Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196E05/42955510CE5311EA8E8C924CC4F9AE02/f_vcP3eaj5llMF597lHmpsU1_7g.mft
File:                     f_vcP3eaj5llMF597lHmpsU1_7g.mft (raw, json)
Hash identifier:          Pg2GwelSN3MVXM7ZokpJvV4JTKt1YZYmlJjPj64PxU8=
Subject key identifier:   B3:81:F6:A9:06:34:AB:70:86:80:DD:4B:F4:23:75:FA:03:3A:BD:6B
Authority key identifier: 7F:FB:DC:3F:77:9A:8F:99:65:30:5E:7D:EE:51:E6:A6:C5:35:FF:B8
Certificate issuer:       /CN=A9196E05/serialNumber=7FFBDC3F779A8F9965305E7DEE51E6A6C535FFB8
Certificate serial:       08AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_vcP3eaj5llMF597lHmpsU1_7g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196E05/42955510CE5311EA8E8C924CC4F9AE02/f_vcP3eaj5llMF597lHmpsU1_7g.mft
Manifest number:          0898
Signing time:             Tue 04 Nov 2025 20:38:49 +0000
Manifest this update:     Tue 04 Nov 2025 20:38:49 +0000
Manifest next update:     Tue 11 Nov 2025 20:38:49 +0000
Files and hashes:         1: f_vcP3eaj5llMF597lHmpsU1_7g.crl (hash: H5ECxruo8Q0LteFqphkp7JHfmZQEpewqIQEb03rb0uU=)
                          2: B3C00B80CD6111ED9BB1B571C4F9AE02.roa (hash: V5jcjgetlbnk7x9/5rct/0OOideDO203n8tMpe2dU2U=)
                          3: EF76C18C071C11EF9CF42877C4F9AE02.roa (hash: b0gkk0UXeExFmNb0TkPJ6Q38Wf2CG+MunM5QM1uww30=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196E05/42955510CE5311EA8E8C924CC4F9AE02/f_vcP3eaj5llMF597lHmpsU1_7g.crl
                          rsync://rpki.apnic.net/member_repository/A9196E05/42955510CE5311EA8E8C924CC4F9AE02/f_vcP3eaj5llMF597lHmpsU1_7g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_vcP3eaj5llMF597lHmpsU1_7g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 20:38:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2222 (0x8ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196E05, serialNumber=7FFBDC3F779A8F9965305E7DEE51E6A6C535FFB8
        Validity
            Not Before: Nov  4 20:38:49 2025 GMT
            Not After : Nov 11 20:38:49 2025 GMT
        Subject: CN=690a6459-38f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:26:65:47:c8:36:b1:4f:35:ce:61:3f:f4:37:
                    cd:85:79:ec:b6:97:50:f5:93:09:b5:8a:6f:e1:77:
                    d2:86:89:9a:6a:04:b5:bc:60:af:e7:92:d7:fa:f2:
                    11:fc:ad:6a:75:12:db:7d:79:c5:42:30:44:66:d8:
                    cf:5f:48:d0:1d:7b:0c:14:84:e8:58:8b:6c:bc:30:
                    5a:9d:26:7d:6e:eb:ad:4a:89:4f:ac:b0:88:34:17:
                    7f:89:0a:e9:61:5e:d7:1f:31:df:b5:21:6c:4d:1e:
                    72:d2:26:95:c0:91:40:65:0b:c6:0e:be:94:d1:19:
                    c1:2e:8f:02:fe:ef:d4:f2:08:f8:4b:8a:06:57:f9:
                    40:df:d5:d1:0b:82:12:ce:6c:7c:87:3d:9a:62:af:
                    25:a0:09:2a:0a:27:f5:d4:0e:f8:a2:21:17:4d:7c:
                    40:ec:8c:06:45:81:e9:41:ec:bc:69:50:b3:bc:0a:
                    2f:b8:0a:04:f6:96:0f:31:57:a2:f2:ec:cc:b8:65:
                    cd:59:a6:22:43:ff:4f:52:2b:ca:c0:95:f8:61:45:
                    a0:de:99:98:6c:4c:f8:95:67:27:10:2a:ff:52:28:
                    fa:28:b3:2e:cf:28:c7:6b:11:04:11:8b:9f:3b:52:
                    b0:3e:5e:99:3c:e5:57:b8:32:1c:c9:c2:9d:bd:c4:
                    2c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:81:F6:A9:06:34:AB:70:86:80:DD:4B:F4:23:75:FA:03:3A:BD:6B
            X509v3 Authority Key Identifier:
                keyid:7F:FB:DC:3F:77:9A:8F:99:65:30:5E:7D:EE:51:E6:A6:C5:35:FF:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196E05/42955510CE5311EA8E8C924CC4F9AE02/f_vcP3eaj5llMF597lHmpsU1_7g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_vcP3eaj5llMF597lHmpsU1_7g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196E05/42955510CE5311EA8E8C924CC4F9AE02/f_vcP3eaj5llMF597lHmpsU1_7g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:15:0b:78:fc:9a:3b:5b:06:48:2b:1b:e5:90:29:70:cb:04:
         22:9d:7c:56:b1:2f:4c:a5:33:34:59:97:f0:bc:af:66:96:7c:
         56:24:a8:32:79:1a:fb:dd:30:d2:cd:58:f2:42:69:29:f0:b2:
         82:7b:32:5d:d4:3f:46:9b:4a:a7:22:fc:96:09:d7:51:1e:43:
         6c:ff:1b:9e:0b:9a:20:22:bd:f8:93:b5:03:1f:63:29:0e:dc:
         96:65:57:93:f2:94:e8:39:d4:d3:b3:7b:99:ba:a4:5b:79:05:
         c3:bb:1d:6a:7e:f0:5f:74:a1:b7:61:e3:b5:e6:21:1d:8d:25:
         10:78:0a:de:cf:0e:84:c7:c0:c0:88:e6:39:bb:9c:19:4c:9e:
         d5:08:4d:ef:40:21:e8:a6:60:70:6f:77:ff:7e:b9:79:45:01:
         80:d1:f0:da:4f:05:92:72:0d:4f:f4:43:23:ea:c8:ba:51:b6:
         9c:c1:4b:a1:fb:04:cd:4d:fb:07:9f:f8:df:87:94:8f:98:97:
         5a:80:51:0b:a6:bf:64:a2:44:52:cc:e4:54:d9:69:4e:c4:ae:
         f6:c9:5a:27:31:1f:05:59:c2:5a:c7:6c:b5:8d:aa:46:ce:1f:
         3e:3d:95:85:cc:18:73:3f:6f:6f:16:89:8a:aa:72:1c:65:03:
         59:b7:bf:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:27:23 2025 by rpki-client