Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft
File:                     fzUqdpVtdwL8d69g_MEp5h_b6jI.mft (raw, json)
Hash identifier:          G6cvWUCT7DQTdvzg9MHu4J37z9bT6IS0VxYiD5COHpE=
Subject key identifier:   06:CC:E8:B4:E6:A3:E3:40:E6:FA:E0:19:57:06:F2:0F:43:D4:5A:B0
Authority key identifier: 7F:35:2A:76:95:6D:77:02:FC:77:AF:60:FC:C1:29:E6:1F:DB:EA:32
Certificate issuer:       /CN=A91E15AD/serialNumber=7F352A76956D7702FC77AF60FCC129E61FDBEA32
Certificate serial:       0182
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fzUqdpVtdwL8d69g_MEp5h_b6jI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft
Manifest number:          017A
Signing time:             Wed 05 Nov 2025 03:56:45 +0000
Manifest this update:     Wed 05 Nov 2025 03:56:45 +0000
Manifest next update:     Wed 12 Nov 2025 03:56:45 +0000
Files and hashes:         1: fzUqdpVtdwL8d69g_MEp5h_b6jI.crl (hash: 5xzrqia80ef2FBrViXxXvX7rQvU2LmgL77HVvT2fd7w=)
                          2: 3C2B0A98259911EFB9393E2EC4F9AE02.roa (hash: GUAKLioCiwQM0sEveusi3ixaoMT6G47CkUGC3S4J4Kc=)
                          3: 2A26D2607E1311EEAF8FD93EC4F9AE02.roa (hash: kLwQ9PBIqCKII7G0saaqu2rGr7qnQzEy5QYjy0dvRGs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.crl
                          rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fzUqdpVtdwL8d69g_MEp5h_b6jI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 03:56:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 386 (0x182)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E15AD, serialNumber=7F352A76956D7702FC77AF60FCC129E61FDBEA32
        Validity
            Not Before: Nov  5 03:56:45 2025 GMT
            Not After : Nov 12 03:56:45 2025 GMT
        Subject: CN=690acafd-f831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:7e:98:58:57:73:b0:00:e9:bf:7a:54:ba:7f:
                    06:0a:27:5b:c6:a2:40:db:e1:16:34:cf:57:79:8d:
                    f5:4e:e5:e5:8f:cd:74:57:24:82:bc:69:7f:2d:1e:
                    d8:57:74:f5:e5:e0:87:c8:b1:d0:f0:90:f4:14:e5:
                    66:d9:47:df:db:71:ad:1e:73:cf:a1:44:15:62:6e:
                    8c:cc:ee:60:22:5b:ef:92:7a:e0:9c:20:22:25:96:
                    ce:69:8e:e9:86:3d:89:b4:fe:d4:7f:a0:c0:4d:65:
                    0d:e3:5b:b1:04:ca:a0:1b:0b:b8:56:48:1b:f4:0a:
                    e7:c5:02:91:8e:5f:c4:3f:bf:29:e4:bb:5f:85:2a:
                    4f:8b:bc:50:f3:e6:db:77:ed:ba:93:19:36:a5:fc:
                    1b:33:7d:76:e4:3b:00:f0:5a:ef:88:7f:b2:d5:86:
                    d4:b3:8c:13:f4:ee:07:55:8b:52:a4:70:11:7f:2f:
                    36:ba:16:0c:87:95:64:52:64:01:cb:81:fa:d7:7f:
                    60:29:05:43:e7:b8:a1:8c:01:29:a7:b9:6e:1a:17:
                    2c:fa:16:eb:b1:d6:06:2d:71:e0:89:94:48:77:8d:
                    3a:10:06:eb:ee:bf:65:2c:47:2e:dd:d9:c0:13:50:
                    3d:c8:97:75:5c:ce:10:7d:a1:d8:b4:0a:17:9f:ad:
                    84:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:CC:E8:B4:E6:A3:E3:40:E6:FA:E0:19:57:06:F2:0F:43:D4:5A:B0
            X509v3 Authority Key Identifier:
                keyid:7F:35:2A:76:95:6D:77:02:FC:77:AF:60:FC:C1:29:E6:1F:DB:EA:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fzUqdpVtdwL8d69g_MEp5h_b6jI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:9e:b7:83:2e:00:37:0b:89:c2:c8:55:ce:8b:d8:44:45:7c:
         ff:d8:6d:e2:cc:d8:25:ce:7b:5c:3a:a8:89:0e:2d:03:7a:b3:
         4c:8d:d7:5b:21:56:58:82:50:6e:90:25:64:49:94:7b:94:83:
         e5:60:c6:d9:f8:95:92:6e:07:d8:ee:fd:d8:f3:e0:e9:79:bd:
         02:1e:8a:33:24:80:e5:51:73:26:53:d8:f2:b6:45:6b:a7:b3:
         d5:58:92:82:aa:13:8d:7e:0e:62:3c:28:e7:44:09:d3:b1:ad:
         54:95:46:64:c2:4a:f0:a1:66:d4:53:4e:b2:56:c7:64:ec:7e:
         cd:60:23:37:6b:a1:3a:2c:cc:fd:06:f8:60:a4:8e:1a:40:fa:
         15:eb:8b:06:17:f5:82:98:6e:16:f4:f2:dc:82:c7:ea:fc:bc:
         67:0b:df:86:2d:ea:24:08:b5:7b:de:e6:5c:d4:53:bb:46:4b:
         c8:71:dd:87:35:0e:c2:f6:d7:b3:50:64:2a:81:9d:a4:cb:99:
         c0:41:cf:05:72:3a:1f:12:69:4d:55:91:90:1c:72:3f:54:94:
         be:19:ff:84:df:ff:43:cb:92:df:20:0a:21:b5:d9:c7:ff:58:
         aa:d0:eb:bf:4b:ec:e1:58:14:00:a1:80:88:d8:02:f1:b0:6a:
         d0:61:d2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:49:56 2025 by rpki-client