Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.mft
File:                     4JI7Cl99XGi66s5BQV9CpSDXSyo.mft (raw, json)
Hash identifier:          RaVKM+Rzl09KYSaTCOVbAac7gfFCxCGqmyH32AbBGOE=
Subject key identifier:   E6:2E:DE:AC:FF:4D:40:BE:26:73:12:1D:46:82:86:82:45:D8:CF:B7
Authority key identifier: E0:92:3B:0A:5F:7D:5C:68:BA:EA:CE:41:41:5F:42:A5:20:D7:4B:2A
Certificate issuer:       /CN=A91D9E49/serialNumber=E0923B0A5F7D5C68BAEACE41415F42A520D74B2A
Certificate serial:       0B64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JI7Cl99XGi66s5BQV9CpSDXSyo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.mft
Manifest number:          0B5C
Signing time:             Tue 04 Nov 2025 19:14:21 +0000
Manifest this update:     Tue 04 Nov 2025 19:14:20 +0000
Manifest next update:     Tue 11 Nov 2025 19:14:20 +0000
Files and hashes:         1: 4JI7Cl99XGi66s5BQV9CpSDXSyo.crl (hash: HzwqvIWNNk78NNlzMPAZctY9mq9fd93UoK5RWu1b9I0=)
                          2: 4CC0341641A311EABAADCE0AC4F9AE02.roa (hash: NcQf930jPATr+5XDKM18U6rSGEkKZ2yaCI8MgpUcALY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.crl
                          rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JI7Cl99XGi66s5BQV9CpSDXSyo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 19:14:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2916 (0xb64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9E49, serialNumber=E0923B0A5F7D5C68BAEACE41415F42A520D74B2A
        Validity
            Not Before: Nov  4 19:14:20 2025 GMT
            Not After : Nov 11 19:14:20 2025 GMT
        Subject: CN=690a508d-e967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e4:21:94:00:3b:eb:90:80:a2:1b:6b:be:63:
                    89:9d:5f:da:82:48:ae:f2:16:4c:55:87:1b:64:15:
                    8e:76:7c:1f:89:13:ff:34:e5:df:bc:60:af:bd:91:
                    cc:eb:80:4a:72:cc:7f:94:06:3f:56:8b:62:d0:cb:
                    32:15:31:57:cf:68:06:90:a8:20:6d:c4:23:3c:88:
                    db:38:ec:b4:cc:4e:13:1c:e2:29:7c:c4:ce:60:8d:
                    c6:0d:25:71:3c:29:02:bf:12:bb:57:07:a1:92:69:
                    06:92:bb:dd:36:a0:93:0a:e1:97:d5:eb:14:62:3b:
                    62:2e:5e:dd:2c:fc:0b:dd:b0:f2:09:00:c1:2a:49:
                    c0:2c:97:52:d1:74:cc:ee:c5:b7:eb:a9:a9:d2:29:
                    f5:d2:a5:d0:3e:18:f0:29:bc:81:4b:0e:ed:7a:db:
                    29:ba:85:ec:5e:1d:50:da:05:a8:76:1e:ad:38:a1:
                    a2:a0:52:f8:3e:e4:cd:8a:76:e1:b2:9f:03:8e:7a:
                    53:63:45:32:af:f0:81:9f:9c:2d:69:5b:a6:5d:bb:
                    76:b2:86:61:a9:75:8b:e8:5a:a2:2e:a1:e5:3b:c4:
                    21:0c:e0:53:87:4f:7c:d4:c3:7d:05:a0:e7:7b:6f:
                    3a:cf:70:72:e4:5d:09:ac:c7:ce:51:db:aa:6a:62:
                    b3:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:2E:DE:AC:FF:4D:40:BE:26:73:12:1D:46:82:86:82:45:D8:CF:B7
            X509v3 Authority Key Identifier:
                keyid:E0:92:3B:0A:5F:7D:5C:68:BA:EA:CE:41:41:5F:42:A5:20:D7:4B:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JI7Cl99XGi66s5BQV9CpSDXSyo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:f0:29:78:94:c9:07:ed:78:79:02:5d:3b:17:6d:9e:a3:c4:
         dd:72:e7:87:fa:66:0c:e8:34:19:c1:be:56:26:cf:d6:12:48:
         dd:99:f2:25:42:7c:cf:c7:28:e1:fb:f4:a4:bd:37:a3:b6:6a:
         e7:7b:75:b9:37:1f:5c:da:c4:ff:7f:de:25:05:97:ea:26:a8:
         f8:52:cf:f0:b2:58:0e:bd:b9:c2:ed:49:90:52:49:59:90:3a:
         5c:dc:6f:4e:71:b6:21:e3:1b:ab:98:12:e6:65:8d:28:f1:73:
         fe:39:74:06:db:fd:a2:7d:b0:1f:bf:c5:4a:86:03:fa:b3:56:
         66:71:1f:43:ed:38:85:ce:8d:e2:7c:d7:09:5a:20:66:69:ff:
         9b:e3:13:64:8d:8b:1b:da:a8:f2:67:88:07:5b:fe:29:4c:ac:
         25:bb:00:03:a7:61:21:c1:04:e4:6f:94:a0:81:c8:a7:ee:8f:
         af:ef:c0:0d:a8:64:dc:e5:50:9d:c9:37:64:47:3f:33:78:54:
         5f:fe:ac:ec:61:e5:6b:a6:c7:35:c9:57:78:9d:65:ae:b0:a5:
         f5:85:e4:8e:a5:8b:18:34:c5:2b:e8:20:2c:47:b8:b4:e3:b6:
         07:41:f2:85:77:e1:e9:73:dc:72:6d:20:02:cf:b5:ba:92:1f:
         14:ba:72:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:47:06 2025 by rpki-client