QESHRxrMz7MPiW6Gohxmao.mft (raw, json)
Hash identifier:          r2xWLHwoU5kCjtK622RQVLBd9oCIWNZHaFcqqeIEH9I=
Subject key identifier:   E4:FE:02:43:D7:E1:69:0A:0C:40:6C:22:AC:74:02:CF:8E:44:62:84
Authority key identifier: 47:8A:4B:DD:01:12:1D:1C:6B:33:3E:CC:3E:25:BA:1A:88:71:99:AA
Certificate issuer:       /CN=A91DF076/serialNumber=478A4BDD01121D1C6B333ECC3E25BA1A887199AA
Certificate serial:       0E0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4pL3QESHRxrMz7MPiW6Gohxmao.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF076/A408F582B90411E9B1D50B41C4F9AE02/R4pL3QESHRxrMz7MPiW6Gohxmao.mft
Manifest number:          0E04
Signing time:             Thu 18 Sep 2025 18:01:42 +0000
Manifest this update:     Thu 18 Sep 2025 18:01:41 +0000
Manifest next update:     Thu 25 Sep 2025 18:01:41 +0000
Files and hashes:         1: R4pL3QESHRxrMz7MPiW6Gohxmao.crl (hash: jN/WLvwxSEb40dQ67KX+6Hd9FiDuIUz1b6CniIOX9go=)
                          2: 7043D43679BB11ECB6D72266C4F9AE02.roa (hash: iU2Hi3gnDAAGhDttleotVYNL88jidVA94xxut38qdqc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF076/A408F582B90411E9B1D50B41C4F9AE02/R4pL3QESHRxrMz7MPiW6Gohxmao.crl
                          rsync://rpki.apnic.net/member_repository/A91DF076/A408F582B90411E9B1D50B41C4F9AE02/R4pL3QESHRxrMz7MPiW6Gohxmao.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4pL3QESHRxrMz7MPiW6Gohxmao.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Sep 2025 18:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3598 (0xe0e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF076, serialNumber=478A4BDD01121D1C6B333ECC3E25BA1A887199AA
        Validity
            Not Before: Sep 18 18:01:41 2025 GMT
            Not After : Sep 25 18:01:41 2025 GMT
        Subject: CN=68cc4905-6de1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:bd:8b:ef:04:38:d0:1f:ae:e7:ad:ec:35:ac:
                    55:76:f1:13:6f:d7:c9:10:ff:1d:fa:35:b5:60:52:
                    4b:41:0a:a5:99:d5:9f:96:ca:e3:8a:03:fd:ad:22:
                    17:a2:4f:da:40:40:5a:78:55:26:02:3c:7d:a7:98:
                    19:b6:8f:66:33:9b:cc:36:8a:66:0b:3c:6e:61:a1:
                    23:40:a7:fa:a9:63:15:df:ce:91:2b:05:6d:0e:e5:
                    90:44:7e:c5:f6:a9:1a:3d:23:39:3b:98:4e:20:4c:
                    91:ef:b7:94:30:6c:03:60:aa:b9:3d:38:f9:77:43:
                    2b:a2:cb:83:9c:d1:fb:a5:8c:36:ac:43:1b:95:2e:
                    dc:63:de:ed:50:1d:f3:b4:b1:08:ae:7f:ef:91:50:
                    bc:8d:b9:21:b8:4d:7f:9e:0b:0a:45:49:cc:7e:4a:
                    02:cd:c3:cd:a4:73:6b:22:06:99:cb:0c:57:ff:39:
                    42:cb:18:fe:ac:40:ca:11:ed:b5:aa:a3:18:34:09:
                    22:5a:cd:9e:73:bc:43:54:cb:8a:18:82:32:f3:f4:
                    1e:a2:19:ec:87:a3:a8:9e:0d:36:63:9f:3c:6e:58:
                    e2:a7:7c:85:34:67:1e:13:cb:3d:d7:05:53:2f:59:
                    cf:6f:b4:5a:58:b3:0f:15:3e:4b:23:78:e7:54:21:
                    55:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:FE:02:43:D7:E1:69:0A:0C:40:6C:22:AC:74:02:CF:8E:44:62:84
            X509v3 Authority Key Identifier:
                keyid:47:8A:4B:DD:01:12:1D:1C:6B:33:3E:CC:3E:25:BA:1A:88:71:99:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF076/A408F582B90411E9B1D50B41C4F9AE02/R4pL3QESHRxrMz7MPiW6Gohxmao.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4pL3QESHRxrMz7MPiW6Gohxmao.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF076/A408F582B90411E9B1D50B41C4F9AE02/R4pL3QESHRxrMz7MPiW6Gohxmao.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:f3:03:d6:fe:3b:29:20:35:98:55:df:f3:35:ba:de:19:ef:
         d7:e7:18:be:50:6f:2a:88:25:53:26:ef:55:00:e0:b6:ca:05:
         b8:b8:85:c4:e2:00:d4:40:28:cf:11:1b:3b:e5:ca:c1:4d:b3:
         81:c8:b2:9b:46:e9:47:95:57:e1:33:4a:93:56:ef:2d:df:2a:
         40:51:f3:e2:36:b4:e9:ea:ef:bf:87:a9:a2:1e:1c:c3:64:dc:
         56:5c:fa:27:b5:5c:fb:f6:a9:12:3c:93:8b:db:86:98:ce:61:
         f3:e9:58:b8:d7:b1:1a:b2:9f:39:b1:c4:ed:f9:50:53:a8:c1:
         a2:8c:5a:a2:e5:0b:d6:90:28:ab:9a:0a:ab:88:e7:64:8f:e0:
         7b:d9:fe:2a:de:d1:d7:e4:16:cb:82:ff:d4:db:ac:a0:20:ec:
         f0:b0:ad:f8:84:5c:12:99:fc:5b:0a:9d:ab:55:0b:7a:88:08:
         84:fd:3d:e5:c4:03:65:0f:41:50:6c:de:33:76:b2:d4:09:27:
         c8:ed:a7:4c:0b:28:40:3e:d1:4b:7b:90:f7:35:e5:ac:8b:e6:
         56:4b:a1:7c:50:87:f1:e8:a9:16:c0:b1:61:72:2a:f0:0d:d5:
         21:e7:66:e3:74:af:1a:e2:aa:3b:06:35:13:1d:9d:2c:0e:8f:
         98:a2:bf:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 03:02:49 2025 by rpki-client