Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft
File:                     lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft (raw, json)
Hash identifier:          8sT0SNr4NjF3bwTy9LRxS3J9amDMoZjTvbSdy4lVP6I=
Subject key identifier:   54:82:D4:06:7A:7E:3D:9B:F2:DE:D5:F3:55:AF:0B:06:CE:BB:64:C9
Authority key identifier: 94:5D:09:7F:22:63:D1:4C:36:B7:B6:5C:2D:C0:C2:5F:9E:E7:71:92
Certificate issuer:       /CN=A916DC92/serialNumber=945D097F2263D14C36B7B65C2DC0C25F9EE77192
Certificate serial:       0C95
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft
Manifest number:          0C83
Signing time:             Tue 04 Nov 2025 18:32:49 +0000
Manifest this update:     Tue 04 Nov 2025 18:32:48 +0000
Manifest next update:     Tue 11 Nov 2025 18:32:48 +0000
Files and hashes:         1: lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl (hash: aPX8kNtuw+gkdgBteIuD38NQGRpOKH7VRNHSmGOHx2A=)
                          2: CE15A7B409D911EA80E56E21C4F9AE02.roa (hash: KRpOoM5OBYozHGqs3tAj+O3jIxT+88DuqXNJ+j9YBFM=)
                          3: CCE5BAAA09D911EA80E56E21C4F9AE02.roa (hash: UK4U60eiGuCuztGWWVANU0DD3PkFQsjwpFntP06fM3U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl
                          rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 18:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3221 (0xc95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DC92, serialNumber=945D097F2263D14C36B7B65C2DC0C25F9EE77192
        Validity
            Not Before: Nov  4 18:32:48 2025 GMT
            Not After : Nov 11 18:32:48 2025 GMT
        Subject: CN=690a46d1-aead
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ae:b6:7f:f4:b4:1b:59:c6:a8:b5:a9:bc:55:
                    ea:e8:7b:62:e6:09:9e:e3:7c:55:1f:9e:d0:2b:af:
                    ff:b8:fc:80:2e:e1:a1:1c:45:fc:5d:03:ba:e8:69:
                    c2:47:8a:2f:82:08:61:0f:8c:b1:1d:20:ae:be:a8:
                    05:b7:91:ee:6f:09:77:fa:ca:de:43:ce:80:25:fa:
                    35:66:7d:fc:a1:c3:5e:df:99:4d:0f:39:47:31:51:
                    3f:c1:d1:39:e9:85:5f:da:49:53:91:13:21:03:70:
                    ab:b2:56:82:7d:6c:a1:3b:90:80:5c:54:b8:8d:60:
                    a8:45:cc:41:62:d3:9f:ca:36:aa:f1:02:11:09:ef:
                    18:5c:3c:60:36:5c:27:f6:3c:c9:48:ce:82:2b:c1:
                    16:2c:92:a5:0b:8e:21:0d:18:9b:1b:37:ee:b8:b2:
                    dd:cf:a7:b3:f7:5f:7b:40:61:8f:5d:52:ce:4e:5f:
                    c8:32:69:ab:cd:67:ab:a3:dd:d5:69:e4:5f:b1:b4:
                    50:89:77:b7:ca:db:6e:bd:a6:54:e1:c0:59:41:55:
                    1d:b3:da:40:12:5c:13:46:80:b4:b0:28:05:0c:d8:
                    cb:09:21:ef:1d:9f:fb:0f:37:9e:de:1e:8c:69:f5:
                    81:39:3e:14:cd:0d:28:8d:b2:29:6a:63:44:7f:87:
                    0a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:82:D4:06:7A:7E:3D:9B:F2:DE:D5:F3:55:AF:0B:06:CE:BB:64:C9
            X509v3 Authority Key Identifier:
                keyid:94:5D:09:7F:22:63:D1:4C:36:B7:B6:5C:2D:C0:C2:5F:9E:E7:71:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:50:5a:77:45:e8:c3:41:6c:ab:fb:64:ca:b8:a7:e1:60:4f:
         09:03:08:9d:f2:e5:32:10:4c:1f:20:7e:62:1a:46:4e:21:8d:
         73:19:d9:18:b1:ed:19:99:a5:8b:b1:fc:94:88:35:41:42:5d:
         8c:ea:ec:1e:80:c2:82:9a:ee:d8:52:17:12:84:a7:c6:5a:36:
         96:94:13:56:06:2b:0e:1e:2d:c8:db:28:b4:61:19:cc:36:1c:
         18:10:e7:01:29:cb:e7:06:75:d9:09:65:99:1a:5a:c9:72:09:
         92:ee:af:10:61:54:43:a6:c3:99:35:85:0c:a9:37:a6:66:b6:
         14:42:cb:68:6a:8b:19:3f:59:83:dd:05:b8:74:e9:cf:4e:46:
         94:d9:aa:00:1c:84:8a:72:1f:10:14:1a:03:55:c8:d6:f1:2a:
         4a:5d:d4:6e:d9:34:b8:b5:ee:a2:0c:b7:95:d3:ba:fe:d7:83:
         9d:66:ee:df:9a:dc:85:b7:af:b7:eb:91:98:d5:b2:eb:38:bb:
         99:2d:10:e6:66:01:f5:54:3d:1f:3f:16:7f:1b:27:9a:3d:cf:
         0f:0e:a9:da:e7:67:bb:c5:45:8c:85:ca:cd:08:e9:f8:44:7c:
         63:66:5e:68:3e:2f:60:26:21:b9:1c:f3:c2:5a:06:b3:39:c9:
         8a:8d:79:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:52:29 2025 by rpki-client