Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/diAma5iRohjA5fLvKI94LVcX8rw.mft
File:                     diAma5iRohjA5fLvKI94LVcX8rw.mft (raw, json)
Hash identifier:          94F11nzX1INsxpEPgqTTtW+ylgtQh6qUvp2SBFCtCjA=
Subject key identifier:   AC:2D:AE:94:D9:E4:BA:F5:4A:0C:EC:37:DD:01:E4:6E:06:6D:30:E3
Authority key identifier: 76:20:26:6B:98:91:A2:18:C0:E5:F2:EF:28:8F:78:2D:57:17:F2:BC
Certificate issuer:       /CN=A911E660/serialNumber=7620266B9891A218C0E5F2EF288F782D5717F2BC
Certificate serial:       98
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/diAma5iRohjA5fLvKI94LVcX8rw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/diAma5iRohjA5fLvKI94LVcX8rw.mft
Manifest number:          97
Signing time:             Mon 03 Nov 2025 06:26:24 +0000
Manifest this update:     Mon 03 Nov 2025 06:26:23 +0000
Manifest next update:     Mon 10 Nov 2025 06:26:23 +0000
Files and hashes:         1: diAma5iRohjA5fLvKI94LVcX8rw.crl (hash: 4V3xtiU2So/4FH2UvTymFb7jglCwi690ipi8ek7IWUw=)
                          2: 4ECE44B0D24311EF919B6D12C4F9AE02.roa (hash: HTX8AzlBVBkYFaGVRN5GWHgC9HxdFLqil4uBj/GLN6g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/diAma5iRohjA5fLvKI94LVcX8rw.crl
                          rsync://rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/diAma5iRohjA5fLvKI94LVcX8rw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/diAma5iRohjA5fLvKI94LVcX8rw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 06:26:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 152 (0x98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911E660, serialNumber=7620266B9891A218C0E5F2EF288F782D5717F2BC
        Validity
            Not Before: Nov  3 06:26:23 2025 GMT
            Not After : Nov 10 06:26:23 2025 GMT
        Subject: CN=69084b0f-dfb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ea:03:39:df:e0:8a:6d:c3:d7:13:86:0e:4b:
                    55:9f:c4:22:46:52:a3:6b:f0:0f:37:5b:20:2a:09:
                    f1:91:ad:e7:e0:7f:2a:d5:20:72:31:e8:74:ae:28:
                    05:4c:ab:c6:61:7e:44:6a:38:21:7d:7e:91:eb:74:
                    b5:08:11:f7:f9:3a:d7:7e:e5:71:ee:1f:ea:f7:00:
                    9f:20:c7:e0:4c:d1:27:b3:5f:e3:12:47:2a:7b:5b:
                    c6:a9:3c:1a:07:83:c6:c1:2f:37:f2:16:9d:3b:1c:
                    2d:b1:7a:d5:bf:da:6b:08:5b:97:1c:e9:48:69:c2:
                    4a:1d:2b:d8:7f:5c:18:ed:11:41:33:71:2a:1e:94:
                    cc:e5:35:0f:6d:7d:88:c0:fd:78:6e:18:22:f7:e4:
                    4d:d0:6f:0a:11:5a:4c:0b:5b:ca:6d:fe:1c:c0:b0:
                    1e:f0:49:68:fd:01:32:9f:67:ed:91:d6:de:6c:e5:
                    1c:79:ab:4e:47:7e:77:92:18:e8:9a:da:d1:c4:59:
                    6e:79:82:3a:ab:43:46:ab:57:ed:92:e3:2e:7f:e8:
                    0e:09:04:1f:e0:9e:84:fb:32:7b:60:a1:a9:ef:93:
                    eb:dc:b3:73:23:58:75:c8:d6:5a:9c:c6:02:c7:ab:
                    9b:2e:4d:b9:93:a5:91:f9:9d:f9:c3:59:1c:52:11:
                    99:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:2D:AE:94:D9:E4:BA:F5:4A:0C:EC:37:DD:01:E4:6E:06:6D:30:E3
            X509v3 Authority Key Identifier:
                keyid:76:20:26:6B:98:91:A2:18:C0:E5:F2:EF:28:8F:78:2D:57:17:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/diAma5iRohjA5fLvKI94LVcX8rw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/diAma5iRohjA5fLvKI94LVcX8rw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/diAma5iRohjA5fLvKI94LVcX8rw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:82:34:1c:2b:01:24:30:e4:df:79:91:11:e2:a1:2e:44:a3:
         0b:0f:cf:da:3a:48:67:bd:46:95:8b:00:58:b5:64:db:d2:72:
         0a:83:ec:e3:d7:57:ff:9e:06:8e:23:f4:9a:51:03:d4:f7:7e:
         83:84:9f:9c:f0:0b:b9:f1:fd:fb:44:a7:57:bb:ff:cb:f0:fd:
         08:1c:d1:51:83:89:be:55:b4:cd:58:5c:b3:66:ba:f3:03:85:
         f8:de:3d:9d:03:0f:96:9e:aa:13:17:74:2e:08:51:eb:d3:80:
         5f:59:d2:77:04:a3:34:a9:fe:ba:ff:2d:cc:47:e6:d8:26:ce:
         c2:61:3b:5d:63:3e:c8:2e:8a:7f:9c:e0:6b:9f:78:8c:db:85:
         ed:27:68:2e:64:0d:78:09:1c:d4:d4:5d:6d:d5:91:73:48:b1:
         a3:22:16:62:bb:7e:c5:c3:2a:5b:6c:ab:7b:6e:3f:a5:ff:fb:
         76:e4:27:5b:e8:41:26:cc:ae:68:15:62:a8:2a:e3:4c:f2:24:
         1a:b6:53:97:bf:2d:16:73:4b:19:be:5d:04:04:78:82:65:71:
         0d:f4:e5:67:85:3f:a2:00:cb:1a:2f:fd:d3:bb:d6:30:b2:18:
         a1:75:13:45:11:bc:63:17:6d:1b:02:4d:17:52:b7:2e:ec:81:
         ce:c6:ad:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:18:16 2025 by rpki-client