Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft
File:                     AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft (raw, json)
Hash identifier:          +1UwBiY3Xq7pbl8B7Fqr+F2Tk5AE/tmPW4z3Ku6YiOY=
Subject key identifier:   22:6C:83:15:06:7B:45:39:03:5D:A5:DD:1A:CB:68:C5:CC:BF:B6:6A
Authority key identifier: 02:15:50:2A:A8:FF:DC:72:1D:7F:84:F7:4C:D0:70:B7:56:39:00:16
Certificate issuer:       /CN=A91147EF/serialNumber=0215502AA8FFDC721D7F84F74CD070B756390016
Certificate serial:       09AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft
Manifest number:          09A0
Signing time:             Tue 04 Nov 2025 20:07:33 +0000
Manifest this update:     Tue 04 Nov 2025 20:07:32 +0000
Manifest next update:     Tue 11 Nov 2025 20:07:32 +0000
Files and hashes:         1: AhVQKqj_3HIdf4T3TNBwt1Y5ABY.crl (hash: lwQ7vGOsWrVChJ82eLawxJ5Qtr3uF8sRYuIoW+BFBSQ=)
                          2: 84D32F2AE32411EA800C6724C4F9AE02.roa (hash: DaSUtI7cCFZVDFGMxaMRlNVdC4PaCp9TfzAzL8z3Ug0=)
                          3: 38EC4D321F2711EB93A71042C4F9AE02.roa (hash: bvQWUn/Y7cckd5n8bfNYd/nHmrLV3J+fhc4s5WO5wQQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.crl
                          rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 20:07:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2479 (0x9af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91147EF, serialNumber=0215502AA8FFDC721D7F84F74CD070B756390016
        Validity
            Not Before: Nov  4 20:07:32 2025 GMT
            Not After : Nov 11 20:07:32 2025 GMT
        Subject: CN=690a5d04-da6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:dc:1e:8e:a3:86:6e:87:d8:33:aa:b5:3f:9b:
                    c6:58:d3:41:5b:3e:e9:ca:46:c0:db:4b:ff:a6:34:
                    24:1c:94:79:2e:00:49:8c:fd:37:1b:da:e1:64:0b:
                    60:ab:06:99:c5:0e:d7:7d:0d:a1:46:10:7d:e3:bd:
                    0a:98:27:77:50:23:a6:63:20:83:c2:0a:41:3b:32:
                    bc:df:0e:9a:3d:41:d4:dc:32:38:e8:bd:91:e4:2f:
                    dc:b6:ed:a4:ae:9d:87:8c:81:4f:2d:99:bb:63:8b:
                    0d:b2:a2:ae:1f:0e:f0:2d:4e:02:7b:7b:8f:3c:60:
                    58:cd:40:62:cf:f4:1a:92:6e:35:8a:db:f0:04:0b:
                    4c:19:9c:7f:e3:c1:74:5f:77:f2:fd:72:9c:cb:bb:
                    5f:db:65:36:3d:50:df:b6:20:1f:eb:be:1d:72:35:
                    df:4c:46:77:5f:74:e5:bf:0b:c0:af:9e:ec:5c:77:
                    7d:ca:22:ba:84:f8:c1:76:9e:9c:34:06:29:ae:50:
                    5d:d1:26:61:71:f2:ae:2b:1b:0a:71:55:17:0f:ea:
                    82:4f:b7:61:f3:f9:6b:a7:81:f1:b7:74:70:c3:41:
                    b8:38:a7:1c:25:85:4f:02:c7:9d:30:98:58:a7:c1:
                    22:89:d8:83:5e:b2:c8:71:9c:7b:07:2f:41:ff:63:
                    f5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:6C:83:15:06:7B:45:39:03:5D:A5:DD:1A:CB:68:C5:CC:BF:B6:6A
            X509v3 Authority Key Identifier:
                keyid:02:15:50:2A:A8:FF:DC:72:1D:7F:84:F7:4C:D0:70:B7:56:39:00:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:81:d6:06:15:52:a1:ef:d7:9d:42:01:27:32:87:9a:34:04:
         8d:0a:ad:b3:bf:10:4e:d7:b9:4d:f5:19:84:37:89:35:ed:d6:
         c3:ec:46:ae:ae:fd:81:b7:c9:30:f3:5c:4c:73:12:9a:88:e2:
         43:4d:ed:28:f5:ef:6b:ac:24:69:de:ac:6b:77:0d:a2:be:cf:
         0c:62:67:74:a6:d8:fa:d5:08:08:22:26:a6:29:07:e1:a0:35:
         2f:22:7b:47:24:9a:87:a4:e6:d4:a9:0e:fd:ef:76:f6:de:63:
         47:fa:2d:43:4f:3e:28:22:53:5e:31:38:95:bd:24:0d:79:7d:
         66:92:e0:6b:99:ff:f9:b9:81:65:d2:d0:46:53:01:42:9e:b0:
         26:83:3b:96:42:d7:bd:58:6a:69:12:4c:02:eb:c8:4c:c2:0a:
         a8:b5:fc:d7:4e:3f:e3:db:e4:43:14:2d:e4:13:47:f1:eb:1b:
         97:fb:2f:93:af:a1:69:75:98:bf:07:dc:91:67:02:6c:44:31:
         eb:7b:4d:8a:20:9a:0a:fe:d4:7f:37:62:66:ff:a7:32:7f:d5:
         d1:83:39:ee:18:84:33:f8:3d:43:69:55:8a:21:60:53:8d:79:
         9c:d7:e5:5c:4f:fa:69:0b:94:e8:69:e8:af:be:31:ae:00:b3:
         3c:49:c8:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:42:32 2025 by rpki-client