Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft
File:                     5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft (raw, json)
Hash identifier:          JQLyL0qL8x37NPYeN0tvne3oSaAzRFaW5aFkRQEzx4Q=
Subject key identifier:   54:14:15:EB:DA:6E:D4:9B:7B:FB:8D:15:9D:62:03:19:C7:7C:F8:D3
Authority key identifier: E5:67:2B:BF:18:C4:CF:EB:D3:F4:72:D1:3B:48:77:13:72:D3:4E:DF
Certificate issuer:       /CN=A9187313/serialNumber=E5672BBF18C4CFEBD3F472D13B48771372D34EDF
Certificate serial:       19B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5WcrvxjEz-vT9HLRO0h3E3LTTt8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft
Manifest number:          1999
Signing time:             Tue 04 Nov 2025 16:28:48 +0000
Manifest this update:     Tue 04 Nov 2025 16:28:47 +0000
Manifest next update:     Tue 11 Nov 2025 16:28:47 +0000
Files and hashes:         1: 5WcrvxjEz-vT9HLRO0h3E3LTTt8.crl (hash: ZV0kYxKJTmkOXzyyJdjJRH8PaDELr5XJ4zsZNiMkVtk=)
                          2: 98E572FC777011E7BF7EED10C4F9AE02.roa (hash: lV2/2NW27xVZaBILThpNeuepTXhQgC2yA5suVSBt5Mg=)
                          3: 9787989A777011E7BF7EED10C4F9AE02.roa (hash: /pOoncr1KzYRXYjLbZuRohrO0FiLH7LyekaH9trend8=)
                          4: 97F31854777011E7BF7EED10C4F9AE02.roa (hash: 7+Ks4jZyLMHPbzW7FZP/GDFbxrDItsZ+/jUs9u2MSic=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.crl
                          rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5WcrvxjEz-vT9HLRO0h3E3LTTt8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 16:28:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6584 (0x19b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187313, serialNumber=E5672BBF18C4CFEBD3F472D13B48771372D34EDF
        Validity
            Not Before: Nov  4 16:28:47 2025 GMT
            Not After : Nov 11 16:28:47 2025 GMT
        Subject: CN=690a29c0-f850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d1:51:24:e8:f9:a7:a5:bd:6d:60:0b:8f:78:
                    ac:2d:33:68:c6:72:20:a4:a8:ce:a2:b8:30:0d:58:
                    48:21:70:4f:f8:c9:d3:cd:ad:7f:3b:1a:85:aa:7a:
                    53:85:0d:c3:53:ce:6f:1c:9c:dc:20:bc:e8:b8:23:
                    39:71:d9:8c:c0:05:b1:22:31:4b:4b:75:4b:0c:d5:
                    58:43:9a:e6:83:62:9c:27:07:7d:91:f5:0c:24:13:
                    10:d4:44:cb:69:b1:b9:4e:cd:30:4f:ff:11:74:5c:
                    36:52:8b:d2:47:d2:c2:24:87:f5:7a:96:7e:3d:40:
                    11:50:e1:e9:9c:3d:fd:93:e2:ba:bb:5b:e1:ad:79:
                    b0:5e:f9:0f:ca:7f:16:ef:3c:95:d1:f2:9e:40:f8:
                    cf:33:fc:a8:a4:de:75:af:d2:33:47:c2:a8:08:45:
                    05:12:ca:1d:2a:0b:e1:7a:1e:ad:4c:19:e5:da:e4:
                    f6:c6:42:f4:20:50:80:00:2f:85:71:36:3f:fc:e5:
                    f1:09:56:17:c9:76:19:08:09:f5:15:b2:2b:59:ae:
                    aa:77:a0:b1:a0:fa:a3:6c:18:ee:1d:23:fb:e0:39:
                    e3:63:6a:d0:02:1d:5f:e0:b2:19:90:02:44:71:da:
                    c3:76:67:75:cd:ee:c0:74:2f:f2:be:5d:a2:b8:f4:
                    8c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:14:15:EB:DA:6E:D4:9B:7B:FB:8D:15:9D:62:03:19:C7:7C:F8:D3
            X509v3 Authority Key Identifier:
                keyid:E5:67:2B:BF:18:C4:CF:EB:D3:F4:72:D1:3B:48:77:13:72:D3:4E:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5WcrvxjEz-vT9HLRO0h3E3LTTt8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:07:85:f5:32:2e:6b:e9:3c:97:2a:15:05:85:12:2d:34:4f:
         cf:57:97:8f:b4:a8:e6:93:3c:14:2c:15:2b:2c:90:28:eb:ac:
         7b:5c:96:94:ce:9b:01:ed:ac:3b:44:37:dd:93:a3:5c:a6:be:
         1d:dd:b3:48:f0:27:6c:c1:e6:be:14:60:6d:66:7e:6b:1c:00:
         dd:02:89:f8:bb:64:74:f8:69:5c:c8:27:cf:56:43:d3:52:8c:
         8e:25:ee:7b:fb:3f:7a:43:9d:9a:ee:e9:e5:49:04:03:f5:af:
         04:3e:c5:27:9e:31:f5:4c:2b:c4:c5:59:0d:ce:e5:a4:99:57:
         48:e5:70:df:49:5f:df:58:77:95:8c:1e:06:a2:e4:18:22:2d:
         b7:9a:e8:b5:69:8c:1d:e6:d3:16:6f:f8:ea:2d:32:74:76:f4:
         a4:3d:fe:2a:84:fa:ff:82:9a:a3:49:bc:0d:6d:05:9a:81:14:
         de:3c:78:10:9c:6e:4e:33:fc:ef:78:8a:0d:d2:85:2d:35:f8:
         fe:d5:27:28:fb:46:be:dc:60:40:5a:bb:56:96:d5:67:0c:5b:
         23:42:2d:c4:f2:38:8d:de:e0:cf:0c:5b:e2:fe:55:66:2b:8f:
         ed:8e:01:8f:99:e6:16:01:01:58:fe:3e:b2:72:21:25:71:f5:
         24:92:20:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:04:29 2025 by rpki-client