Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.mft
File:                     S630I4efFU256siNFgtOEW9mzak.mft (raw, json)
Hash identifier:          fKXhwCuwbfCkNuQtasko8hC/DIeVU3/pMlC9xJI9jH0=
Subject key identifier:   16:E1:BA:86:36:0B:A6:0B:F5:93:8D:A3:DA:98:59:4F:35:88:59:57
Authority key identifier: 4B:AD:F4:23:87:9F:15:4D:B9:EA:C8:8D:16:0B:4E:11:6F:66:CD:A9
Certificate issuer:       /CN=A91B30E5/serialNumber=4BADF423879F154DB9EAC88D160B4E116F66CDA9
Certificate serial:       0219
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S630I4efFU256siNFgtOEW9mzak.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.mft
Manifest number:          0216
Signing time:             Wed 05 Nov 2025 02:18:41 +0000
Manifest this update:     Wed 05 Nov 2025 02:18:40 +0000
Manifest next update:     Wed 12 Nov 2025 02:18:40 +0000
Files and hashes:         1: S630I4efFU256siNFgtOEW9mzak.crl (hash: szdkJdjEJkqAQZT+hQIRqusZrp3SeI91xpdgwZhDcJs=)
                          2: 0F1061D0868911EDA888A96CC4F9AE02.roa (hash: aGKXoopb0arb0ntbaAeX9hZshlxruOuTWjBQoFMqiCw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.crl
                          rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S630I4efFU256siNFgtOEW9mzak.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 02:18:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 537 (0x219)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B30E5, serialNumber=4BADF423879F154DB9EAC88D160B4E116F66CDA9
        Validity
            Not Before: Nov  5 02:18:40 2025 GMT
            Not After : Nov 12 02:18:40 2025 GMT
        Subject: CN=690ab401-61ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5b:72:cb:32:22:4c:57:81:ba:95:74:ea:1a:
                    0d:73:5a:22:1a:29:b9:52:f6:a9:cf:b2:fb:6d:78:
                    51:7c:76:0d:cd:fe:d9:b1:ae:91:92:d8:76:c5:dd:
                    94:af:bf:47:a2:de:63:b4:50:c3:53:da:e6:c4:9a:
                    63:0f:e0:f5:5c:cf:8b:1f:e1:d0:04:97:ba:c1:21:
                    73:66:14:c6:4b:18:89:ba:0c:ca:96:04:89:9b:8c:
                    63:76:17:94:ac:f1:15:fe:18:f6:ca:30:5d:f5:83:
                    a6:de:50:ee:0d:47:86:c0:65:4f:18:dc:6c:03:a4:
                    25:8a:2f:87:ef:51:55:48:81:49:00:f3:af:90:13:
                    7a:9c:23:f0:31:5b:7b:0f:0e:9c:17:5e:5b:e2:f0:
                    c9:f8:f7:bf:da:52:14:f9:b5:8e:63:a7:82:71:b5:
                    fa:cc:40:80:da:97:18:2c:6d:74:b9:c1:cd:ae:41:
                    20:1c:84:70:67:72:12:a8:26:55:94:c0:49:b6:05:
                    98:5e:43:e4:33:2d:58:78:f7:4b:b1:b6:be:ab:e4:
                    90:b6:4a:52:8c:9c:cd:55:c5:a8:fd:cb:52:f2:55:
                    f6:ab:68:b8:4a:1b:c1:51:61:50:f0:0e:bc:08:55:
                    bc:9e:44:1f:f6:30:35:61:3c:a2:a0:4e:5f:ca:d0:
                    83:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:E1:BA:86:36:0B:A6:0B:F5:93:8D:A3:DA:98:59:4F:35:88:59:57
            X509v3 Authority Key Identifier:
                keyid:4B:AD:F4:23:87:9F:15:4D:B9:EA:C8:8D:16:0B:4E:11:6F:66:CD:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S630I4efFU256siNFgtOEW9mzak.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:96:f7:e5:1a:46:bd:8e:ce:30:14:2e:40:27:f6:08:60:1b:
         7f:d9:54:3c:c8:8f:3d:cb:3c:c9:40:a4:73:fa:8c:f1:09:11:
         34:1a:c7:b0:16:64:20:41:80:0b:98:2c:78:c6:95:eb:82:cd:
         41:a5:c3:ae:21:34:d4:7e:3c:4f:b6:fc:c3:13:9c:03:6a:9f:
         5a:16:41:3d:f3:fb:e8:fb:c1:b0:3c:8e:c9:a0:18:4b:e1:bd:
         c9:c2:f8:00:50:3e:28:b1:51:bf:1e:17:d3:07:a3:e7:0e:0e:
         e0:a1:69:aa:db:b5:2a:3c:d0:89:01:0b:9e:d6:e9:ed:bf:3c:
         0a:70:2b:ae:31:37:1b:ab:14:42:ee:19:e5:72:49:f6:03:62:
         4b:3d:f9:94:d1:a5:8e:21:ba:71:bd:c5:9c:83:b4:fb:67:4e:
         08:bc:19:1c:e6:bd:8b:79:7d:4c:ec:e8:8a:a6:45:c6:78:05:
         d7:fd:94:ca:d0:47:5c:52:03:d7:d3:0b:8d:85:44:aa:bf:a3:
         3b:46:8b:33:7c:00:cb:bd:6c:c9:30:5b:2e:d9:15:69:8e:4a:
         b7:49:1b:f2:49:d7:6b:a5:eb:bd:76:53:5d:38:6e:11:f2:15:
         f3:7b:00:3d:f2:7e:0e:a1:44:a5:23:be:e9:dc:77:a1:50:2c:
         fc:54:a8:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:27:08 2025 by rpki-client