Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.mft
File:                     0q268NfVLLlNShOXizIFO833eg8.mft (raw, json)
Hash identifier:          RqcZofcXzw0TlAl+zvwKonazmSE/Po4UxGivZKu+n9A=
Subject key identifier:   69:C3:CD:2F:77:2B:D0:4A:E7:29:AA:39:0F:9D:44:EF:04:12:17:5C
Authority key identifier: D2:AD:BA:F0:D7:D5:2C:B9:4D:4A:13:97:8B:32:05:3B:CD:F7:7A:0F
Certificate issuer:       /CN=A91BE514/serialNumber=D2ADBAF0D7D52CB94D4A13978B32053BCDF77A0F
Certificate serial:       0180
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0q268NfVLLlNShOXizIFO833eg8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.mft
Manifest number:          017E
Signing time:             Mon 03 Nov 2025 03:41:36 +0000
Manifest this update:     Mon 03 Nov 2025 03:41:36 +0000
Manifest next update:     Mon 10 Nov 2025 03:41:36 +0000
Files and hashes:         1: 0q268NfVLLlNShOXizIFO833eg8.crl (hash: 7ufmYyGuQZgkOUk0ybixiZX19fuNQWUxVJGonCfTpsA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.crl
                          rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0q268NfVLLlNShOXizIFO833eg8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 03:41:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 384 (0x180)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BE514, serialNumber=D2ADBAF0D7D52CB94D4A13978B32053BCDF77A0F
        Validity
            Not Before: Nov  3 03:41:36 2025 GMT
            Not After : Nov 10 03:41:36 2025 GMT
        Subject: CN=69082470-fa4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:9c:89:24:3c:ef:e9:db:c1:61:27:3e:dd:1b:
                    ae:7c:49:b2:3b:5c:9c:8b:e7:44:29:f0:a5:2f:cb:
                    84:31:a3:fa:5e:8f:b3:1b:cc:7e:75:1e:1f:d4:c5:
                    41:28:19:d0:72:64:55:25:5d:c2:ee:14:fd:56:d0:
                    a8:9e:9a:72:24:41:2f:0d:9a:46:d6:ad:c5:26:0e:
                    ec:41:a5:0a:94:0c:62:4f:fc:9d:d8:b4:ca:ba:66:
                    69:6b:f4:c6:1e:93:f9:62:93:1d:67:7d:f4:35:99:
                    eb:e6:22:9a:b1:7d:60:f0:cb:0e:a3:e2:ff:a9:ec:
                    19:ad:09:4d:eb:41:ac:4e:fb:6e:92:c3:80:4b:df:
                    0b:99:c0:a8:d9:0c:d4:af:c3:c6:73:7d:f6:ad:4d:
                    e6:4f:a2:8d:1c:7f:29:fa:09:fc:38:6c:98:c6:d9:
                    e1:fe:ea:46:13:b0:bb:72:96:b1:0d:dd:f4:ef:c5:
                    b8:e1:9e:f7:08:08:77:86:f4:56:78:1c:83:dc:d7:
                    8d:23:e3:49:56:9c:ad:6b:06:cf:1a:d1:ad:7a:c1:
                    24:9c:cd:c5:42:c3:fb:1c:6a:b6:a6:73:c4:a4:e3:
                    45:f1:be:81:f2:14:52:67:1e:f9:94:1c:94:7b:b7:
                    3d:23:e6:c4:87:7c:63:06:14:47:83:14:d3:69:de:
                    91:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:C3:CD:2F:77:2B:D0:4A:E7:29:AA:39:0F:9D:44:EF:04:12:17:5C
            X509v3 Authority Key Identifier:
                keyid:D2:AD:BA:F0:D7:D5:2C:B9:4D:4A:13:97:8B:32:05:3B:CD:F7:7A:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0q268NfVLLlNShOXizIFO833eg8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:03:48:71:bb:21:89:ed:88:e5:21:aa:31:41:be:c6:90:ec:
         09:fb:da:05:48:4d:10:46:3e:63:77:ee:80:a5:32:3b:39:de:
         3f:80:28:72:91:a9:6e:e6:a1:11:e0:6b:ce:d3:8f:1c:ad:71:
         96:ef:8f:05:50:0b:7a:a5:94:7a:b5:b8:dd:1b:a1:0c:09:dd:
         f1:42:4a:74:91:e9:63:fa:86:b5:2b:5e:d3:d0:c8:cc:31:5a:
         78:e0:7e:91:ea:e7:31:f1:34:59:a7:c7:a2:bb:46:be:1d:d2:
         14:d2:da:5a:c5:2c:91:9c:6e:53:1b:20:71:0c:f6:61:84:fe:
         e1:d1:a5:a5:e4:e2:aa:0e:63:b8:58:a8:27:e3:f2:b3:4b:38:
         d9:d0:8c:6b:f5:0e:99:58:6d:84:92:e5:26:8f:d2:d4:27:23:
         16:c6:c0:84:78:48:5b:3e:82:cd:c5:c7:f4:ea:96:8a:16:0d:
         d6:e7:13:bd:3e:d6:19:87:a9:24:c3:8e:09:0e:b2:87:54:41:
         19:70:31:73:75:82:1d:ab:27:31:10:68:1a:3c:b1:f7:65:fc:
         27:66:4f:b8:8a:70:20:7c:e0:a2:3d:c4:43:92:b1:56:58:92:
         52:95:de:ea:5b:4f:81:d6:51:1d:fe:7a:2e:f8:ef:68:ab:96:
         1a:b7:33:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:04:41 2025 by rpki-client