Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB0E2/B623852A2D6611EBB44F5725C4F9AE02/ed1SqjF1MIEm0XSGpygF-w4bqlg.mft
File:                     ed1SqjF1MIEm0XSGpygF-w4bqlg.mft (raw, json)
Hash identifier:          6pqBMFiJNhxo/yRAJzHe2tWzLmwXWCapmXErPy0OfV8=
Subject key identifier:   37:09:A8:9D:85:AE:D1:54:10:1C:AE:DB:22:FC:6D:52:12:88:C7:28
Authority key identifier: 79:DD:52:AA:31:75:30:81:26:D1:74:86:A7:28:05:FB:0E:1B:AA:58
Certificate issuer:       /CN=A91CB0E2/serialNumber=79DD52AA3175308126D17486A72805FB0E1BAA58
Certificate serial:       0793
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ed1SqjF1MIEm0XSGpygF-w4bqlg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB0E2/B623852A2D6611EBB44F5725C4F9AE02/ed1SqjF1MIEm0XSGpygF-w4bqlg.mft
Manifest number:          078C
Signing time:             Sun 02 Nov 2025 21:29:02 +0000
Manifest this update:     Sun 02 Nov 2025 21:29:02 +0000
Manifest next update:     Sun 09 Nov 2025 21:29:02 +0000
Files and hashes:         1: ed1SqjF1MIEm0XSGpygF-w4bqlg.crl (hash: DbKzlXU7cZjmm1xIupGwexs1r5k44292b/qwtD0lpkY=)
                          2: 6B5C86022D6811EB86D96027C4F9AE02.roa (hash: t3hqNdqM2MD3ZAVu8FNoGwxlm5G0gcPJniuKJXcYFWI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB0E2/B623852A2D6611EBB44F5725C4F9AE02/ed1SqjF1MIEm0XSGpygF-w4bqlg.crl
                          rsync://rpki.apnic.net/member_repository/A91CB0E2/B623852A2D6611EBB44F5725C4F9AE02/ed1SqjF1MIEm0XSGpygF-w4bqlg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ed1SqjF1MIEm0XSGpygF-w4bqlg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 21:29:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1939 (0x793)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB0E2, serialNumber=79DD52AA3175308126D17486A72805FB0E1BAA58
        Validity
            Not Before: Nov  2 21:29:02 2025 GMT
            Not After : Nov  9 21:29:02 2025 GMT
        Subject: CN=6907cd1e-f91c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e8:bd:31:f5:f6:d9:50:5b:0d:bf:0a:be:d5:
                    5f:26:56:22:02:c2:a9:a2:b4:10:74:96:a5:18:25:
                    77:61:f6:7c:7e:94:41:9d:17:99:40:8c:4d:f7:04:
                    bd:92:8c:b2:6f:08:41:3f:d5:5a:f5:1b:ae:b1:c7:
                    39:ad:90:e0:19:1e:24:1e:bd:fb:3f:a7:bf:60:f4:
                    b2:73:a2:dc:ce:2f:59:15:7f:7a:a0:41:06:a6:05:
                    d8:29:df:9e:88:4a:c7:c2:52:da:4e:cf:ef:62:20:
                    da:65:b1:32:70:a0:81:7b:d6:2c:da:cd:f8:3b:90:
                    d5:7d:64:4b:5e:c3:ff:aa:49:98:9b:38:0f:24:8c:
                    03:48:a7:bc:58:76:91:86:35:30:38:d2:4d:5d:1a:
                    42:e0:d8:f0:84:db:a5:33:d0:cc:14:7f:ba:a3:8d:
                    c6:2b:56:27:69:b4:cc:54:70:c4:c8:6d:e6:ea:2d:
                    46:65:62:57:bb:bf:c0:b3:c5:40:ac:af:9e:9b:48:
                    98:f0:63:ec:81:df:89:c1:af:47:86:51:b9:7a:45:
                    20:7a:b5:62:b0:4c:aa:0e:ea:12:28:17:49:b7:73:
                    11:13:58:44:07:01:04:c5:15:ae:a6:e8:76:26:60:
                    e1:10:73:22:0d:ac:0c:a6:45:0c:61:2c:a2:b6:e9:
                    4e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:09:A8:9D:85:AE:D1:54:10:1C:AE:DB:22:FC:6D:52:12:88:C7:28
            X509v3 Authority Key Identifier:
                keyid:79:DD:52:AA:31:75:30:81:26:D1:74:86:A7:28:05:FB:0E:1B:AA:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB0E2/B623852A2D6611EBB44F5725C4F9AE02/ed1SqjF1MIEm0XSGpygF-w4bqlg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ed1SqjF1MIEm0XSGpygF-w4bqlg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB0E2/B623852A2D6611EBB44F5725C4F9AE02/ed1SqjF1MIEm0XSGpygF-w4bqlg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:80:4c:8a:d3:dd:9b:27:3a:45:63:78:f6:70:36:70:2f:e5:
         f2:ef:4c:97:5b:b9:09:38:9f:8a:95:84:80:73:4b:9c:1e:e5:
         82:24:69:9a:be:1a:01:a5:2b:50:2f:03:b3:d6:59:99:7b:b3:
         b8:99:ad:81:00:50:de:c0:cb:61:b7:a3:59:aa:77:4e:08:a9:
         37:97:a1:b2:7e:17:91:ff:2b:9c:1c:ee:48:f2:52:74:76:40:
         1e:26:b6:fd:46:bd:ed:ab:61:be:6a:cc:cc:9d:22:af:c5:5a:
         d5:0e:94:a8:48:de:a7:e7:63:99:b7:1f:8b:fd:a7:c1:bd:d6:
         e6:96:92:6a:2d:4b:83:21:3a:20:fe:5e:3f:c4:db:3c:f8:21:
         22:a4:cd:a9:c8:38:e2:40:af:c6:34:18:a9:c1:c7:54:43:3e:
         c4:3f:ee:a0:32:8e:fd:7f:08:4f:26:10:e2:a8:cb:7e:22:6e:
         13:a9:b6:3f:47:9f:fb:af:a7:d9:ae:9f:93:ac:ea:bd:af:c7:
         dd:c5:3e:5d:43:e4:8a:be:19:db:19:2e:d1:5a:be:f2:95:4f:
         57:eb:c3:c5:f6:46:75:93:32:d5:56:35:c8:a8:bd:85:00:a7:
         2d:3c:2b:d0:ef:96:11:a5:e6:87:5e:b6:08:1d:c1:07:42:ea:
         90:4b:03:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 08:18:14 2025 by rpki-client