Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.mft
File:                     rdsr88QYJtbQ--jSvy8FLZil2Uk.mft (raw, json)
Hash identifier:          kPf5aQ66zLpAygUKcY9ouxgyHERneeBm2qWE56/MSms=
Subject key identifier:   91:59:0F:96:46:AB:F1:04:A5:3E:6F:3D:1A:48:A6:59:C5:4E:0B:4B
Authority key identifier: AD:DB:2B:F3:C4:18:26:D6:D0:FB:E8:D2:BF:2F:05:2D:98:A5:D9:49
Certificate issuer:       /CN=A91689C8/serialNumber=ADDB2BF3C41826D6D0FBE8D2BF2F052D98A5D949
Certificate serial:       76
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdsr88QYJtbQ--jSvy8FLZil2Uk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.mft
Manifest number:          0285
Signing time:             Mon 03 Nov 2025 02:13:50 +0000
Manifest this update:     Mon 03 Nov 2025 02:13:49 +0000
Manifest next update:     Mon 10 Nov 2025 02:13:49 +0000
Files and hashes:         1: rdsr88QYJtbQ--jSvy8FLZil2Uk.crl (hash: TkPP007UyJ7IEMElpAHi/V7ak7w5nNWkmczNKJMl4so=)
                          2: 3BB70A86092211F08BA72686C4F9AE02.roa (hash: lvQ8BAOEHHI1X0qXH/UaJKBYn5+t8IOjYcFWQGKElqA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.crl
                          rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdsr88QYJtbQ--jSvy8FLZil2Uk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 02:13:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118 (0x76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91689C8, serialNumber=ADDB2BF3C41826D6D0FBE8D2BF2F052D98A5D949
        Validity
            Not Before: Nov  3 02:13:49 2025 GMT
            Not After : Nov 10 02:13:49 2025 GMT
        Subject: CN=69080fdd-e418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:94:06:03:03:4e:90:24:3a:ae:48:4a:3a:48:
                    5f:fe:72:ed:4e:b0:49:bf:c8:72:24:f5:78:ef:c4:
                    41:20:97:3e:87:f7:18:07:7e:45:dc:66:2c:cc:1c:
                    de:83:d2:4c:de:33:6d:db:85:21:69:a9:96:03:7c:
                    2e:c6:3b:1a:5c:0d:b7:03:44:7a:94:6d:3d:ab:ef:
                    77:f1:b3:13:a9:3e:23:40:48:a2:7e:7d:a2:76:fa:
                    74:96:6e:f7:6b:ae:51:86:d9:ef:ae:46:ac:fc:84:
                    47:ad:bc:85:5c:1a:4e:7a:61:3b:a3:fc:e1:47:8c:
                    0b:2d:82:52:a8:07:1a:d9:15:28:b2:4a:b9:f9:a8:
                    e3:9d:d1:fa:9e:9a:72:c0:69:0c:db:b1:7e:90:4a:
                    5f:e3:bf:20:e4:77:d4:02:6e:4c:50:5a:ff:81:92:
                    77:72:5f:be:35:18:43:b2:39:37:d4:78:18:65:a8:
                    e8:47:b9:df:4c:9e:f8:f4:10:65:3a:b0:52:06:d3:
                    b4:36:4e:e3:06:15:49:d4:a8:d6:81:d1:e1:e3:65:
                    54:76:ce:d7:bb:1b:06:4a:5c:f9:e1:f9:43:40:1e:
                    3c:2e:08:66:d0:be:b3:94:5f:18:f4:db:08:29:3c:
                    ef:8b:77:1d:ae:84:c1:86:d1:09:dd:60:16:4c:be:
                    db:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:59:0F:96:46:AB:F1:04:A5:3E:6F:3D:1A:48:A6:59:C5:4E:0B:4B
            X509v3 Authority Key Identifier:
                keyid:AD:DB:2B:F3:C4:18:26:D6:D0:FB:E8:D2:BF:2F:05:2D:98:A5:D9:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdsr88QYJtbQ--jSvy8FLZil2Uk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:44:b2:52:8b:c2:08:dd:93:4e:fd:d7:77:93:b3:39:f9:50:
         f7:39:21:ed:ca:d8:0b:5c:43:40:bf:50:ce:64:b4:a1:d9:b3:
         b4:e4:07:d1:da:8a:26:b9:fb:d1:ee:16:4d:42:29:1b:1f:45:
         2f:bc:c2:d0:b0:67:fd:dc:a5:e1:0c:f6:93:8c:2d:f0:7c:42:
         ee:c1:a0:eb:f6:3d:a5:70:fb:bd:b2:41:7b:fe:94:4b:68:fc:
         fa:19:35:d3:24:f8:fe:7b:64:45:5e:89:2e:bc:0c:c8:de:d6:
         7a:01:0f:c3:a5:e7:44:15:6a:2f:b8:ac:db:49:6c:19:6e:79:
         a1:06:d7:26:13:48:01:e4:3d:fc:5e:2a:37:a4:97:bb:89:50:
         6b:9d:44:01:d3:4e:ae:88:7b:b8:28:42:1a:73:76:95:5d:09:
         8c:8c:78:b8:3f:1e:cf:89:58:dd:85:ea:9f:94:d7:47:cd:c9:
         3e:a4:89:c6:3f:51:45:dc:8e:fa:47:31:19:53:16:20:6f:0f:
         9e:76:10:fb:88:22:df:49:09:3d:1f:11:6c:ee:3c:fd:42:71:
         48:d8:2a:56:92:30:37:aa:51:42:fe:89:cf:50:af:0f:81:c2:
         94:8b:81:ad:c7:e1:5b:0a:50:32:76:af:26:d0:d1:de:a7:7e:
         26:d6:11:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 08:18:27 2025 by rpki-client