Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft
File:                     rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft (raw, json)
Hash identifier:          HBRy4rKrUBd4p3gAzRVKKaLuKlXqptI9yFaG2PG6o4s=
Subject key identifier:   F4:29:BB:A4:09:28:28:FE:7A:13:36:BA:0F:3E:5D:0E:BF:0C:81:11
Authority key identifier: AC:32:E9:9C:B0:92:E6:2E:3A:CA:18:74:63:DA:99:E7:3D:5A:AF:3E
Certificate issuer:       /CN=A917C23C/serialNumber=AC32E99CB092E62E3ACA187463DA99E73D5AAF3E
Certificate serial:       0789
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDLpnLCS5i46yhh0Y9qZ5z1arz4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft
Manifest number:          0774
Signing time:             Tue 04 Nov 2025 21:42:47 +0000
Manifest this update:     Tue 04 Nov 2025 21:42:47 +0000
Manifest next update:     Tue 11 Nov 2025 21:42:47 +0000
Files and hashes:         1: rDLpnLCS5i46yhh0Y9qZ5z1arz4.crl (hash: DlgDGT0twNWRqXpPSEiyVW0byRKAFm+kG1sUrREwWBE=)
                          2: D75EF2ACFB6D11EC8F56D760C4F9AE02.roa (hash: 2JXMW+fr45VK5sWZ5vPmZ3HpKXF1OtYxpAwUvK0JoOo=)
                          3: BA4B22643AC911EBB83D7F0EC4F9AE02.roa (hash: 49sLLzSLtNmidSVGS5udGErAMHHN/OeLE93kClICECY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.crl
                          rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDLpnLCS5i46yhh0Y9qZ5z1arz4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 21:42:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1929 (0x789)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C23C, serialNumber=AC32E99CB092E62E3ACA187463DA99E73D5AAF3E
        Validity
            Not Before: Nov  4 21:42:47 2025 GMT
            Not After : Nov 11 21:42:47 2025 GMT
        Subject: CN=690a7357-ad3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:6a:11:05:17:27:a6:72:83:31:95:e5:2f:e6:
                    87:8e:f2:ca:a6:8d:ff:24:d1:4d:75:43:fa:09:0c:
                    83:23:84:62:82:6a:c3:81:52:78:4d:b1:8a:69:f2:
                    f5:74:ac:13:3d:28:90:d1:5e:a6:58:f1:27:63:36:
                    ba:f4:22:c0:b1:b5:68:77:62:cc:0a:ae:1a:f6:13:
                    de:27:99:56:eb:91:f4:03:9b:58:8a:48:03:0c:04:
                    29:fe:a9:f0:74:3b:a5:ed:27:93:85:44:b4:cc:61:
                    4b:c9:64:81:2d:47:42:33:76:46:48:7a:b6:b2:bb:
                    08:61:ee:c5:33:f3:8b:70:39:b9:fa:a2:01:af:b8:
                    c9:3f:d9:36:a3:6b:3d:ff:93:29:80:f4:c8:33:af:
                    77:38:05:7b:20:2f:8d:14:05:17:1a:55:fe:9d:f8:
                    bb:c7:cc:d4:d3:6c:5a:98:30:7b:f6:fc:bc:25:71:
                    5b:06:9c:e1:07:fd:16:4f:09:78:8c:91:6d:cc:30:
                    94:8a:f2:c2:74:6a:c0:27:99:c4:6b:69:e6:c6:84:
                    b0:c5:98:21:b4:85:d8:03:11:14:58:f2:ce:85:d4:
                    fb:d9:d3:61:9a:89:91:d3:ae:8d:a7:e9:35:ae:8c:
                    bc:fc:f6:c4:f7:3b:cd:0b:ca:5a:06:4c:cd:bf:95:
                    9a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:29:BB:A4:09:28:28:FE:7A:13:36:BA:0F:3E:5D:0E:BF:0C:81:11
            X509v3 Authority Key Identifier:
                keyid:AC:32:E9:9C:B0:92:E6:2E:3A:CA:18:74:63:DA:99:E7:3D:5A:AF:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDLpnLCS5i46yhh0Y9qZ5z1arz4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:3f:16:15:92:ea:50:a3:fb:04:d7:fc:f1:e7:9d:ca:fd:52:
         61:b7:48:fe:0c:59:95:cb:50:16:10:2e:d6:65:b0:20:f2:eb:
         c0:09:33:7e:e3:91:a2:67:c6:71:08:94:d6:68:53:dd:fc:ff:
         87:aa:d7:12:69:cf:33:2f:e5:7a:c9:bd:9c:cd:c6:43:10:d0:
         55:c5:e6:9a:ad:6c:84:c1:c8:75:34:0c:d2:20:04:48:a9:2e:
         c9:38:8d:b1:31:cd:07:38:a5:2c:fa:ad:1c:91:ae:f0:a2:75:
         b7:31:13:0b:b4:ec:0c:37:2b:4f:bb:c7:87:29:f8:32:ea:09:
         bb:fa:13:d2:9f:ad:c0:9e:21:13:28:88:67:f5:4e:94:51:b8:
         b9:67:dc:d2:9f:bb:f3:2c:af:79:e5:14:69:b8:f6:2c:20:9e:
         ea:f6:9e:07:0e:47:2f:77:b6:95:e5:57:b3:6d:de:2d:84:a5:
         ec:00:99:67:bd:8e:69:84:28:a4:e1:8c:63:b5:60:d9:c6:bc:
         89:55:6b:1d:01:5e:68:59:25:7f:2e:9d:c5:37:7b:e5:8a:bb:
         e5:a3:c3:ab:c3:87:76:1f:88:04:50:b6:bb:0c:a1:85:52:ed:
         68:c0:75:9e:b7:4f:87:2d:df:16:b4:b5:74:e1:a8:fb:c5:cc:
         f6:1e:21:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:52:04 2025 by rpki-client