Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.mft
File:                     IL0_f5mO1D1fxPhindDBiOx92uA.mft (raw, json)
Hash identifier:          N7k97KqZxbMsQIyr9YX+jvgHLI6L+IzAH27rbZGdQ8U=
Subject key identifier:   EB:15:27:EF:52:A3:F8:DB:8B:FE:85:C2:D1:9C:B5:94:9C:05:0A:F4
Authority key identifier: 20:BD:3F:7F:99:8E:D4:3D:5F:C4:F8:62:9D:D0:C1:88:EC:7D:DA:E0
Certificate issuer:       /CN=A918E9A4/serialNumber=20BD3F7F998ED43D5FC4F8629DD0C188EC7DDAE0
Certificate serial:       017C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IL0_f5mO1D1fxPhindDBiOx92uA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.mft
Manifest number:          017A
Signing time:             Wed 05 Nov 2025 03:52:39 +0000
Manifest this update:     Wed 05 Nov 2025 03:52:39 +0000
Manifest next update:     Wed 12 Nov 2025 03:52:39 +0000
Files and hashes:         1: IL0_f5mO1D1fxPhindDBiOx92uA.crl (hash: 5yJfELTKgvUtUA+NdmUs6Oy9fGTyuG6Ctq8vxVeHjCY=)
                          2: 10EB474C730311EE9ADB6C46C4F9AE02.roa (hash: cWgOEcKhYYXBYZ1Qeif6nqia0tYqSc7zBIrXwtNmPdk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.crl
                          rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IL0_f5mO1D1fxPhindDBiOx92uA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 03:52:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 380 (0x17c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E9A4, serialNumber=20BD3F7F998ED43D5FC4F8629DD0C188EC7DDAE0
        Validity
            Not Before: Nov  5 03:52:39 2025 GMT
            Not After : Nov 12 03:52:39 2025 GMT
        Subject: CN=690aca07-1d6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:18:5b:33:b7:9a:7a:a6:97:c6:b6:e4:e7:43:
                    a8:bf:79:6f:e9:27:fd:92:7b:c1:77:c1:ad:1a:97:
                    fb:ea:1c:aa:fc:77:99:40:41:b3:96:5f:19:58:75:
                    b8:2b:2d:e1:4d:34:7a:d5:67:1b:9b:a7:a2:11:a4:
                    16:b6:5a:2b:e5:5b:3b:0e:b7:53:a4:76:8a:66:b6:
                    38:d9:a9:e8:9a:16:bd:2f:12:2a:94:7d:80:d3:b9:
                    fe:59:23:d7:ec:09:63:2e:d8:b9:d0:b0:9d:b6:f3:
                    0f:05:12:5c:62:35:b8:39:09:66:77:f1:dd:b1:74:
                    50:a5:b3:53:47:d8:e9:98:da:93:34:9b:ff:12:a0:
                    91:49:6d:8c:8b:77:ca:8d:5a:43:bd:8b:a0:18:f1:
                    c6:0c:99:be:d7:99:f5:57:49:0c:40:41:da:23:38:
                    74:2e:5d:04:5b:8b:71:5a:3a:17:af:27:c7:d7:a0:
                    87:fa:f8:75:42:7c:5f:4d:2b:1e:07:99:19:cc:a9:
                    84:65:e5:c4:4f:2f:4b:75:25:79:8c:d2:d5:a1:c8:
                    88:c3:51:ef:9a:9a:fc:8c:05:50:bf:dc:e3:7d:04:
                    ae:2e:eb:f8:21:a7:98:e0:c8:de:d4:37:61:25:b1:
                    d2:b1:ac:76:87:b7:25:4b:9a:12:61:ac:26:3c:91:
                    b6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:15:27:EF:52:A3:F8:DB:8B:FE:85:C2:D1:9C:B5:94:9C:05:0A:F4
            X509v3 Authority Key Identifier:
                keyid:20:BD:3F:7F:99:8E:D4:3D:5F:C4:F8:62:9D:D0:C1:88:EC:7D:DA:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IL0_f5mO1D1fxPhindDBiOx92uA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:8c:85:2c:b9:f3:c3:e0:73:a4:65:1e:8a:68:86:8e:e3:42:
         fb:1b:17:8f:5e:45:0b:e5:08:dd:cd:12:36:65:67:7a:c2:75:
         6a:96:33:74:19:06:a8:a0:4d:e4:c5:f8:b1:51:c5:67:46:8d:
         78:bb:0e:3e:48:76:0b:ce:da:c9:bc:f6:b9:8e:98:f5:d8:bb:
         fa:08:13:44:31:b9:a6:85:34:25:1f:c9:84:2c:c6:65:37:49:
         86:6f:e5:a8:de:09:db:b7:1c:02:20:af:c2:6d:7a:66:94:79:
         3b:ed:b4:25:1e:3b:7b:46:04:d6:c2:8d:1e:85:c0:cd:ac:dd:
         36:56:20:db:19:36:f4:3d:e3:76:a9:11:a1:44:0e:1f:b7:86:
         e3:84:69:d3:74:c1:10:5f:ab:27:a0:40:95:dc:db:8a:fa:1f:
         b6:8d:8e:4e:b6:ab:ad:7f:ac:84:bf:5a:89:f1:32:87:c1:a5:
         32:74:b3:8e:20:bd:a6:c6:44:4e:c6:c2:e0:11:9c:74:12:af:
         3c:0a:03:44:d0:28:f8:0f:bf:e2:36:ba:49:85:ea:66:3e:b6:
         aa:cb:8e:80:50:f8:73:de:a1:55:dc:80:6a:c5:3c:0f:3e:fe:
         cf:62:54:6d:fc:68:e3:8d:8f:06:5e:b9:31:64:d0:82:c1:b9:
         87:94:8b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:49:36 2025 by rpki-client