Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.mft
File:                     s--n1q4ZnRRYLdTsuRY6PJ2EF1k.mft (raw, json)
Hash identifier:          1p0Wk0ZoHfO9tpsg1hU36WnrLj9o4i0/rVQ9YlxaCTs=
Subject key identifier:   91:C9:40:A0:76:23:FE:DE:79:37:87:71:CF:AA:13:B5:E5:F8:15:06
Authority key identifier: B3:EF:A7:D6:AE:19:9D:14:58:2D:D4:EC:B9:16:3A:3C:9D:84:17:59
Certificate issuer:       /CN=A91EF17A/serialNumber=B3EFA7D6AE199D14582DD4ECB9163A3C9D841759
Certificate serial:       0108
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.mft
Manifest number:          FC
Signing time:             Fri 17 Oct 2025 08:27:38 +0000
Manifest this update:     Fri 17 Oct 2025 08:27:38 +0000
Manifest next update:     Fri 24 Oct 2025 08:27:38 +0000
Files and hashes:         1: s--n1q4ZnRRYLdTsuRY6PJ2EF1k.crl (hash: WhWCYtOjvKGjskq3CTweHS6NbJ8FRcTYxPizVD4hSJA=)
                          2: B4F165084F1F11EFA3B1F709C4F9AE02.roa (hash: 6g7DJTli/YH5hSeeCwQn1OlBs7GZnC1wNbHw8krPxSQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.crl
                          rsync://rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Oct 2025 08:27:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 264 (0x108)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF17A, serialNumber=B3EFA7D6AE199D14582DD4ECB9163A3C9D841759
        Validity
            Not Before: Oct 17 08:27:38 2025 GMT
            Not After : Oct 24 08:27:38 2025 GMT
        Subject: CN=68f1fdfa-8c98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:8a:76:bd:43:6d:79:b8:14:cd:e6:6b:47:b5:
                    11:2e:b9:6c:40:ee:12:cb:2e:80:bf:16:4f:73:3a:
                    63:d0:2e:8b:ae:5b:a2:51:a5:8b:c1:cc:db:ad:5a:
                    9a:c0:3b:a3:c3:68:8b:01:04:4f:4f:49:33:6d:3f:
                    ae:5b:c5:85:9e:12:6e:49:1c:f2:50:ce:c2:74:e2:
                    3d:30:47:8e:f6:40:78:7a:bc:27:44:f2:1f:6b:46:
                    51:94:eb:1f:6f:b0:f3:84:59:96:cf:34:5f:cc:70:
                    63:c3:ef:12:0d:4b:99:d9:0c:d5:24:a1:09:e4:31:
                    c9:96:8a:37:83:15:86:2f:87:5b:da:c2:be:e7:fd:
                    a0:4d:73:f9:dc:6b:3f:82:38:e7:9d:b9:01:9e:48:
                    f4:79:6c:ec:59:04:57:d9:1c:65:b1:d4:64:98:3e:
                    26:79:49:ff:84:63:d6:6e:19:9b:9d:12:c7:4b:7e:
                    e7:15:4c:9a:21:29:97:d4:ab:c2:9e:30:c2:de:d8:
                    c9:88:94:d7:44:57:4c:31:17:34:31:f1:2e:26:30:
                    68:f5:fe:77:87:83:71:e2:fe:f0:7a:32:df:2f:74:
                    56:54:c0:cf:57:aa:3f:1a:e8:4e:e8:05:f2:54:ed:
                    30:73:b0:64:74:b2:92:7f:e5:a3:6e:0a:04:1f:4e:
                    aa:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:C9:40:A0:76:23:FE:DE:79:37:87:71:CF:AA:13:B5:E5:F8:15:06
            X509v3 Authority Key Identifier:
                keyid:B3:EF:A7:D6:AE:19:9D:14:58:2D:D4:EC:B9:16:3A:3C:9D:84:17:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:c7:34:f7:72:e5:98:85:fa:fb:f2:7a:08:eb:2f:ff:a9:55:
         91:df:71:56:e7:db:79:c6:cf:12:1b:09:11:30:37:a0:5d:67:
         65:b0:c7:a6:36:94:e6:a0:49:af:1b:7e:7b:64:63:ff:2d:34:
         41:a0:a5:3c:d0:86:fb:5a:77:d0:28:16:36:f8:41:63:e2:40:
         f7:38:1a:08:75:65:97:6a:a9:92:92:e0:79:30:20:ff:2b:ff:
         36:e2:31:7c:d9:cb:e4:d9:fa:fb:e8:f9:8c:a4:0a:2f:8d:7e:
         94:e0:e2:b7:ac:93:66:bd:28:7f:9a:6d:65:f6:bd:5a:ad:fb:
         a1:70:66:53:ac:72:0a:57:55:61:01:6d:3a:3d:f5:a6:29:fa:
         bc:03:3f:5f:7c:58:fe:5d:af:34:dd:81:99:8f:9a:3a:bf:b6:
         bc:54:98:0d:e6:7f:ed:83:01:8e:fa:6a:79:c4:f3:c2:ed:86:
         68:e2:04:4f:3d:c5:02:44:22:12:13:d1:86:9d:dd:05:95:a8:
         bf:12:18:b5:c4:8e:81:ed:87:a9:e9:11:f5:72:b1:ca:81:08:
         2b:5f:83:52:e1:c3:7f:b6:c7:9e:19:a4:77:82:46:c1:79:e6:
         4f:9f:d7:8a:9d:60:d9:55:68:bf:6d:4f:26:be:e3:2e:9d:8a:
         51:89:15:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 23:32:49 2025 by rpki-client