Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D09A2/1FEB5A208C6A11EB98DEDD68C4F9AE02/78WCsqPLLBDooxZW548EvNW8UxA.mft
File:                     78WCsqPLLBDooxZW548EvNW8UxA.mft (raw, json)
Hash identifier:          EG8PiJ4zmfrYpcn8draOoNWYn1xYyMn2zRClAFUDUcI=
Subject key identifier:   1A:30:0F:33:E9:CC:DA:71:07:CE:5D:7C:66:22:F7:15:02:AE:F0:5B
Authority key identifier: EF:C5:82:B2:A3:CB:2C:10:E8:A3:16:56:E7:8F:04:BC:D5:BC:53:10
Certificate issuer:       /CN=A91D09A2/serialNumber=EFC582B2A3CB2C10E8A31656E78F04BCD5BC5310
Certificate serial:       06A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78WCsqPLLBDooxZW548EvNW8UxA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D09A2/1FEB5A208C6A11EB98DEDD68C4F9AE02/78WCsqPLLBDooxZW548EvNW8UxA.mft
Manifest number:          069E
Signing time:             Tue 04 Nov 2025 22:25:34 +0000
Manifest this update:     Tue 04 Nov 2025 22:25:34 +0000
Manifest next update:     Tue 11 Nov 2025 22:25:34 +0000
Files and hashes:         1: 78WCsqPLLBDooxZW548EvNW8UxA.crl (hash: YgglgQhYZl8hzohBN3K+0kmvMYPLI2oDdmxvNbyjulY=)
                          2: 59AD29B88C6B11EBA286C569C4F9AE02.roa (hash: 7mKCoY5AEtshNQV8l9pmhY0mvA9jDUflCVQDRZpIa2M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D09A2/1FEB5A208C6A11EB98DEDD68C4F9AE02/78WCsqPLLBDooxZW548EvNW8UxA.crl
                          rsync://rpki.apnic.net/member_repository/A91D09A2/1FEB5A208C6A11EB98DEDD68C4F9AE02/78WCsqPLLBDooxZW548EvNW8UxA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78WCsqPLLBDooxZW548EvNW8UxA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 22:25:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1703 (0x6a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D09A2, serialNumber=EFC582B2A3CB2C10E8A31656E78F04BCD5BC5310
        Validity
            Not Before: Nov  4 22:25:34 2025 GMT
            Not After : Nov 11 22:25:34 2025 GMT
        Subject: CN=690a7d5e-497f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:94:89:3c:05:db:67:d4:b5:ca:2e:fb:0d:df:
                    7c:7d:9e:9e:6a:6e:06:89:c4:fb:7b:95:c0:bf:cb:
                    0d:34:a5:4b:9b:05:ac:1b:a4:9f:14:b4:03:7a:71:
                    52:37:b4:9a:6e:99:73:38:48:4c:9b:94:d6:07:bf:
                    65:9f:fd:9c:3f:22:5f:40:b6:4c:d8:9c:48:8a:d5:
                    1d:f4:ec:08:cc:60:8f:85:d1:0f:75:f8:d3:06:01:
                    89:05:2d:39:f6:e5:1d:b3:28:d4:56:2a:25:c2:63:
                    d5:72:3b:fb:4a:b2:10:7f:61:54:57:ba:ca:d7:38:
                    db:51:93:91:f0:1a:18:9d:b0:55:b6:8b:bd:bd:b5:
                    04:39:64:94:6e:b3:18:4e:9d:6d:92:4f:5b:b8:f8:
                    eb:48:96:db:bb:fc:d5:29:31:50:27:9d:bf:bc:3b:
                    6d:9a:ef:fb:13:8f:a4:73:22:ac:a6:6d:50:ef:1f:
                    ca:64:8f:0e:70:b7:44:1a:ef:a4:c8:b9:64:ac:2a:
                    7f:c1:e3:ca:5e:62:c3:ff:c8:c9:ad:8c:d9:49:0a:
                    46:fe:70:d6:c1:77:db:3c:75:37:08:71:d6:66:65:
                    41:99:69:9e:e2:9d:2c:6e:f1:3c:64:1d:9d:e4:eb:
                    73:ce:3b:04:41:4b:65:a8:ee:cc:85:6e:a8:4f:10:
                    86:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:30:0F:33:E9:CC:DA:71:07:CE:5D:7C:66:22:F7:15:02:AE:F0:5B
            X509v3 Authority Key Identifier:
                keyid:EF:C5:82:B2:A3:CB:2C:10:E8:A3:16:56:E7:8F:04:BC:D5:BC:53:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D09A2/1FEB5A208C6A11EB98DEDD68C4F9AE02/78WCsqPLLBDooxZW548EvNW8UxA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78WCsqPLLBDooxZW548EvNW8UxA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09A2/1FEB5A208C6A11EB98DEDD68C4F9AE02/78WCsqPLLBDooxZW548EvNW8UxA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:ee:ce:35:1b:78:f7:12:a5:4e:e3:d0:40:3c:55:a9:b2:64:
         2a:aa:26:42:1a:6a:7a:44:df:b9:1e:a6:6c:fa:c2:f7:41:8c:
         e1:6f:8d:82:70:52:52:55:de:11:e0:94:50:d2:10:fd:5a:6c:
         f5:b7:30:e3:1c:e7:41:85:fb:ad:94:74:9a:e7:09:73:19:86:
         40:e9:51:bb:5c:eb:11:e3:ef:34:4a:63:76:2d:07:c8:07:fe:
         04:50:f1:02:de:fa:66:16:6e:90:9a:4f:7d:1c:05:d2:96:4e:
         81:f4:79:a0:38:cd:4d:4e:03:5a:9c:1a:a6:49:53:d5:f6:3c:
         83:b0:40:0b:e3:5a:d8:e4:cd:9a:03:c7:ec:de:90:9f:b5:51:
         47:f4:45:50:75:f5:c8:df:85:4f:8a:48:fd:d5:21:4c:56:4c:
         45:40:fc:5d:04:bd:26:c7:d1:db:06:48:ff:d2:b3:e7:4c:6e:
         f5:2d:95:ba:18:ef:1a:84:a9:3e:2b:f0:1c:e9:9c:e7:e2:84:
         7b:16:14:47:01:d1:96:25:1e:d6:6d:f0:c0:f8:59:b3:23:f8:
         5d:ac:4a:7d:6f:5a:1b:1b:dd:34:12:75:c2:f9:fc:8f:56:bf:
         f0:2b:02:58:10:db:d6:2b:8b:c0:88:28:fe:3e:db:49:8c:58:
         28:66:22:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:17:05 2025 by rpki-client