Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.mft
File:                     at4O10LYxa-hMzuQNYwGs_6HaIM.mft (raw, json)
Hash identifier:          eV5aBFhXdif4LPwZajc6wLcHy/5RlRXfTNxzz0dSW2U=
Subject key identifier:   F9:7E:4B:92:8D:D6:3B:F5:02:49:83:ED:25:D6:9C:E9:CA:95:35:FE
Authority key identifier: 6A:DE:0E:D7:42:D8:C5:AF:A1:33:3B:90:35:8C:06:B3:FE:87:68:83
Certificate issuer:       /CN=A911C356/serialNumber=6ADE0ED742D8C5AFA1333B90358C06B3FE876883
Certificate serial:       0767
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at4O10LYxa-hMzuQNYwGs_6HaIM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.mft
Manifest number:          075A
Signing time:             Sun 02 Nov 2025 21:39:19 +0000
Manifest this update:     Sun 02 Nov 2025 21:39:18 +0000
Manifest next update:     Sun 09 Nov 2025 21:39:18 +0000
Files and hashes:         1: at4O10LYxa-hMzuQNYwGs_6HaIM.crl (hash: nLsqqv6LtQVTlWPpVBWlHNalRWzU9t8+oDDlQwGcIqU=)
                          2: 68894B22402811EB91B49250C4F9AE02.roa (hash: IQPXsBjrCF2xQwF3Cbjloney1bFO9XCueS1DA232hlU=)
                          3: 86BED34677F011EB9E69B472C4F9AE02.roa (hash: j7nBCo//segTbSYNY1h0+pWssVZ/bx4SZszp4wl16ww=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.crl
                          rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at4O10LYxa-hMzuQNYwGs_6HaIM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 21:39:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1895 (0x767)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C356, serialNumber=6ADE0ED742D8C5AFA1333B90358C06B3FE876883
        Validity
            Not Before: Nov  2 21:39:18 2025 GMT
            Not After : Nov  9 21:39:18 2025 GMT
        Subject: CN=6907cf87-6f09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:28:53:e0:54:84:ed:f1:bf:e6:40:c1:5d:75:
                    1a:5a:6f:cd:84:a8:a0:12:4a:7c:52:c1:6d:1d:c4:
                    7b:d3:8e:9c:bb:ae:77:0c:e7:17:f6:7a:fc:00:88:
                    db:2b:a6:ab:40:c8:24:3a:e2:50:68:09:95:87:26:
                    72:a8:98:b6:85:d8:1f:76:55:c9:fa:e6:06:77:a9:
                    bd:35:89:3a:13:32:fb:35:7d:37:f7:62:27:1f:dc:
                    8b:93:11:10:fe:29:a0:67:5c:f2:dd:50:eb:3d:74:
                    b6:13:34:13:e7:44:2f:fc:3e:8e:2c:69:76:db:88:
                    37:8a:b2:a1:56:44:6c:87:9f:18:3b:a4:b3:3d:c0:
                    4f:da:a5:ee:f3:c6:91:ff:d9:8c:14:78:e5:af:65:
                    5d:f0:ad:f3:2e:2c:6a:0d:a7:4b:27:69:b6:1e:c7:
                    b1:34:01:35:3e:12:a1:76:d0:39:50:88:66:42:21:
                    fd:fd:a8:27:b5:ae:3b:83:11:a6:17:ad:d9:95:33:
                    58:60:40:d7:70:69:ab:f3:97:80:b6:db:da:59:00:
                    e6:f5:30:2a:5d:21:5e:32:52:0c:cb:7b:61:e9:dc:
                    17:a3:06:6f:8d:99:d7:63:2e:4f:b9:7e:2a:ed:43:
                    a4:4c:cc:4c:80:23:db:20:3d:d7:37:95:56:89:0d:
                    a9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:7E:4B:92:8D:D6:3B:F5:02:49:83:ED:25:D6:9C:E9:CA:95:35:FE
            X509v3 Authority Key Identifier:
                keyid:6A:DE:0E:D7:42:D8:C5:AF:A1:33:3B:90:35:8C:06:B3:FE:87:68:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at4O10LYxa-hMzuQNYwGs_6HaIM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:db:c3:db:bf:d4:82:10:af:78:cc:b2:6b:b8:3c:0e:2f:33:
         4a:c7:16:a0:10:75:fb:2a:80:0b:52:41:16:6a:a2:60:3e:33:
         d6:da:74:2a:2a:d0:d9:7b:e0:5b:7d:25:5a:0c:e2:5d:78:9a:
         ff:a8:e1:f3:50:40:17:e4:bd:96:1a:51:97:5f:7f:51:6b:70:
         02:20:17:ca:1b:5c:a3:00:aa:39:f2:7a:ae:b0:fb:ff:f5:1d:
         30:51:30:5c:ed:78:87:72:d8:c0:d2:e3:11:49:55:5e:ec:dd:
         43:f7:8e:79:0a:48:45:ce:a9:46:30:ac:83:25:e0:00:3f:cc:
         4e:2b:ff:c6:45:17:81:58:3e:2a:71:34:e9:96:80:a9:5d:2d:
         91:74:d1:30:a0:a9:bf:f9:2d:cf:0d:bf:21:84:ae:3f:4e:12:
         3b:73:39:1a:36:79:77:c5:d6:bb:31:f1:13:d4:a6:d5:e3:a2:
         e0:9a:f0:37:d3:29:f7:5b:b8:20:02:48:f2:71:34:63:48:43:
         c7:2c:4b:11:1a:70:8b:30:0c:6e:37:a7:f3:08:79:1f:65:5c:
         90:2a:0b:b0:33:69:e7:24:4f:9e:fb:7a:d4:92:24:a6:63:62:
         e7:bb:80:4f:2b:02:f7:81:49:1f:e5:39:4e:45:f9:de:18:64:
         07:3b:45:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:34:47 2025 by rpki-client