Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/FeAstOfcuwrM4igRnP-ANDhil78.mft
File:                     FeAstOfcuwrM4igRnP-ANDhil78.mft (raw, json)
Hash identifier:          JtTIABx4/ZE2bvmb1y9nU5VV+JA94ye3w2TYJAWEw1c=
Subject key identifier:   CE:5E:45:50:C9:0B:F5:F3:50:76:56:11:F0:EF:08:59:4F:D4:2C:10
Authority key identifier: 15:E0:2C:B4:E7:DC:BB:0A:CC:E2:28:11:9C:FF:80:34:38:62:97:BF
Certificate issuer:       /CN=A91BC15C/serialNumber=15E02CB4E7DCBB0ACCE228119CFF8034386297BF
Certificate serial:       34D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FeAstOfcuwrM4igRnP-ANDhil78.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/FeAstOfcuwrM4igRnP-ANDhil78.mft
Manifest number:          34D5
Signing time:             Tue 04 Nov 2025 15:09:29 +0000
Manifest this update:     Tue 04 Nov 2025 15:09:29 +0000
Manifest next update:     Tue 11 Nov 2025 15:09:29 +0000
Files and hashes:         1: FeAstOfcuwrM4igRnP-ANDhil78.crl (hash: NExOgBKWu2iU1kqcm0nK8Jfi9M/eOsOXGvzyXobc5mc=)
                          2: A88B0898EC9911EE9627923CC4F9AE02.roa (hash: QO9VCVg4JBZYD4qSn+hc8302M9oNt2/POhltCbyhtbQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/FeAstOfcuwrM4igRnP-ANDhil78.crl
                          rsync://rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/FeAstOfcuwrM4igRnP-ANDhil78.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FeAstOfcuwrM4igRnP-ANDhil78.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 15:09:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13527 (0x34d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC15C, serialNumber=15E02CB4E7DCBB0ACCE228119CFF8034386297BF
        Validity
            Not Before: Nov  4 15:09:29 2025 GMT
            Not After : Nov 11 15:09:29 2025 GMT
        Subject: CN=690a1729-f00f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:70:74:ec:5b:c8:52:70:d7:6b:5a:48:8a:5f:
                    97:a9:12:dd:b9:3c:0f:c9:a7:b0:d2:cb:2a:de:24:
                    cb:ea:d4:3d:1b:cc:78:28:a4:3f:c4:b5:a2:8e:c3:
                    1e:33:f6:f5:6d:29:64:a2:90:51:f6:cb:c0:fc:90:
                    a6:c7:15:b7:66:ed:55:7f:b8:15:19:87:7f:75:da:
                    81:1f:87:3a:fe:af:71:6e:3e:81:f4:f4:83:55:8a:
                    86:85:52:77:9e:6c:b8:ca:62:5b:33:ea:2a:21:72:
                    52:bb:2a:f1:b1:9c:eb:64:a2:e2:e2:fc:d0:b5:b1:
                    2a:cb:57:a5:0d:61:bd:16:21:06:47:cb:fd:fb:b9:
                    07:cf:8b:63:c6:6b:10:3b:d7:4b:30:8f:bd:bd:27:
                    33:15:83:c9:86:16:00:f5:ea:33:d1:7a:f7:6d:1f:
                    34:f3:cd:bb:97:94:77:2a:9c:43:68:7e:02:fd:6a:
                    92:22:1c:40:8a:a2:fd:f6:5c:61:e1:0e:ef:99:68:
                    28:ce:d5:20:03:89:44:25:5c:0c:c7:ba:db:75:32:
                    b9:bc:fb:20:5f:23:28:32:f5:e6:85:6d:11:29:94:
                    d9:a1:f9:25:1c:d6:85:fd:d9:13:6d:72:18:c4:52:
                    44:27:41:79:e8:f4:8b:2e:64:5f:34:02:0c:77:c9:
                    47:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:5E:45:50:C9:0B:F5:F3:50:76:56:11:F0:EF:08:59:4F:D4:2C:10
            X509v3 Authority Key Identifier:
                keyid:15:E0:2C:B4:E7:DC:BB:0A:CC:E2:28:11:9C:FF:80:34:38:62:97:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/FeAstOfcuwrM4igRnP-ANDhil78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FeAstOfcuwrM4igRnP-ANDhil78.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/FeAstOfcuwrM4igRnP-ANDhil78.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:ac:85:7f:d9:ae:3f:0e:03:af:88:c5:ff:d5:46:93:05:f6:
         9c:39:f3:b2:98:b4:18:dd:1a:ae:6c:ef:ca:00:47:eb:da:92:
         21:d6:b3:d2:78:91:df:aa:ac:a8:92:a7:3d:7f:e2:0d:ba:d6:
         f1:49:73:e5:50:cd:a4:e5:5f:17:2f:8e:c1:0c:53:ce:de:c6:
         21:47:78:ff:c4:5f:a5:ae:89:d8:6d:8d:d9:99:bb:0e:3e:f1:
         04:7d:2d:df:b2:3c:94:35:d5:82:74:2b:8a:50:48:ef:c5:1f:
         c3:e7:ff:8d:ea:97:05:46:d1:4e:3c:f1:8f:81:14:14:28:35:
         5e:7e:d4:47:96:4b:69:56:01:f9:7f:3f:44:e2:53:94:27:57:
         08:62:11:6f:cd:1d:33:29:e5:44:9f:c0:ee:03:3d:13:85:3b:
         09:90:4f:c3:75:f6:8a:d8:c8:20:cd:2a:e4:3c:e8:f4:a3:63:
         52:84:90:66:4c:20:c8:79:a1:8a:a7:97:23:3d:9e:f0:d8:13:
         cb:8f:c4:23:5a:13:b3:18:8f:8d:95:d6:55:24:76:2f:21:9f:
         14:3f:4e:59:03:97:04:04:27:ff:fb:c3:6b:1a:91:1a:9f:e6:
         d5:f3:cb:91:42:9a:45:76:98:2f:02:1a:42:fa:f2:f5:e8:74:
         49:75:7a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:03:11 2025 by rpki-client