Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B92DC/563287F6812911EDA5B15073C4F9AE02/PtImrpJ_g5gXgFRs42LzNp7bJLM.mft
File:                     PtImrpJ_g5gXgFRs42LzNp7bJLM.mft (raw, json)
Hash identifier:          Dn3yJWVWIdjl5e0be2Hu3gGx5j3IgJJowqarNywdOpE=
Subject key identifier:   8A:F3:BD:C5:F0:9C:65:10:C8:90:8B:24:16:29:C2:AC:97:05:6C:4B
Authority key identifier: 3E:D2:26:AE:92:7F:83:98:17:80:54:6C:E3:62:F3:36:9E:DB:24:B3
Certificate issuer:       /CN=A91B92DC/serialNumber=3ED226AE927F83981780546CE362F3369EDB24B3
Certificate serial:       021D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtImrpJ_g5gXgFRs42LzNp7bJLM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B92DC/563287F6812911EDA5B15073C4F9AE02/PtImrpJ_g5gXgFRs42LzNp7bJLM.mft
Manifest number:          0219
Signing time:             Mon 03 Nov 2025 02:09:39 +0000
Manifest this update:     Mon 03 Nov 2025 02:09:38 +0000
Manifest next update:     Mon 10 Nov 2025 02:09:38 +0000
Files and hashes:         1: PtImrpJ_g5gXgFRs42LzNp7bJLM.crl (hash: MAhSE3Ua7nAbCTQjxGFODqSqvF4LDBxTGZF3N3BTjsk=)
                          2: 3CD61DC8812D11ED9C04940EC4F9AE02.roa (hash: cOiY+eFyn2JhrTs/7WoKVeEfi4A0VW9I3AIS/bx3zYY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B92DC/563287F6812911EDA5B15073C4F9AE02/PtImrpJ_g5gXgFRs42LzNp7bJLM.crl
                          rsync://rpki.apnic.net/member_repository/A91B92DC/563287F6812911EDA5B15073C4F9AE02/PtImrpJ_g5gXgFRs42LzNp7bJLM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtImrpJ_g5gXgFRs42LzNp7bJLM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 02:09:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 541 (0x21d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B92DC, serialNumber=3ED226AE927F83981780546CE362F3369EDB24B3
        Validity
            Not Before: Nov  3 02:09:38 2025 GMT
            Not After : Nov 10 02:09:38 2025 GMT
        Subject: CN=69080ee3-0b17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f7:e5:20:59:db:d9:75:f9:a2:7f:ac:a9:81:
                    0e:38:14:f1:3c:7c:eb:36:22:00:c0:39:ee:2a:80:
                    62:24:95:91:51:19:75:37:cd:ec:2a:8a:95:8e:4a:
                    1a:4e:ea:b7:22:98:9a:78:3f:17:7e:34:10:c9:55:
                    f7:e3:53:3e:cd:80:c4:32:46:01:fa:9b:52:a4:b5:
                    00:e9:59:46:5c:a4:4a:1a:07:0e:cd:3d:d2:65:04:
                    15:dc:98:bc:bc:60:65:12:a1:1b:05:b4:e7:72:84:
                    ba:c4:c7:08:0d:f0:d3:58:67:dc:62:25:2d:e2:4c:
                    24:51:32:71:86:5b:36:0b:36:18:7f:a6:9b:30:32:
                    68:79:33:4f:df:a4:8d:68:ac:c2:a7:18:27:f7:9c:
                    1a:3c:b5:cf:e6:7a:b5:ce:b1:0f:fe:7c:15:db:05:
                    26:e8:94:b3:56:86:a7:d4:54:69:b6:16:ce:b6:0b:
                    f1:0c:0d:a2:53:9b:f7:6f:71:34:06:65:b7:fb:d6:
                    0c:ce:d5:d2:95:b2:9e:b4:18:d1:1d:dc:f0:9e:49:
                    68:d7:71:6c:93:f5:e0:ae:9f:e7:41:27:fb:76:4f:
                    14:c4:6e:7d:c7:c6:cc:54:ea:12:84:67:ac:51:34:
                    c5:a1:98:1a:76:b3:2c:c6:b1:9b:c1:13:10:32:b3:
                    fd:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:F3:BD:C5:F0:9C:65:10:C8:90:8B:24:16:29:C2:AC:97:05:6C:4B
            X509v3 Authority Key Identifier:
                keyid:3E:D2:26:AE:92:7F:83:98:17:80:54:6C:E3:62:F3:36:9E:DB:24:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B92DC/563287F6812911EDA5B15073C4F9AE02/PtImrpJ_g5gXgFRs42LzNp7bJLM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtImrpJ_g5gXgFRs42LzNp7bJLM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B92DC/563287F6812911EDA5B15073C4F9AE02/PtImrpJ_g5gXgFRs42LzNp7bJLM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:80:8e:b4:d3:9e:56:ea:4d:57:d5:c2:78:cd:f0:f5:c3:e3:
         62:91:f1:31:2c:17:ad:75:29:44:ab:78:95:63:4f:85:47:ae:
         00:82:a0:f3:65:7d:fb:4a:a7:e3:4d:21:76:aa:98:a5:ae:33:
         f9:47:66:e4:52:68:ae:8f:2d:42:dd:c2:e9:42:48:18:e4:31:
         58:39:c5:d2:94:40:74:9c:89:38:d4:4e:56:13:61:86:eb:7f:
         7a:4c:51:9c:d7:c0:b4:dc:60:77:f5:cb:76:b7:b3:45:25:16:
         ca:79:38:d5:b3:2f:77:62:41:f3:7b:74:8d:10:c7:25:df:80:
         c7:e4:89:9b:b0:76:48:13:be:1c:31:53:61:f4:8f:91:60:20:
         3a:41:c7:1d:c0:db:37:09:eb:5b:20:15:58:02:0d:6e:4c:55:
         01:76:13:ac:54:c1:49:88:20:77:22:f4:f2:58:e5:c8:ea:86:
         65:52:db:b3:80:95:96:79:55:53:18:6c:77:6b:f8:e1:da:b3:
         d8:95:b4:40:fe:23:bf:08:b2:dd:a3:1f:58:c8:52:7a:6c:b2:
         d6:c7:63:84:65:7c:4f:fc:58:04:f5:ef:c5:32:34:0b:4b:73:
         a4:1b:4d:4d:f0:61:6e:0d:58:c3:4f:69:57:93:b1:ba:9e:1d:
         54:9e:41:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 12:36:08 2025 by rpki-client