Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.mft
File:                     sY6ktIaEpn3qATi6uiMwbQADzcw.mft (raw, json)
Hash identifier:          Gd925cJyJdRko/VvLLeahqVObfJ2qurGVlQDuYtTRuQ=
Subject key identifier:   86:80:3C:1A:73:49:D0:80:31:8D:86:2B:55:48:57:82:CE:85:E5:44
Authority key identifier: B1:8E:A4:B4:86:84:A6:7D:EA:01:38:BA:BA:23:30:6D:00:03:CD:CC
Certificate issuer:       /CN=A913EE77/serialNumber=B18EA4B48684A67DEA0138BABA23306D0003CDCC
Certificate serial:       0750
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY6ktIaEpn3qATi6uiMwbQADzcw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.mft
Manifest number:          0AE5
Signing time:             Tue 04 Nov 2025 19:29:28 +0000
Manifest this update:     Tue 04 Nov 2025 19:29:27 +0000
Manifest next update:     Tue 11 Nov 2025 19:29:27 +0000
Files and hashes:         1: sY6ktIaEpn3qATi6uiMwbQADzcw.crl (hash: n6APNoOS8jxoU9lHiigSZ9V1lxpza1l/GZJxBzqX6RU=)
                          2: A8D10944DEA511EEB7B9DC35C4F9AE02.roa (hash: F5nZUR683r0GHaN7PIQS7ScZ+hYmoRww/yUwHk4aoNk=)
                          3: A0A9FE74DEA511EE8F515632C4F9AE02.roa (hash: SjnLXmN7OQs2QJo93KJDaMm8uwo9AE2p0tGK7wMyelo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.crl
                          rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY6ktIaEpn3qATi6uiMwbQADzcw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 19:29:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1872 (0x750)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913EE77, serialNumber=B18EA4B48684A67DEA0138BABA23306D0003CDCC
        Validity
            Not Before: Nov  4 19:29:27 2025 GMT
            Not After : Nov 11 19:29:27 2025 GMT
        Subject: CN=690a5418-0500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:81:c8:c8:3d:10:d1:19:70:fc:4f:50:d4:20:
                    51:6d:fa:c4:af:ce:48:eb:07:e4:fd:8a:44:1b:fd:
                    e4:25:f7:32:f0:ec:5f:6a:45:6c:6b:fd:e1:c6:5c:
                    b3:7b:7b:cb:5f:cb:58:d7:db:16:87:0e:40:ea:17:
                    9d:66:9d:e6:be:4e:c1:46:8c:ee:5b:c6:ad:87:1f:
                    5a:c0:27:a8:b8:16:40:0d:38:29:00:28:f3:f5:5d:
                    ef:6e:e1:dd:5e:fa:d2:74:98:89:64:9b:d7:cd:43:
                    58:47:f7:78:7b:6a:43:89:46:5f:68:33:52:9d:56:
                    ee:2e:ff:a9:7a:c9:b1:75:0f:9e:2d:db:fc:7d:9a:
                    a8:f2:9e:94:ae:f0:6c:93:e9:43:8a:12:81:a1:f5:
                    c3:1c:45:e6:1b:bc:1a:bb:04:4d:5b:e9:9c:4f:bb:
                    1b:ea:db:98:e2:c6:2a:84:6c:5f:26:a5:70:ea:72:
                    39:a4:66:ec:17:21:76:4a:7e:67:05:ca:3d:d0:f8:
                    52:75:cc:6d:bd:4a:4f:39:cb:56:5a:22:ce:8c:11:
                    e8:fb:c1:a8:25:61:90:75:62:9b:d9:54:db:dd:ad:
                    c1:bd:d3:ea:d9:51:6d:d0:1b:21:52:08:38:2a:ee:
                    a9:eb:7b:9a:7e:60:e4:6f:cf:15:50:c6:8c:9e:02:
                    b7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:80:3C:1A:73:49:D0:80:31:8D:86:2B:55:48:57:82:CE:85:E5:44
            X509v3 Authority Key Identifier:
                keyid:B1:8E:A4:B4:86:84:A6:7D:EA:01:38:BA:BA:23:30:6D:00:03:CD:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY6ktIaEpn3qATi6uiMwbQADzcw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:96:ae:44:87:a1:b0:a5:81:c5:49:98:6f:c8:4c:44:a1:fb:
         ac:cb:6d:60:bb:3f:36:da:4e:c3:3e:b5:e4:ed:f7:8c:6b:b0:
         4d:f7:0d:7f:5d:f7:2a:f3:79:1c:51:5e:8a:9f:00:5a:89:eb:
         80:29:07:ca:6d:d8:4e:79:1d:3e:9f:bd:35:af:e1:f3:08:b4:
         b0:be:20:9a:40:ac:26:dc:cf:03:86:ae:bb:80:a4:df:da:4f:
         e7:a3:2e:f7:54:89:eb:0d:c0:b8:56:83:24:18:aa:3b:66:38:
         62:ba:b4:1b:41:c3:e9:0f:12:f7:f5:61:8b:5a:1b:37:83:2c:
         39:cb:01:25:8e:6c:2d:88:0c:93:dd:4f:0d:f1:58:5d:60:e8:
         a4:78:5c:cc:03:be:87:29:e8:eb:b5:87:7c:4b:55:23:27:38:
         68:05:9d:de:9a:1a:37:33:56:08:e1:e6:35:63:c6:db:14:bb:
         97:29:be:d6:7a:c7:1b:71:dc:bf:1a:c5:50:c7:86:f5:53:88:
         dc:78:a3:bb:f6:70:5e:ee:c3:ee:04:d8:ef:e1:95:6d:52:27:
         77:a9:d5:2a:a4:ae:83:cc:49:86:b3:49:67:82:c0:35:52:1f:
         e0:21:fa:d9:47:d1:77:1a:7f:1c:15:6f:9d:59:64:65:5e:c6:
         d3:bf:04:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:14:43 2025 by rpki-client