Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D3C2/72D7CFD623F811E79589D752C4F9AE02/5wYdsiKDjeaKk84h7ykbBVQthyY.mft
File:                     5wYdsiKDjeaKk84h7ykbBVQthyY.mft (raw, json)
Hash identifier:          htI8acCGjlFXBlCYuR9pn0rMEV+FPPML1zBny8DYpP8=
Subject key identifier:   D1:C2:2A:B8:21:26:48:BC:4D:9F:5B:FA:7A:DD:82:08:83:AA:95:B4
Authority key identifier: E7:06:1D:B2:22:83:8D:E6:8A:93:CE:21:EF:29:1B:05:54:2D:87:26
Certificate issuer:       /CN=A919D3C2/serialNumber=E7061DB222838DE68A93CE21EF291B05542D8726
Certificate serial:       1B4D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5wYdsiKDjeaKk84h7ykbBVQthyY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D3C2/72D7CFD623F811E79589D752C4F9AE02/5wYdsiKDjeaKk84h7ykbBVQthyY.mft
Manifest number:          1B42
Signing time:             Tue 04 Nov 2025 16:22:50 +0000
Manifest this update:     Tue 04 Nov 2025 16:22:50 +0000
Manifest next update:     Tue 11 Nov 2025 16:22:50 +0000
Files and hashes:         1: 5wYdsiKDjeaKk84h7ykbBVQthyY.crl (hash: 9a21gSI/bNbZBrJJl5a9uyeV1zQs6MJN7y1pAgCnGRg=)
                          2: A6B5F55C23F911E79BE44454C4F9AE02.roa (hash: F2ak73nonVZ20QRrcSfPPZHYy8EZQeLDHTDgpyvlwUk=)
                          3: EE4AB71024A211F085E5B916C4F9AE02.roa (hash: J7B5RwF0Uei6GB3vuCg/6lhHS2a4ATOJhVhMlxzGnKM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D3C2/72D7CFD623F811E79589D752C4F9AE02/5wYdsiKDjeaKk84h7ykbBVQthyY.crl
                          rsync://rpki.apnic.net/member_repository/A919D3C2/72D7CFD623F811E79589D752C4F9AE02/5wYdsiKDjeaKk84h7ykbBVQthyY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5wYdsiKDjeaKk84h7ykbBVQthyY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 16:22:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6989 (0x1b4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D3C2, serialNumber=E7061DB222838DE68A93CE21EF291B05542D8726
        Validity
            Not Before: Nov  4 16:22:50 2025 GMT
            Not After : Nov 11 16:22:50 2025 GMT
        Subject: CN=690a285a-38c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:13:72:0f:51:2c:c4:f7:10:b1:ca:90:3d:9c:
                    9c:44:af:13:0e:31:53:71:31:12:2f:a7:2e:66:19:
                    52:f2:84:40:5d:9c:b4:f2:bf:41:1b:39:d8:6c:7e:
                    29:cf:b1:46:8a:33:fd:09:fc:7a:9b:87:d6:7c:66:
                    e1:b7:78:9f:52:19:3a:be:e9:73:03:15:66:7d:4a:
                    14:ee:55:3f:d7:91:56:a4:97:f3:ad:d2:71:e6:33:
                    c9:d1:76:23:f1:72:61:e2:c2:e4:d9:9e:b6:f9:3f:
                    0c:3c:bf:74:2d:1a:00:b6:11:7b:38:b9:2f:fd:03:
                    e6:13:90:1c:6c:30:97:1d:07:d0:a3:5a:21:57:62:
                    3b:79:64:de:3d:6c:1a:88:96:c7:d6:f3:a1:4b:bf:
                    cb:02:ac:5f:c1:5e:27:f5:1f:00:e7:42:ba:17:c2:
                    c1:a4:4a:42:d2:09:e2:21:ca:ba:33:23:63:7c:f8:
                    21:07:2f:e1:c0:f6:61:d0:b3:98:91:41:21:91:26:
                    e3:6f:14:a8:e0:02:19:b9:13:9e:07:ac:0c:89:95:
                    be:55:68:de:74:37:9b:f9:1b:50:55:11:de:89:d7:
                    35:19:87:8e:d2:1f:f0:bb:fa:f4:39:a1:9b:a6:b2:
                    5c:df:25:0d:ce:a8:74:b3:2e:0b:da:b5:1e:5f:54:
                    46:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:C2:2A:B8:21:26:48:BC:4D:9F:5B:FA:7A:DD:82:08:83:AA:95:B4
            X509v3 Authority Key Identifier:
                keyid:E7:06:1D:B2:22:83:8D:E6:8A:93:CE:21:EF:29:1B:05:54:2D:87:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D3C2/72D7CFD623F811E79589D752C4F9AE02/5wYdsiKDjeaKk84h7ykbBVQthyY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5wYdsiKDjeaKk84h7ykbBVQthyY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D3C2/72D7CFD623F811E79589D752C4F9AE02/5wYdsiKDjeaKk84h7ykbBVQthyY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:39:9a:1c:72:3c:4c:f1:f5:49:46:e1:69:8a:6f:33:ab:ee:
         84:c8:51:fa:75:1d:8e:b0:da:c0:27:86:11:26:f4:f8:c3:31:
         73:e2:56:61:52:6a:0d:63:48:de:29:54:83:ab:02:69:b5:f3:
         71:44:96:bb:93:12:59:76:49:4e:c4:7c:48:d7:0f:a9:ad:f2:
         58:4d:22:ab:18:62:01:85:27:e6:20:d6:6e:5b:4e:ee:a8:f8:
         2d:2a:f2:c8:ad:f6:85:45:35:39:51:52:6a:1b:67:4a:d8:49:
         64:bd:98:64:ca:ea:d4:ba:0d:34:e9:cf:47:59:22:b4:a6:eb:
         e6:c0:eb:fa:1a:f3:cf:14:8c:f0:6c:af:28:e8:09:81:f8:4f:
         6e:7b:86:38:3b:ef:c1:87:c8:b2:43:76:8c:9a:37:45:36:3d:
         b3:78:2b:57:f2:ac:ae:47:46:6d:c9:85:f0:c7:4e:a6:8c:be:
         2f:9c:44:7c:97:d3:05:6b:fb:a1:c4:45:c4:3f:c4:bf:49:e8:
         ea:51:ae:66:8d:1c:77:28:fd:9f:7f:71:fa:15:35:77:4a:f7:
         85:8a:90:74:ec:c3:c2:f2:ee:85:71:d7:96:8a:cc:2a:49:52:
         44:03:12:85:dd:f2:40:88:dc:be:8c:d6:1a:3d:80:74:52:63:
         8b:eb:ce:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:19:06 2025 by rpki-client