Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E369/0E2FB3C888D811ED9B85E548C4F9AE02/_hORwLImyM6_pKKtZpauS4K_fic.mft
File:                     _hORwLImyM6_pKKtZpauS4K_fic.mft (raw, json)
Hash identifier:          eiiK4lBMLskeH7/4d3e3MjigbsuHy8aeNQHQ2pyg6so=
Subject key identifier:   6F:36:C8:60:C1:A8:35:48:78:3A:15:D9:70:14:40:B4:37:83:40:F9
Authority key identifier: FE:13:91:C0:B2:26:C8:CE:BF:A4:A2:AD:66:96:AE:4B:82:BF:7E:27
Certificate issuer:       /CN=A911E369/serialNumber=FE1391C0B226C8CEBFA4A2AD6696AE4B82BF7E27
Certificate serial:       0220
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hORwLImyM6_pKKtZpauS4K_fic.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911E369/0E2FB3C888D811ED9B85E548C4F9AE02/_hORwLImyM6_pKKtZpauS4K_fic.mft
Manifest number:          0218
Signing time:             Wed 05 Nov 2025 02:19:09 +0000
Manifest this update:     Wed 05 Nov 2025 02:19:09 +0000
Manifest next update:     Wed 12 Nov 2025 02:19:09 +0000
Files and hashes:         1: _hORwLImyM6_pKKtZpauS4K_fic.crl (hash: 5LCfLuoBaILUyWlAMymvdDIAQSEeGmovtYcCmdVnnQw=)
                          2: 7369922E680A11EEA25B1D1FC4F9AE02.roa (hash: 24GbMLp8DMTZ3h6VXw3inwkNu/B522DsUckUsbm7BTg=)
                          3: 7AEB97D2A45011ED8AB8A437C4F9AE02.roa (hash: onrdwOUBSMf30DMB2gEtxkD8C7GCfvol8JynThaYBqs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911E369/0E2FB3C888D811ED9B85E548C4F9AE02/_hORwLImyM6_pKKtZpauS4K_fic.crl
                          rsync://rpki.apnic.net/member_repository/A911E369/0E2FB3C888D811ED9B85E548C4F9AE02/_hORwLImyM6_pKKtZpauS4K_fic.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hORwLImyM6_pKKtZpauS4K_fic.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 02:19:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 544 (0x220)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911E369, serialNumber=FE1391C0B226C8CEBFA4A2AD6696AE4B82BF7E27
        Validity
            Not Before: Nov  5 02:19:09 2025 GMT
            Not After : Nov 12 02:19:09 2025 GMT
        Subject: CN=690ab41d-cc47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:27:7d:51:fe:c8:6c:ea:f7:bc:af:11:f6:ca:
                    3b:fe:31:69:bc:12:5e:0f:c4:e9:12:11:56:eb:f2:
                    8a:3d:7e:2a:dc:09:5b:14:8b:a0:f5:f3:eb:38:9f:
                    75:6a:0f:ce:d3:51:7b:24:5d:5d:97:17:8a:34:93:
                    6b:97:4b:64:a6:61:14:13:a6:63:be:4e:77:ea:6d:
                    ba:27:3d:89:fa:6b:aa:52:81:43:48:a1:ec:57:8c:
                    9b:9f:82:ed:95:3b:80:99:bc:e8:d3:c2:2a:75:05:
                    fe:b5:f3:17:f2:2a:9e:a0:03:2b:9e:5d:c1:13:7d:
                    58:49:78:5e:2a:9b:d3:ff:6a:d9:c6:54:82:c6:59:
                    8c:38:b2:ad:a0:64:58:4a:95:18:28:76:ca:97:bd:
                    be:90:af:ed:bf:57:43:2a:e2:8d:60:b0:13:05:dc:
                    f4:11:d3:26:09:b6:69:bf:09:f3:d4:e4:67:19:e4:
                    fd:b9:e2:57:c9:2d:4d:49:90:ec:9a:3d:c7:6d:cd:
                    e0:79:3e:fa:85:b1:5a:ea:8c:05:97:94:32:dd:9d:
                    12:49:75:0d:b5:77:e4:da:36:c3:db:d7:99:c8:73:
                    48:e3:a3:37:21:2b:46:17:fc:a1:b2:92:cd:ea:ea:
                    6b:89:c2:c4:dc:6d:4f:99:0b:02:71:aa:56:9e:5b:
                    df:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:36:C8:60:C1:A8:35:48:78:3A:15:D9:70:14:40:B4:37:83:40:F9
            X509v3 Authority Key Identifier:
                keyid:FE:13:91:C0:B2:26:C8:CE:BF:A4:A2:AD:66:96:AE:4B:82:BF:7E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911E369/0E2FB3C888D811ED9B85E548C4F9AE02/_hORwLImyM6_pKKtZpauS4K_fic.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hORwLImyM6_pKKtZpauS4K_fic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E369/0E2FB3C888D811ED9B85E548C4F9AE02/_hORwLImyM6_pKKtZpauS4K_fic.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:ee:03:9c:eb:81:80:57:66:bc:10:b4:7e:03:e8:9d:60:05:
         e3:01:72:c8:1a:24:5a:de:ad:4a:e9:b7:15:e9:e0:4d:25:97:
         28:66:3b:d9:48:80:bf:ee:90:4b:fa:45:63:fb:96:0c:16:09:
         28:27:a1:88:b3:ed:ac:22:69:82:de:3c:a5:a7:07:bb:a7:3f:
         cf:50:95:e7:03:9e:23:d4:3b:51:df:cb:b3:ac:95:f5:57:71:
         6f:5c:5b:6a:b0:ef:1b:c7:23:3e:62:c7:22:9c:7b:4d:7d:1a:
         f6:50:cf:11:16:3b:41:37:f1:3f:bd:13:40:44:78:f5:61:6d:
         fb:6e:e3:03:70:58:4d:e3:ad:9a:90:39:2a:5e:71:26:f4:3f:
         f0:98:c6:dd:ed:0e:f8:61:0b:e9:49:f9:7e:a2:a0:6c:c3:3f:
         3a:3c:ca:fc:c9:ab:4d:bd:0d:40:a5:2b:da:cf:90:b1:3a:0b:
         ac:e9:52:6d:56:e5:c5:3b:db:78:d2:ab:62:ff:56:18:4a:09:
         c3:20:57:a0:88:b5:18:a0:61:de:cd:7d:b5:d3:c5:87:22:ef:
         3c:33:30:ae:77:85:08:5c:50:9f:73:fd:72:f6:64:e7:b3:08:
         a5:e8:2b:4c:64:48:72:e8:7e:18:79:c0:6f:45:13:f0:f9:dd:
         75:e2:f2:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:33:19 2025 by rpki-client