Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.mft
File:                     N-A1JLWEfb6tAP43jEar0MpwRfg.mft (raw, json)
Hash identifier:          TPU7aahn2YvGPO6xfCbk5jf9Xw9rY2joA3GhtFvhm/4=
Subject key identifier:   CA:80:20:4E:B8:7C:3D:58:32:4D:AE:DB:AC:41:10:89:EE:87:9A:C2
Authority key identifier: 37:E0:35:24:B5:84:7D:BE:AD:00:FE:37:8C:46:AB:D0:CA:70:45:F8
Certificate issuer:       /CN=A91799A0/serialNumber=37E03524B5847DBEAD00FE378C46ABD0CA7045F8
Certificate serial:       0403
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-A1JLWEfb6tAP43jEar0MpwRfg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.mft
Manifest number:          03F3
Signing time:             Wed 05 Nov 2025 00:36:22 +0000
Manifest this update:     Wed 05 Nov 2025 00:36:22 +0000
Manifest next update:     Wed 12 Nov 2025 00:36:22 +0000
Files and hashes:         1: N-A1JLWEfb6tAP43jEar0MpwRfg.crl (hash: V0fKxSk3hSH5z5AlDJN7zZge0Tcbx/IPjV+HCl29M8s=)
                          2: 99C173847DA711EFBC48DB25C4F9AE02.roa (hash: WOIniZiHfKK2LXS4UqzBre9hhY37jz+wS/A1b1+/uig=)
                          3: B0A47CAE7DA711EFB7190E26C4F9AE02.roa (hash: sWYV6f6Mq/gOtK8jl6qm1FHDusM3lQd7MnyI98UBc+A=)
                          4: 46A569387DA911EFAC4E642AC4F9AE02.roa (hash: OW6cdcKORRWUDvnbMhKStDDiNQb7XK3dKBXO16VeQlo=)
                          5: F39CE41C7C3811EFBF44AF4FC4F9AE02.roa (hash: mzXsIviLzqNFssHWjKdPxrfrQjIOrQyDdrnRheg5sAE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.crl
                          rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-A1JLWEfb6tAP43jEar0MpwRfg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 00:36:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1027 (0x403)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91799A0, serialNumber=37E03524B5847DBEAD00FE378C46ABD0CA7045F8
        Validity
            Not Before: Nov  5 00:36:22 2025 GMT
            Not After : Nov 12 00:36:22 2025 GMT
        Subject: CN=690a9c06-0b55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:cf:89:f6:2c:d0:f0:80:08:e4:72:1b:e7:e8:
                    ed:42:6a:92:3e:08:82:57:38:c1:74:59:6b:1d:e8:
                    18:6a:06:a8:cd:bf:17:1d:47:82:c9:ed:12:ef:95:
                    78:d1:47:be:13:73:6a:f1:11:a9:3c:18:bb:73:da:
                    16:fd:17:e0:37:9c:58:a0:89:0b:03:8e:87:e3:70:
                    0f:6d:05:4a:bc:b1:b7:4b:8c:3b:2e:75:44:a7:1f:
                    6b:54:8b:bd:7e:ff:18:90:70:62:58:f6:fd:ac:5b:
                    b0:47:15:dd:74:ce:60:44:01:f3:98:ec:75:1b:27:
                    09:70:f6:54:e3:03:98:62:c7:4d:e4:55:85:82:12:
                    eb:ce:f6:4d:ce:1d:00:ed:53:23:15:70:18:8b:4b:
                    84:29:ec:00:67:5a:5e:14:ad:58:6f:96:7b:7f:a3:
                    64:5e:20:5f:62:39:f5:c9:b0:07:95:d7:27:bd:08:
                    2e:24:a8:09:cd:27:fd:df:63:37:70:a8:d4:1a:52:
                    6f:cf:d7:3a:09:cb:9e:ad:e8:d2:fc:dc:06:70:ba:
                    5d:3d:ef:fb:21:54:98:19:8c:8e:40:6d:4f:1a:eb:
                    6b:8c:92:a9:39:82:65:06:d9:9f:ae:98:d0:e5:f4:
                    52:2a:df:d3:08:57:a5:9d:f5:b7:87:3a:88:a0:89:
                    fb:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:80:20:4E:B8:7C:3D:58:32:4D:AE:DB:AC:41:10:89:EE:87:9A:C2
            X509v3 Authority Key Identifier:
                keyid:37:E0:35:24:B5:84:7D:BE:AD:00:FE:37:8C:46:AB:D0:CA:70:45:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-A1JLWEfb6tAP43jEar0MpwRfg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:83:e1:ea:16:9f:41:db:b7:80:e7:ec:c1:29:43:47:30:0d:
         0f:f3:c7:f7:65:8d:a8:94:54:93:ba:70:66:08:17:f2:fa:5b:
         05:99:7c:2a:70:86:db:2f:63:63:6b:d1:b4:7e:e7:f3:47:21:
         5d:d3:c7:44:2f:41:94:5f:dc:f1:19:8c:45:b6:76:d8:48:97:
         8b:ea:62:45:a7:f5:66:6b:74:19:6a:47:43:24:dd:28:25:e4:
         56:f6:59:06:08:43:a3:ee:aa:50:06:67:8e:36:26:07:c7:4b:
         6c:27:68:e3:fa:e6:92:7f:41:78:54:3b:1f:a9:9b:fd:62:63:
         21:97:29:e5:63:14:d7:db:59:8a:3b:68:ea:9f:71:48:cb:b7:
         cc:49:d8:77:d7:02:8b:60:95:fd:75:f3:77:2a:92:67:81:a9:
         f3:80:95:48:bd:de:68:82:5b:68:5b:04:e0:57:0f:60:9a:1c:
         83:13:6a:6a:24:bd:00:91:c1:45:ee:95:c2:18:7b:b1:00:54:
         9b:77:df:d3:7f:6e:d3:10:80:b7:50:a8:74:b4:23:43:54:04:
         28:83:3f:f8:df:7e:b4:62:37:bb:09:70:cb:45:bd:9b:dc:11:
         c7:73:ae:52:b2:3f:ff:6f:85:f4:04:bb:43:15:0e:bd:7f:cf:
         7b:96:68:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:49:27 2025 by rpki-client