Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.mft
File:                     0X13ywyJuZTN2suidScKHnTcqic.mft (raw, json)
Hash identifier:          upkZIewqOnXgjROQXxRr8lD9aplLdysf2QXtJNkBILk=
Subject key identifier:   E2:A1:A5:8B:C2:E9:A6:8A:99:AC:2F:8D:45:4D:D0:03:7E:21:2E:78
Authority key identifier: D1:7D:77:CB:0C:89:B9:94:CD:DA:CB:A2:75:27:0A:1E:74:DC:AA:27
Certificate issuer:       /CN=A915D99A/serialNumber=D17D77CB0C89B994CDDACBA275270A1E74DCAA27
Certificate serial:       352E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0X13ywyJuZTN2suidScKHnTcqic.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.mft
Manifest number:          34FD
Signing time:             Tue 04 Nov 2025 14:26:36 +0000
Manifest this update:     Tue 04 Nov 2025 14:26:35 +0000
Manifest next update:     Tue 11 Nov 2025 14:26:35 +0000
Files and hashes:         1: 0X13ywyJuZTN2suidScKHnTcqic.crl (hash: qFowfds5lIplbQiAqpLkrplCFXPOppavAdjJvGNmuSo=)
                          2: 11D961427C0311EBB2F8C86CC4F9AE02.roa (hash: 3Bh09Zn6mFO5Oea9UBod6MtwVZcXpjm+mtSvhM63HUc=)
                          3: 75AB676E747811EDA48E0D52C4F9AE02.roa (hash: MBOQQXrS4Z//4O5DV7gxUdMmCgnG/RaWUrumSPw5Cnk=)
                          4: 76B90530747811EDA48E0D52C4F9AE02.roa (hash: +z4up47sitnxc0BGzrLhea39B00Ir9hVkkzOMtz9tBA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.crl
                          rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0X13ywyJuZTN2suidScKHnTcqic.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 14:26:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13614 (0x352e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D99A, serialNumber=D17D77CB0C89B994CDDACBA275270A1E74DCAA27
        Validity
            Not Before: Nov  4 14:26:35 2025 GMT
            Not After : Nov 11 14:26:35 2025 GMT
        Subject: CN=690a0d1b-9258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:03:7a:a1:00:48:0a:b2:50:c3:70:02:da:df:
                    db:3a:e4:59:e4:d9:4a:fd:9d:d0:8e:9f:79:d6:ab:
                    54:41:c4:63:70:29:9f:50:a8:5d:7e:83:2c:20:17:
                    b9:bb:dc:17:4f:93:23:db:a0:b2:79:e8:d4:79:68:
                    1c:31:60:3f:3b:b3:f9:50:cc:cc:9b:ad:5f:67:67:
                    4b:28:bf:49:41:93:83:63:e9:f8:b4:0d:2f:d9:11:
                    a3:b1:48:f9:5c:5d:92:0e:88:33:bb:9d:8e:46:8a:
                    f9:7e:09:ca:c8:6e:c5:da:0b:e6:5a:88:a7:b4:a7:
                    67:b2:50:76:ec:30:fb:9c:dc:5b:d7:fc:83:4a:3b:
                    11:1e:c1:d8:76:a4:d5:9c:ff:ed:17:2c:f1:35:15:
                    86:b7:84:82:de:ef:b7:41:6f:7e:19:fc:55:af:87:
                    ec:90:f4:76:06:6a:00:37:41:06:81:6f:65:f6:63:
                    32:ce:73:70:50:1e:90:18:b8:46:c4:12:06:bf:40:
                    e1:ce:55:ca:7c:38:f7:5e:e1:da:36:ba:06:97:90:
                    6d:0d:50:3d:40:47:f8:c9:25:f9:f7:31:4d:3f:b5:
                    e9:d4:27:4e:a3:ec:53:36:ed:9f:60:eb:d9:de:81:
                    53:ef:c7:cf:2e:25:d7:76:c9:07:dc:38:a4:f6:b6:
                    24:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:A1:A5:8B:C2:E9:A6:8A:99:AC:2F:8D:45:4D:D0:03:7E:21:2E:78
            X509v3 Authority Key Identifier:
                keyid:D1:7D:77:CB:0C:89:B9:94:CD:DA:CB:A2:75:27:0A:1E:74:DC:AA:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0X13ywyJuZTN2suidScKHnTcqic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:e0:a7:4f:d4:0f:98:ec:52:04:4c:72:47:73:fb:ad:81:ed:
         4e:71:3a:7c:f8:15:f6:9c:74:4b:20:a7:b2:b7:32:8c:07:b7:
         0b:6b:68:df:66:5f:1f:e2:c9:b5:81:e8:ff:e6:b1:9e:5c:03:
         48:cc:b3:99:5f:c8:61:33:dc:87:63:4d:26:e2:ce:fa:2d:af:
         7b:da:ab:4e:9e:16:c1:32:36:c9:70:17:94:7c:06:5e:17:01:
         8a:8b:e8:4f:f5:c9:0b:5a:d8:05:81:b7:27:7b:48:df:42:f6:
         5f:44:fb:9c:e1:db:87:d3:39:cd:87:b2:82:43:d0:51:60:29:
         98:68:5e:11:7b:12:c3:9f:ed:88:ee:92:74:61:9a:54:4a:0b:
         c4:f0:f8:3b:9e:44:27:de:26:bd:91:28:ae:95:7e:9d:5c:ae:
         3d:fb:7d:cd:ef:c3:cf:04:d6:0a:bd:bf:ac:2f:75:f0:da:91:
         96:63:51:7d:9f:e3:ca:72:2b:5a:b8:cc:73:70:ef:fe:59:67:
         fa:68:26:1f:04:37:69:9b:6e:05:8c:25:11:9c:b8:b4:68:fc:
         c3:c8:7e:19:58:93:87:e7:40:b3:2d:e5:db:ff:68:39:70:98:
         77:64:c5:50:67:fa:5f:e5:87:3b:26:f3:de:63:91:3a:c7:8a:
         71:78:fd:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:04:04 2025 by rpki-client