Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.mft
File:                     _vE6uFK4kquii39LJSVwiZZNdms.mft (raw, json)
Hash identifier:          srMA+rK9QK8YsQAOQDbSP1Y3NjCBdtIbMls5FrnJKDk=
Subject key identifier:   96:16:DA:54:B9:37:A2:5B:7D:0C:71:98:29:DA:C5:6C:F5:E8:56:A4
Authority key identifier: FE:F1:3A:B8:52:B8:92:AB:A2:8B:7F:4B:25:25:70:89:96:4D:76:6B
Certificate issuer:       /CN=A91B66C5/serialNumber=FEF13AB852B892ABA28B7F4B25257089964D766B
Certificate serial:       0A59
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vE6uFK4kquii39LJSVwiZZNdms.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.mft
Manifest number:          0A4F
Signing time:             Tue 04 Nov 2025 19:47:03 +0000
Manifest this update:     Tue 04 Nov 2025 19:47:03 +0000
Manifest next update:     Tue 11 Nov 2025 19:47:03 +0000
Files and hashes:         1: _vE6uFK4kquii39LJSVwiZZNdms.crl (hash: YoIqNFepxov8d0OtM632KJ31ZUnxqTaaIvrdR73MArM=)
                          2: 503D2222018111EBB0502527C4F9AE02.roa (hash: LQT0TO6GObYdNEXY2zITFA+60OyJn4ApFTpeHBpwqn0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.crl
                          rsync://rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vE6uFK4kquii39LJSVwiZZNdms.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 19:47:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2649 (0xa59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B66C5, serialNumber=FEF13AB852B892ABA28B7F4B25257089964D766B
        Validity
            Not Before: Nov  4 19:47:03 2025 GMT
            Not After : Nov 11 19:47:03 2025 GMT
        Subject: CN=690a5837-1f72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c1:11:de:d3:1b:ed:13:ff:f1:6e:01:28:01:
                    18:37:6d:49:17:c4:9b:11:6d:d9:40:d7:6b:a5:7a:
                    97:02:61:eb:46:50:2e:ef:70:fa:0b:82:ef:23:73:
                    97:bb:d0:fd:7f:3b:99:70:9a:b2:39:07:cf:45:41:
                    9e:9c:29:79:b6:eb:6c:f7:df:86:dd:2f:9f:0d:8f:
                    b1:b3:6e:30:5e:a8:26:59:ee:52:76:59:dd:4b:e3:
                    0a:eb:f8:f0:b3:2f:a3:3e:33:f9:c5:57:e0:64:79:
                    ca:96:47:eb:93:6a:31:9b:52:cb:51:a4:7e:d4:79:
                    e5:8e:b9:cb:a9:5b:7f:d9:fa:85:28:6a:ba:cb:4e:
                    ec:59:4d:60:4c:bc:01:51:18:a1:82:b1:ac:5e:c8:
                    c6:cb:f4:0a:fa:a1:1a:b5:d2:be:2a:8b:c6:5e:31:
                    de:b5:0e:30:bc:99:b9:92:4d:b4:5d:ab:8b:9e:7e:
                    ac:43:59:8f:55:b0:f9:ae:bb:3d:82:6f:cc:5d:2f:
                    3a:2b:14:ae:65:8f:87:83:8f:ed:b2:e4:c9:12:36:
                    ad:80:6a:7f:9e:3f:51:0d:44:cf:da:72:76:2f:ea:
                    c6:e3:e3:e2:00:bb:2b:86:b5:3f:07:6a:43:8c:0e:
                    c1:b9:32:fd:91:c4:b3:f4:17:7b:27:4c:1c:12:f9:
                    2e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:16:DA:54:B9:37:A2:5B:7D:0C:71:98:29:DA:C5:6C:F5:E8:56:A4
            X509v3 Authority Key Identifier:
                keyid:FE:F1:3A:B8:52:B8:92:AB:A2:8B:7F:4B:25:25:70:89:96:4D:76:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vE6uFK4kquii39LJSVwiZZNdms.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:2d:0f:5a:2a:c6:73:98:38:83:56:38:ce:cc:a2:e5:eb:50:
         12:cf:64:ac:e0:4a:2f:f2:96:26:ed:58:24:d0:f9:df:1c:7a:
         a4:9c:c0:38:6e:1c:01:e0:e2:33:95:c2:3f:e4:5f:3e:39:94:
         97:e1:c9:88:78:01:e2:0d:76:1c:41:7a:79:47:a4:a2:f8:62:
         15:cf:ac:1b:9a:6e:35:f5:2b:e2:98:9f:d9:e1:2f:74:d2:85:
         97:9e:87:46:4b:ff:5d:25:19:a8:79:ff:09:59:32:f2:48:bd:
         9d:b0:0a:00:24:7a:35:6c:d1:ae:9a:6a:89:e7:dc:c7:f9:99:
         20:66:41:82:0c:8c:24:11:b2:bd:d0:30:3d:69:59:bd:62:9c:
         d0:0a:a6:f8:a3:c8:6f:89:c9:15:b2:08:54:81:a1:b4:c0:53:
         f3:8e:ba:56:fb:59:10:8c:59:4b:07:03:43:64:24:f1:13:39:
         c8:69:4c:55:78:2d:cf:52:e4:92:64:76:4e:b9:2b:1f:aa:ea:
         ed:73:48:04:9d:26:e1:56:8b:5f:1b:86:c3:7d:77:ba:79:9c:
         1f:33:0d:f7:dd:a9:53:1c:2b:75:73:2f:32:c3:d6:be:94:62:
         9d:df:52:b1:42:99:4d:0c:30:e7:d6:fe:bc:28:db:07:a7:d9:
         42:59:40:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:00:00 2025 by rpki-client