Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft
File:                     -cNjgFn4ZOhK479Q2qwHnGhGPqc.mft (raw, json)
Hash identifier:          mlgtWa7+Zyhzyp9Mi5fDr5IDOT9LXdZKZ5WpleLSpTM=
Subject key identifier:   36:05:2A:CC:F0:F4:34:EA:E2:7D:F8:59:6D:5A:E3:62:26:0B:86:D8
Authority key identifier: F9:C3:63:80:59:F8:64:E8:4A:E3:BF:50:DA:AC:07:9C:68:46:3E:A7
Certificate issuer:       /CN=A919DB2F/serialNumber=F9C3638059F864E84AE3BF50DAAC079C68463EA7
Certificate serial:       0586
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft
Manifest number:          0572
Signing time:             Tue 04 Nov 2025 23:28:03 +0000
Manifest this update:     Tue 04 Nov 2025 23:28:02 +0000
Manifest next update:     Tue 11 Nov 2025 23:28:02 +0000
Files and hashes:         1: -cNjgFn4ZOhK479Q2qwHnGhGPqc.crl (hash: Wyp/08i+nevuwOAjgHoSZd4CIwo5A/D6c8bDAbGuO/4=)
                          2: F307B7F4912A11F0B418B448C4F9AE02.roa (hash: yjx/NrxzZgDiEgxVTNY6l8PB/PX5P1BrG3zGpxB5GDo=)
                          3: 27023558912A11F09F7D4044C4F9AE02.roa (hash: +v5rysmnVhOkTUg6d0tgPtn6VplDudh8Q8DnVgzZQm0=)
                          4: E0A5F584DFAC11EE8C281B42C4F9AE02.roa (hash: QC4EhNSXvJgfmvNa3iGuDkLhBq1A6Ut/uA6vL0hAWZ8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.crl
                          rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 23:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1414 (0x586)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919DB2F, serialNumber=F9C3638059F864E84AE3BF50DAAC079C68463EA7
        Validity
            Not Before: Nov  4 23:28:02 2025 GMT
            Not After : Nov 11 23:28:02 2025 GMT
        Subject: CN=690a8c02-e95c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b3:0b:a9:35:86:d6:2b:3a:33:5d:0c:de:7c:
                    f8:8b:2e:83:4f:4e:49:82:23:61:3d:3f:67:69:57:
                    62:d1:88:34:0d:4d:87:d0:72:d8:46:f3:9d:c4:3e:
                    a3:38:f2:21:a9:ae:7f:a1:ad:e7:0e:9f:32:90:c6:
                    6e:52:05:10:5c:9e:4b:73:d9:58:fa:a3:46:ba:17:
                    a9:a7:05:a3:22:5f:f3:4f:8c:ce:54:d2:8f:88:c4:
                    09:0e:c7:5f:1d:b9:ba:e2:86:67:41:8a:94:bf:b8:
                    65:fe:4c:f1:23:a6:37:96:f1:ef:23:15:c0:b1:b0:
                    cd:61:c7:e6:00:19:0f:c7:c1:d4:1f:b1:33:f1:f7:
                    c4:d8:bb:84:15:cb:73:e8:d7:da:23:22:56:7c:ba:
                    69:46:80:de:e6:8d:58:54:58:f9:eb:b4:7c:15:b0:
                    2c:d8:a5:d0:ec:dc:57:86:de:d7:75:3f:cd:f9:32:
                    5a:52:ab:e0:2f:d6:3c:8f:01:8f:05:cf:91:52:f6:
                    1b:54:8e:f7:98:92:82:b8:f6:00:ff:2f:22:09:27:
                    9a:f8:ec:6e:d2:d9:ba:4b:d7:be:97:24:72:bb:c7:
                    b6:10:e8:bd:13:78:8f:4c:71:44:f1:28:80:78:a9:
                    a1:cb:31:71:75:44:54:ff:a3:ee:d9:e1:66:15:5c:
                    44:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:05:2A:CC:F0:F4:34:EA:E2:7D:F8:59:6D:5A:E3:62:26:0B:86:D8
            X509v3 Authority Key Identifier:
                keyid:F9:C3:63:80:59:F8:64:E8:4A:E3:BF:50:DA:AC:07:9C:68:46:3E:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:92:2a:ff:a8:1a:fb:0a:a7:d7:a8:6a:4d:60:02:f3:cc:99:
         f4:c3:d5:0d:e5:e7:00:e4:d9:13:3d:87:a4:d2:6d:90:46:9f:
         af:59:cd:82:26:f7:29:41:30:83:0b:6c:36:5b:17:f0:96:1c:
         1a:e5:57:1d:6d:fd:ad:51:3e:df:fa:13:6d:ad:80:13:4d:dd:
         7b:9b:c9:e4:cb:29:15:12:fd:54:84:e4:ec:d1:fb:cf:18:91:
         84:39:ed:26:4e:14:0d:81:b7:08:be:fd:16:e0:09:ea:01:d0:
         28:0e:ad:4b:c7:07:a3:f2:80:05:13:f4:ff:53:97:be:43:bb:
         51:d7:36:7f:b1:ee:06:00:b9:05:97:10:f8:7c:d4:ee:aa:77:
         0c:53:ad:63:a3:58:49:8e:35:79:7f:33:4a:7d:f8:da:02:1d:
         be:43:5c:fa:55:ff:6f:78:17:aa:41:19:32:02:cf:8d:d3:cd:
         a9:8a:88:56:23:c9:24:33:31:22:a3:18:95:62:c5:5d:d8:48:
         12:63:ba:d8:1f:8a:07:75:13:14:7d:ce:a0:c3:46:93:90:61:
         35:ca:e5:71:c9:15:4e:e3:d1:06:da:f0:92:7d:77:23:64:97:
         ab:45:8e:19:87:f9:d0:12:d6:0b:cb:98:e8:8b:f9:5b:85:f2:
         4c:76:65:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:42:05 2025 by rpki-client