Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.mft
File:                     P7w69DECztpPoPf6m9kbLWU0bW4.mft (raw, json)
Hash identifier:          2ZYe2gaKGFxWNDB9L/MOvIIM6PuSdJUsNWNHSumlO0A=
Subject key identifier:   42:AB:06:1E:92:DC:3E:CD:E0:4C:33:71:94:03:3D:CD:92:70:5B:B9
Authority key identifier: 3F:BC:3A:F4:31:02:CE:DA:4F:A0:F7:FA:9B:D9:1B:2D:65:34:6D:6E
Certificate issuer:       /CN=A9161DF8/serialNumber=3FBC3AF43102CEDA4FA0F7FA9BD91B2D65346D6E
Certificate serial:       02AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7w69DECztpPoPf6m9kbLWU0bW4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.mft
Manifest number:          0279
Signing time:             Mon 03 Nov 2025 01:49:50 +0000
Manifest this update:     Mon 03 Nov 2025 01:49:50 +0000
Manifest next update:     Mon 10 Nov 2025 01:49:50 +0000
Files and hashes:         1: P7w69DECztpPoPf6m9kbLWU0bW4.crl (hash: 2J1MYWYvE1A7ElYiwPoHkJQ/zXDB+DO0eftjRk5JZSM=)
                          2: 845D92BAFC5111EFA8505536C4F9AE02.roa (hash: b6MhCI2q2jPGB8Vadu+OAGml/y/4nQ509qbcxbzKawM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.crl
                          rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7w69DECztpPoPf6m9kbLWU0bW4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 01:49:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 685 (0x2ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161DF8, serialNumber=3FBC3AF43102CEDA4FA0F7FA9BD91B2D65346D6E
        Validity
            Not Before: Nov  3 01:49:50 2025 GMT
            Not After : Nov 10 01:49:50 2025 GMT
        Subject: CN=69080a3e-db45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bc:90:04:cc:93:61:b1:04:66:a5:8f:47:a7:
                    a5:75:57:fd:64:8b:c6:d6:4f:46:10:d4:12:0a:2b:
                    60:ab:82:d8:da:4f:27:24:05:cb:bf:f8:b2:a8:5e:
                    49:c3:e7:12:d0:a5:c9:51:64:a4:2f:80:d7:b3:74:
                    d5:14:09:2b:c3:2a:6a:a7:62:0e:1b:23:30:1b:40:
                    99:5b:54:c6:9a:57:93:7d:aa:74:3d:85:e5:05:41:
                    b0:29:68:2f:b4:3f:f9:56:38:30:7e:d1:e4:56:13:
                    74:ce:51:54:14:40:f7:75:66:a8:f8:48:b1:bb:77:
                    8d:09:29:b4:d5:dd:7a:f6:e6:21:2a:9f:92:e5:1c:
                    0e:b2:cf:46:00:af:5c:e2:bf:cc:fa:52:97:b1:ce:
                    24:de:13:6d:33:96:ab:4a:8b:2d:a2:b9:a9:36:00:
                    e6:e3:4b:68:8e:a9:0c:39:49:50:46:63:f7:5c:99:
                    45:f0:1d:72:47:39:fc:a2:93:39:7f:fa:d1:b1:55:
                    05:f6:5b:43:0a:c4:68:8c:d0:86:28:18:8b:d4:ee:
                    8a:f2:b9:42:64:3d:9a:c8:b3:a4:b5:04:aa:54:49:
                    f5:91:99:e8:07:92:54:07:b3:95:03:8f:b0:29:72:
                    ca:ae:54:04:f9:43:91:54:f3:bf:eb:ee:26:80:18:
                    9c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:AB:06:1E:92:DC:3E:CD:E0:4C:33:71:94:03:3D:CD:92:70:5B:B9
            X509v3 Authority Key Identifier:
                keyid:3F:BC:3A:F4:31:02:CE:DA:4F:A0:F7:FA:9B:D9:1B:2D:65:34:6D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7w69DECztpPoPf6m9kbLWU0bW4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:58:59:e6:d4:d1:e2:ce:a3:d6:4c:20:4f:4c:49:9c:45:35:
         ad:18:40:4d:b4:02:07:c3:b5:6e:55:e0:dd:e8:4f:f3:62:82:
         db:8c:21:47:8a:e6:64:55:e2:58:54:92:77:32:0d:3e:47:b2:
         ec:08:71:f9:b5:2d:7d:f2:a4:db:54:c5:28:93:2c:42:1c:dd:
         2d:e6:da:c7:4b:ef:4d:b3:91:c2:a8:d0:02:d3:c0:b3:7e:1a:
         50:1d:9f:bc:e0:a9:07:90:58:c7:d1:f4:f3:2e:6f:4b:21:c1:
         0a:c3:16:ed:80:59:65:17:8f:5a:8f:21:7d:e6:cb:cf:50:c7:
         77:91:7c:58:fc:81:86:6e:37:93:05:93:ee:85:84:4e:69:3a:
         d8:d1:0d:98:59:f9:94:37:d3:91:61:55:35:b5:a4:90:3f:4d:
         11:36:7d:a3:bf:12:5a:1e:ac:1a:f6:08:c5:f6:da:87:d9:b4:
         85:76:5a:fc:c1:c0:44:f2:f5:10:0e:04:9f:ca:08:35:d5:6c:
         6c:77:83:2d:fc:5b:27:d8:0f:7d:12:b0:8a:a7:49:fb:9a:40:
         c7:60:70:3e:1e:84:62:01:69:21:74:4d:64:58:16:d1:98:60:
         58:ec:07:92:06:5d:12:e3:98:59:46:ad:4f:a5:68:bc:ac:07:
         eb:1e:c9:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 12:34:25 2025 by rpki-client