Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A82F8/BCB8278CFB5811EFB32CFD12C4F9AE02/92edhcQsfjk3x9JAjAZ5uVznEXk.mft
File:                     92edhcQsfjk3x9JAjAZ5uVznEXk.mft (raw, json)
Hash identifier:          8JaHtMTumYFlzvZGZXvaSVXBtQNThIdUHdVf8xyIxCw=
Subject key identifier:   25:7D:9D:95:BB:29:2D:E3:25:53:8F:11:1C:50:80:2D:FB:4C:AC:EC
Authority key identifier: F7:67:9D:85:C4:2C:7E:39:37:C7:D2:40:8C:06:79:B9:5C:E7:11:79
Certificate issuer:       /CN=A91A82F8/serialNumber=F7679D85C42C7E3937C7D2408C0679B95CE71179
Certificate serial:       80
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92edhcQsfjk3x9JAjAZ5uVznEXk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A82F8/BCB8278CFB5811EFB32CFD12C4F9AE02/92edhcQsfjk3x9JAjAZ5uVznEXk.mft
Manifest number:          7E
Signing time:             Wed 05 Nov 2025 06:56:52 +0000
Manifest this update:     Wed 05 Nov 2025 06:56:52 +0000
Manifest next update:     Wed 12 Nov 2025 06:56:52 +0000
Files and hashes:         1: 92edhcQsfjk3x9JAjAZ5uVznEXk.crl (hash: TfbJM7uybdXEJPWYLnKhWt9+VJv04oCmOw3XF3ZBe1Q=)
                          2: 01103988FB5911EF8B32E613C4F9AE02.roa (hash: R1vera/J21wpLzxHOvQ0xtue7DdueGMpTshOHPQT8vM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A82F8/BCB8278CFB5811EFB32CFD12C4F9AE02/92edhcQsfjk3x9JAjAZ5uVznEXk.crl
                          rsync://rpki.apnic.net/member_repository/A91A82F8/BCB8278CFB5811EFB32CFD12C4F9AE02/92edhcQsfjk3x9JAjAZ5uVznEXk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92edhcQsfjk3x9JAjAZ5uVznEXk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 06:56:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128 (0x80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A82F8, serialNumber=F7679D85C42C7E3937C7D2408C0679B95CE71179
        Validity
            Not Before: Nov  5 06:56:52 2025 GMT
            Not After : Nov 12 06:56:52 2025 GMT
        Subject: CN=690af534-d664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bc:16:68:48:43:b7:28:1e:88:c4:7f:a3:7c:
                    46:cd:22:44:70:2f:40:5b:de:74:72:b3:28:bb:fe:
                    a1:ee:d1:0e:d7:9d:d0:05:0e:d4:6c:78:f5:f9:42:
                    93:16:a2:fc:9d:c0:4e:5b:07:f9:a1:04:c9:21:43:
                    bf:72:d6:f9:c0:1b:82:3e:ab:d6:31:3f:7b:b9:99:
                    51:8d:d8:e5:81:82:de:89:4f:f4:bb:83:41:7e:0f:
                    07:d5:31:6a:06:95:ce:35:38:92:f2:0a:bf:56:5a:
                    e7:94:97:59:0e:09:b3:c1:e1:b5:55:8a:e1:0a:36:
                    45:b7:41:7a:a5:d1:55:ab:31:d1:55:b4:be:de:c6:
                    43:5d:b6:fb:8f:ba:84:27:88:03:03:4d:55:02:52:
                    56:d1:33:78:d9:d8:4a:e8:a3:53:60:26:19:ee:cb:
                    7f:53:d5:ba:8e:c1:de:d4:06:c7:c6:5e:19:de:97:
                    26:f7:ff:6f:24:a3:d4:65:2d:ed:9c:6c:4e:d5:38:
                    f5:38:ec:95:23:ae:ac:54:4b:af:72:dd:8a:77:dd:
                    b4:9d:80:fa:dd:2d:c1:60:f9:ea:a3:58:da:86:bd:
                    61:a4:6f:e3:c0:83:0f:4c:e1:9d:30:ea:a7:19:42:
                    f0:6c:f3:67:30:54:17:16:d9:3f:89:a7:0d:2c:c9:
                    8e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:7D:9D:95:BB:29:2D:E3:25:53:8F:11:1C:50:80:2D:FB:4C:AC:EC
            X509v3 Authority Key Identifier:
                keyid:F7:67:9D:85:C4:2C:7E:39:37:C7:D2:40:8C:06:79:B9:5C:E7:11:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A82F8/BCB8278CFB5811EFB32CFD12C4F9AE02/92edhcQsfjk3x9JAjAZ5uVznEXk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92edhcQsfjk3x9JAjAZ5uVznEXk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A82F8/BCB8278CFB5811EFB32CFD12C4F9AE02/92edhcQsfjk3x9JAjAZ5uVznEXk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:ba:6c:e4:ee:b2:c8:09:9e:ed:3e:64:20:0b:b9:2b:b5:d1:
         98:eb:22:7b:63:fa:4a:68:84:22:d7:82:71:f9:dd:80:c6:28:
         52:3d:03:e8:99:7c:cc:af:48:40:50:ee:a7:7a:94:a6:7b:96:
         44:f8:7f:54:fd:dc:2a:27:74:04:33:2c:8b:d0:48:8c:7f:0e:
         ff:40:14:93:40:f5:07:43:d1:2f:c1:64:b0:01:b3:cb:99:63:
         18:f4:49:86:39:69:46:99:df:3b:9f:8b:a0:97:a6:b0:a3:13:
         01:83:8e:40:ab:a7:ba:3c:43:5e:09:81:6f:0d:7f:4d:73:f7:
         71:cc:48:ef:9d:ab:0e:1b:ce:6d:9a:3f:54:d8:fa:13:34:96:
         b0:9a:d8:09:0e:7d:df:7b:4f:91:ff:12:15:20:41:87:05:4d:
         4b:f6:ce:93:3a:d9:e9:6e:73:be:49:8e:9e:ad:0c:d2:b9:55:
         4e:1e:d8:24:82:0b:5c:d4:01:8b:a2:ef:df:f9:e8:16:19:9c:
         b2:c2:0b:dd:f8:3d:e7:76:8a:89:30:09:42:54:b8:86:99:69:
         81:46:7b:d5:b0:6c:8b:3f:45:34:55:87:6f:96:7a:9a:bc:58:
         07:75:32:a0:58:ee:bb:f7:c2:f9:c7:d5:3f:3e:04:0d:a7:4c:
         cc:8c:bf:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:03:50 2025 by rpki-client