Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/-tTGddk4luj3XW0tmNf6X-FIRLs.mft
File:                     -tTGddk4luj3XW0tmNf6X-FIRLs.mft (raw, json)
Hash identifier:          bm1Y555Kbw2Q1HPD5T4akrI9/GfcLt7Nk1tQCzc7CZY=
Subject key identifier:   6F:0E:BC:B5:99:F8:16:B2:7A:0C:1C:C5:5F:08:BB:F0:25:6B:27:2D
Authority key identifier: FA:D4:C6:75:D9:38:96:E8:F7:5D:6D:2D:98:D7:FA:5F:E1:48:44:BB
Certificate issuer:       /CN=A914882C/serialNumber=FAD4C675D93896E8F75D6D2D98D7FA5FE14844BB
Certificate serial:       0BA1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tTGddk4luj3XW0tmNf6X-FIRLs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/-tTGddk4luj3XW0tmNf6X-FIRLs.mft
Manifest number:          0B98
Signing time:             Tue 04 Nov 2025 19:06:18 +0000
Manifest this update:     Tue 04 Nov 2025 19:06:17 +0000
Manifest next update:     Tue 11 Nov 2025 19:06:17 +0000
Files and hashes:         1: -tTGddk4luj3XW0tmNf6X-FIRLs.crl (hash: FjfLxSoR7PL20l5Id7qQ1c4gxebJCb4y4dEECQR675w=)
                          2: 9AEB003836DD11EABDA48574C4F9AE02.roa (hash: 6AStLiXGFTbizy72srYzdt3NNVrbT13s0hjr9rc8KH4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/-tTGddk4luj3XW0tmNf6X-FIRLs.crl
                          rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/-tTGddk4luj3XW0tmNf6X-FIRLs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tTGddk4luj3XW0tmNf6X-FIRLs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 19:06:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2977 (0xba1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914882C, serialNumber=FAD4C675D93896E8F75D6D2D98D7FA5FE14844BB
        Validity
            Not Before: Nov  4 19:06:17 2025 GMT
            Not After : Nov 11 19:06:17 2025 GMT
        Subject: CN=690a4ea9-f74f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:86:14:94:f8:4a:7b:05:88:5b:78:b7:08:d6:
                    1c:24:2d:61:dd:ec:09:09:83:95:0e:63:f1:65:e0:
                    93:32:d5:f3:25:96:a8:aa:49:cf:41:5f:3e:a4:41:
                    ba:74:36:1f:7d:3c:c6:63:fe:58:cf:87:f2:1b:99:
                    7f:82:19:4a:3a:8d:97:de:e7:e7:a4:18:e8:40:4b:
                    fb:81:0d:29:c5:c2:23:41:19:02:cb:a9:80:b5:46:
                    f2:e1:09:bb:59:12:e8:d5:32:c3:d7:c1:1d:68:73:
                    5d:1d:a1:3f:18:5c:92:57:35:ac:23:ab:6a:61:bc:
                    43:21:19:4e:0d:3e:1f:dd:96:b8:b7:b2:1e:3c:60:
                    a4:4f:84:17:9b:e8:56:75:ef:60:51:ca:4a:f9:2e:
                    c9:26:39:be:b2:3f:0d:1c:73:ba:13:e4:4c:0f:60:
                    db:dc:d8:2a:91:ca:6a:26:da:4e:19:1a:f6:dc:bd:
                    1b:a0:33:b9:07:32:8b:93:ca:f5:74:98:13:40:ec:
                    0d:67:3b:4d:6f:23:78:57:26:83:e4:bb:80:d3:b9:
                    96:da:c1:0e:92:83:40:4b:d9:59:46:bf:33:4f:f6:
                    ee:64:f0:37:30:12:f6:5d:53:3b:45:a8:99:84:e9:
                    49:89:b5:15:b9:7e:10:cb:a0:c8:c7:d1:53:d8:e2:
                    dd:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:0E:BC:B5:99:F8:16:B2:7A:0C:1C:C5:5F:08:BB:F0:25:6B:27:2D
            X509v3 Authority Key Identifier:
                keyid:FA:D4:C6:75:D9:38:96:E8:F7:5D:6D:2D:98:D7:FA:5F:E1:48:44:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/-tTGddk4luj3XW0tmNf6X-FIRLs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tTGddk4luj3XW0tmNf6X-FIRLs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/-tTGddk4luj3XW0tmNf6X-FIRLs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:4a:96:86:01:42:c4:ef:1a:1a:cb:46:e0:c6:54:69:c0:a1:
         9c:b8:b8:9f:b4:71:7b:19:93:0f:bd:18:f8:8a:ac:84:40:98:
         0b:55:12:a3:28:07:a1:2f:70:88:97:f6:ca:62:d9:11:45:c9:
         6e:68:ce:99:e6:d5:d1:17:be:36:d0:a8:6c:2c:b4:09:0c:71:
         2c:b9:2a:1a:d5:52:d7:f0:d8:b2:4a:2c:36:07:33:4b:7a:c5:
         63:30:84:0e:b0:65:8d:48:28:4a:78:6e:6b:1c:7c:fb:a6:ec:
         9b:4b:58:13:83:93:22:a9:c0:fc:f7:66:e9:48:13:c8:0d:e6:
         a1:90:9c:88:ea:b3:d8:12:84:93:59:ae:8d:56:be:ae:14:d7:
         39:5e:0a:60:b4:43:b7:e3:46:72:e1:5b:8f:1f:55:35:08:60:
         ad:8f:4b:4e:cd:b0:d0:c1:60:ee:ba:a3:99:9b:d8:fd:49:71:
         10:f1:dc:ed:0d:a6:ab:45:51:52:e0:71:35:48:a6:49:73:b1:
         c9:5a:42:77:1f:52:83:55:a8:27:6b:6c:49:17:32:bc:88:90:
         33:ff:17:d8:43:df:62:51:8d:09:b1:13:36:6f:cd:39:10:04:
         02:2e:31:6b:10:1e:28:03:40:35:98:6a:c7:0b:f5:da:19:08:
         fa:c6:1b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:40:20 2025 by rpki-client