Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft
File:                     B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft (raw, json)
Hash identifier:          C57xVbgT4H7oq4PpHQTesDtwDcdmz+NJ9ddcGV+ghPs=
Subject key identifier:   E2:4E:56:75:D8:7E:55:CC:9C:0B:81:36:B0:75:E6:F9:EE:1B:82:75
Authority key identifier: 07:81:67:5C:C6:4F:AB:2B:84:5D:A7:F5:11:55:49:80:42:EC:E4:67
Certificate issuer:       /CN=A91CDCB6/serialNumber=0781675CC64FAB2B845DA7F51155498042ECE467
Certificate serial:       1E8F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft
Manifest number:          1E6D
Signing time:             Tue 04 Nov 2025 16:10:24 +0000
Manifest this update:     Tue 04 Nov 2025 16:10:23 +0000
Manifest next update:     Tue 11 Nov 2025 16:10:23 +0000
Files and hashes:         1: B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl (hash: L4qoARE4MQLsg0eCVveZ7A/NjDpq8ay48x9CyTq4wss=)
                          2: BD314CEA619711EE81211277C4F9AE02.roa (hash: 16s8rqQL7ZS3OY13WYasSB/OdPD3K/KWoSmSDxk1MUc=)
                          3: 48471CAE611811EEB2B1C077C4F9AE02.roa (hash: XAUpnIWVoo2gP76XF78PGBVOZx+0l56I4zT3vqwFcwU=)
                          4: F0F97030612C11EF85AF817EC4F9AE02.roa (hash: 4P/xIWjkOZt+s6V/SN3xcWLg6ZfxIlwRFodBInoaJSg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl
                          rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 16:10:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7823 (0x1e8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDCB6, serialNumber=0781675CC64FAB2B845DA7F51155498042ECE467
        Validity
            Not Before: Nov  4 16:10:23 2025 GMT
            Not After : Nov 11 16:10:23 2025 GMT
        Subject: CN=690a256f-12e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:35:75:e5:5f:65:47:44:e5:d7:35:81:6c:0b:
                    e7:05:2f:22:90:cb:1c:ad:40:ec:2c:8d:bc:17:dc:
                    28:d5:5e:98:22:1d:98:0a:27:6d:15:fb:d2:f1:ad:
                    60:61:85:63:05:d3:68:ff:fc:ef:e1:8c:ed:2a:a6:
                    5d:0f:68:fa:f0:25:ef:b0:ff:36:1a:22:35:e4:7c:
                    89:e6:5e:94:fd:ae:6f:87:8e:1e:28:74:22:18:b1:
                    6f:38:fe:32:e7:9e:78:a3:3d:03:04:1a:b2:e4:cf:
                    6d:f3:9a:fe:bc:f3:e5:04:3e:aa:c5:84:ac:c3:fe:
                    6c:18:56:86:2f:33:6d:b5:39:9b:db:9a:33:61:a5:
                    4c:62:68:6e:71:7e:a2:82:e8:4a:ec:eb:17:55:96:
                    4b:35:64:59:f3:0a:a8:90:50:b6:53:78:b9:39:29:
                    8d:8d:b9:2e:c7:4d:7a:88:15:0b:23:48:af:71:13:
                    75:9e:3d:89:f3:75:93:fe:7f:85:b4:2e:fb:7f:4f:
                    c7:c1:5c:3c:14:f6:1d:ba:e7:f7:8f:67:0d:aa:c6:
                    37:b7:36:15:7c:5f:55:ea:f8:a7:81:24:a0:60:95:
                    3e:0a:39:12:23:08:29:cf:b2:ab:a9:d7:7f:22:be:
                    ae:ba:f6:3d:49:57:f3:29:02:fd:2f:e0:a3:19:2d:
                    00:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:4E:56:75:D8:7E:55:CC:9C:0B:81:36:B0:75:E6:F9:EE:1B:82:75
            X509v3 Authority Key Identifier:
                keyid:07:81:67:5C:C6:4F:AB:2B:84:5D:A7:F5:11:55:49:80:42:EC:E4:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:76:c9:e8:2d:f0:47:9a:37:75:74:2e:23:db:09:cb:ab:6e:
         75:42:27:d3:8f:a5:2a:64:1a:d6:da:65:a4:62:0b:7b:89:37:
         99:f1:9e:2f:4d:6d:9b:08:6b:c0:6b:cd:d7:db:d0:3b:19:56:
         53:4a:20:31:81:e4:b5:c7:fb:e3:68:55:04:6c:d9:65:3d:32:
         ac:91:49:09:d5:25:30:2e:fb:7c:11:44:8c:70:a6:f2:aa:c5:
         47:a5:e5:ad:01:38:84:8e:19:78:18:13:ec:a7:cd:74:83:e0:
         96:a4:f2:11:ed:c4:96:0e:96:b1:3a:e0:ff:b3:bb:3e:a2:89:
         18:26:61:3a:4b:65:7e:39:c8:86:d7:01:1e:3d:2f:fc:53:39:
         9b:4f:c8:32:30:db:18:bb:fc:8c:e6:38:ec:d3:fe:d2:10:d2:
         07:98:4d:41:9c:e7:7c:ef:18:c3:da:84:8b:f4:5c:c1:25:bb:
         52:76:64:8d:e5:88:34:bc:4f:f0:4f:2f:18:e0:f6:d2:b1:ec:
         52:9d:fe:3c:b0:52:8a:4d:eb:a0:37:b0:33:f8:81:21:2f:14:
         32:0d:00:96:7b:ed:0d:52:4f:d0:94:bd:52:07:da:8a:cd:f5:
         58:52:cd:29:96:18:c7:fb:df:6b:7c:bc:0d:ee:3f:91:8f:50:
         11:6e:77:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:25:18 2025 by rpki-client