Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft
File:                     rYW34Ys6FvU-kpOKM07Guz64tjA.mft (raw, json)
Hash identifier:          B/5hKUCYX4hwIop5yS8lk6nMOde+0rLmYY5UK0KqaeE=
Subject key identifier:   33:D2:64:C1:A0:06:69:06:88:DE:2C:73:93:8F:54:A3:05:CD:BC:EA
Authority key identifier: AD:85:B7:E1:8B:3A:16:F5:3E:92:93:8A:33:4E:C6:BB:3E:B8:B6:30
Certificate issuer:       /CN=A913FBB2/serialNumber=AD85B7E18B3A16F53E92938A334EC6BB3EB8B630
Certificate serial:       01C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft
Manifest number:          01B8
Signing time:             Wed 05 Nov 2025 03:12:08 +0000
Manifest this update:     Wed 05 Nov 2025 03:12:08 +0000
Manifest next update:     Wed 12 Nov 2025 03:12:08 +0000
Files and hashes:         1: rYW34Ys6FvU-kpOKM07Guz64tjA.crl (hash: 7AsMtnQ/mD17RtXasTsktRC7TieHaWkpr4xbMbIj6q0=)
                          2: A9321C0A1B2A11EE84F40B3AC4F9AE02.roa (hash: p81EH8N+mq+tuXFMTqadpbhtGnx8x8sovmy9swXxzCM=)
                          3: A8C501F61B2A11EE84F40B3AC4F9AE02.roa (hash: GGQZQXITbCi35kDi1cszvpoNDF4GQHNFV1AYsPL4NFA=)
                          4: B97D647C1A8811EEB5AE963CC4F9AE02.roa (hash: NMwwqT5E6qjLfBlg6rE6vavEzETFOwEvTWR7gAiqQV8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.crl
                          rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 03:12:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 452 (0x1c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913FBB2, serialNumber=AD85B7E18B3A16F53E92938A334EC6BB3EB8B630
        Validity
            Not Before: Nov  5 03:12:08 2025 GMT
            Not After : Nov 12 03:12:08 2025 GMT
        Subject: CN=690ac088-cc73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:a7:b1:21:ab:6b:46:92:83:14:07:7d:d4:22:
                    c6:cd:ce:80:24:8f:1f:4e:eb:17:0f:a6:2e:18:d3:
                    7c:a6:08:3e:13:9e:e1:78:b4:2f:2b:98:02:97:33:
                    2c:5a:5b:85:87:a0:d4:6f:ff:7d:66:ee:83:2b:85:
                    3d:e2:00:37:45:49:d4:82:4b:2e:6a:12:ee:63:d4:
                    8d:9e:d2:12:36:12:6d:57:64:60:66:9b:0e:ea:b2:
                    0c:1e:37:fc:0b:d3:a4:2c:fe:50:a4:09:92:c3:80:
                    3e:0b:7c:3e:bd:fd:34:fd:d8:9d:6e:d5:f7:7b:58:
                    dc:a9:b0:a4:c2:4e:e8:ef:57:d3:f2:9b:cf:01:54:
                    27:36:d5:08:11:25:41:cd:b2:c5:55:43:36:1a:ea:
                    e4:50:e4:86:7e:68:a4:c4:b6:ce:79:ff:88:51:d8:
                    71:09:de:2a:8a:1f:c7:f6:49:0f:dc:ff:62:85:0b:
                    96:5a:cd:77:5f:80:38:65:9d:b7:38:32:5e:88:ff:
                    9b:fb:bb:2e:ec:95:6c:46:39:0b:34:67:91:81:27:
                    32:ac:66:71:bf:2d:aa:24:50:2a:ce:63:ec:b6:0c:
                    d1:86:57:99:ea:30:77:28:23:87:62:22:f7:f5:41:
                    ab:19:49:d6:d5:81:70:7f:39:5e:12:ff:0b:26:80:
                    38:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:D2:64:C1:A0:06:69:06:88:DE:2C:73:93:8F:54:A3:05:CD:BC:EA
            X509v3 Authority Key Identifier:
                keyid:AD:85:B7:E1:8B:3A:16:F5:3E:92:93:8A:33:4E:C6:BB:3E:B8:B6:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:29:33:6d:42:dd:ba:4d:01:91:e2:84:07:0c:90:b6:58:39:
         69:9b:71:13:ef:54:75:0f:0d:51:0f:e4:ad:c5:9e:ba:8d:e8:
         70:9f:80:ee:da:29:71:c0:84:40:a2:56:5d:b2:fc:be:59:f8:
         6c:72:e6:ee:16:72:f2:35:28:ce:3e:34:ae:2f:6e:6d:a8:72:
         01:94:a7:aa:1b:95:d3:ea:6f:85:00:69:42:b3:33:aa:56:a6:
         df:0d:bd:71:c7:f7:3d:80:61:66:6a:00:32:1a:be:e2:90:4e:
         71:25:e3:2c:40:36:bf:68:14:6f:ec:c0:c8:5c:48:49:f5:ab:
         ab:8c:a6:b4:5b:55:42:28:d5:df:ad:4d:f0:08:a7:8c:46:82:
         c7:ed:70:66:59:39:b2:98:08:5b:89:b9:30:8f:18:20:8f:8a:
         52:9e:b5:f7:b4:ad:a3:54:38:c9:2a:a7:80:f8:e3:c0:dc:79:
         81:40:d3:20:85:cb:34:a2:c8:50:d6:56:47:07:96:c3:8c:a7:
         a8:95:81:02:01:57:35:53:67:cf:7e:60:b9:69:a7:be:88:6d:
         35:c1:11:68:49:bf:dd:0b:36:b6:87:e2:ba:3e:5d:d9:83:f8:
         d4:92:69:eb:7b:0e:1b:68:d4:fc:c7:02:78:b0:45:71:91:3c:
         32:a9:1b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:19:32 2025 by rpki-client