Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft
File:                     Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft (raw, json)
Hash identifier:          EJ6o4LMhXnm261bNA4phvcbq6iNYqIhfmwprqigoS18=
Subject key identifier:   F4:80:95:E1:F6:6E:F4:0F:59:EC:45:09:A6:23:0F:4F:39:1A:D4:A9
Authority key identifier: 56:CD:32:D1:3F:8C:AE:1E:92:F9:C9:7F:39:5F:1A:23:AB:B9:C6:F7
Certificate issuer:       /CN=A91C5B46/serialNumber=56CD32D13F8CAE1E92F9C97F395F1A23ABB9C6F7
Certificate serial:       262F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft
Manifest number:          261D
Signing time:             Sun 02 Nov 2025 15:43:36 +0000
Manifest this update:     Sun 02 Nov 2025 15:43:35 +0000
Manifest next update:     Sun 09 Nov 2025 15:43:35 +0000
Files and hashes:         1: Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.crl (hash: MhxCqnewBjlX0mCpU4ytyWWJcQzpcssgL1q1ZpsuhOo=)
                          2: E2E360EEF3EE11ECBAE10054C4F9AE02.roa (hash: MwkxKey8SdTfX3rA2ndaHPVnUsJ97475p+Dzwmyl9SQ=)
                          3: E21E1C6CF3EE11ECBAE10054C4F9AE02.roa (hash: UiQJQcjiTKGUKZaMNBKg71L13IK59w5XS6QCL7nnWSE=)
                          4: E14BDC8EF3EE11ECBAE10054C4F9AE02.roa (hash: gP1rmRhgK5le3CICuUOYmVhhDItIyOhZ8RIHh+3gkE8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.crl
                          rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 15:43:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9775 (0x262f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5B46, serialNumber=56CD32D13F8CAE1E92F9C97F395F1A23ABB9C6F7
        Validity
            Not Before: Nov  2 15:43:35 2025 GMT
            Not After : Nov  9 15:43:35 2025 GMT
        Subject: CN=69077c28-cb8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f3:f5:77:cf:97:c0:8e:fc:a9:b0:15:8d:f3:
                    65:85:7b:4b:b2:e0:41:c6:ff:a2:73:f0:c7:50:d0:
                    b6:62:bb:24:2f:89:3f:6f:aa:bf:de:2f:14:0e:87:
                    f9:5e:97:45:a1:bd:71:3d:83:a3:f5:f0:b5:01:30:
                    64:5c:33:99:39:0e:d0:94:ba:9f:90:27:0e:1b:c1:
                    aa:8e:4c:c5:d2:b6:d6:6f:49:cb:81:3c:d0:96:29:
                    84:6c:b5:a2:36:b8:d3:a1:e6:8e:d9:b8:51:b8:78:
                    06:0a:9a:04:66:09:84:d9:08:a6:6d:01:ce:1c:dc:
                    9a:59:ca:2c:c7:f2:4a:3b:6f:77:90:9a:fc:cc:6b:
                    e1:7d:57:65:e8:65:c2:fb:70:25:b2:3f:9a:37:c3:
                    5a:41:da:95:06:33:87:06:89:f9:36:89:84:4a:50:
                    ef:dc:4f:0b:19:9c:13:e6:76:82:58:00:55:bb:5d:
                    89:50:0a:a3:4d:d6:fa:b6:e2:62:1f:04:6f:0f:ba:
                    5e:c2:24:fe:7c:ab:00:bf:81:f0:71:c5:a8:e9:3f:
                    01:43:42:91:1a:b8:02:bf:d3:00:4b:75:a7:e3:8b:
                    36:39:3a:45:ab:70:37:78:c3:d0:c9:44:e3:69:ae:
                    d8:4d:7d:5d:be:70:e8:e5:d1:b9:b5:6c:56:92:ed:
                    2d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:80:95:E1:F6:6E:F4:0F:59:EC:45:09:A6:23:0F:4F:39:1A:D4:A9
            X509v3 Authority Key Identifier:
                keyid:56:CD:32:D1:3F:8C:AE:1E:92:F9:C9:7F:39:5F:1A:23:AB:B9:C6:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:11:68:b7:14:04:03:27:e4:bd:02:24:47:f8:56:7c:35:e2:
         b3:0c:de:d4:64:c1:64:4d:31:de:2c:f3:3b:59:ae:c8:b1:bc:
         a7:a5:b0:9b:ee:c6:03:20:e5:ce:c9:3f:d0:45:7b:db:77:8c:
         bf:c7:51:2e:3e:43:5b:a0:df:40:4c:14:1c:75:b2:ac:94:61:
         14:ca:50:c8:a4:d7:ef:52:5e:83:0a:7f:40:f9:72:48:8c:64:
         44:1b:21:c9:86:06:5b:00:12:81:95:5f:27:1c:aa:8d:5e:ec:
         78:d9:f6:ca:08:3b:ba:3f:2b:88:64:85:56:8a:a7:7b:36:9d:
         27:fb:3e:88:be:a1:23:02:8c:5b:b9:e3:31:8c:25:59:11:d3:
         8d:1e:1d:09:a9:56:97:1c:80:c1:81:65:56:d6:84:be:9b:cb:
         ac:4a:ca:f9:00:ca:fb:67:60:41:86:7b:09:50:40:26:52:71:
         d0:c5:df:ea:ee:1d:38:03:fa:49:f0:c9:31:b4:d5:15:c3:23:
         85:f0:8d:40:62:e9:ed:a1:dc:2e:0e:95:9a:4f:2d:b2:aa:f8:
         3a:f8:e6:dd:84:fa:1c:e1:fb:59:ae:70:e4:b5:35:18:4c:54:
         38:c8:a9:b4:54:78:d5:d4:e2:70:a2:08:42:2a:be:49:23:da:
         62:10:5c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 02:15:09 2025 by rpki-client