Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.mft
File:                     F_T7EodW67C6xZ1OD0t-CHJ5dg0.mft (raw, json)
Hash identifier:          pONOrYs6j9Z26P7++cLAsnJKvgZH9W8DNWLkDgIBrWg=
Subject key identifier:   AC:BC:CE:53:47:89:00:57:0E:A6:E7:2A:A0:3D:2A:56:26:48:5B:AA
Authority key identifier: 17:F4:FB:12:87:56:EB:B0:BA:C5:9D:4E:0F:4B:7E:08:72:79:76:0D
Certificate issuer:       /CN=A91ED17F/serialNumber=17F4FB128756EBB0BAC59D4E0F4B7E087279760D
Certificate serial:       081A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_T7EodW67C6xZ1OD0t-CHJ5dg0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.mft
Manifest number:          080D
Signing time:             Tue 04 Nov 2025 21:00:41 +0000
Manifest this update:     Tue 04 Nov 2025 21:00:41 +0000
Manifest next update:     Tue 11 Nov 2025 21:00:41 +0000
Files and hashes:         1: F_T7EodW67C6xZ1OD0t-CHJ5dg0.crl (hash: v7Bdk3FVaEkAqOIwhIKQilRmwrWrNM8mzULu518HpE8=)
                          2: 8D38DE3C2FED11ECB35A414FC4F9AE02.roa (hash: 4nNxlXf6o0nnD5I2xWyRCuAKUzO3zgq8UO0w+zr/898=)
                          3: 8E7B872C2FED11ECB35A414FC4F9AE02.roa (hash: OlQKH7ACIVrHGtlUAnuv3tHbt5ORT3G0pc9ERA6ytzA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.crl
                          rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_T7EodW67C6xZ1OD0t-CHJ5dg0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 21:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2074 (0x81a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED17F, serialNumber=17F4FB128756EBB0BAC59D4E0F4B7E087279760D
        Validity
            Not Before: Nov  4 21:00:41 2025 GMT
            Not After : Nov 11 21:00:41 2025 GMT
        Subject: CN=690a6979-88fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:af:f7:27:df:58:5d:04:47:88:4b:28:96:1c:
                    ea:f7:c5:80:ce:4a:ba:ac:fb:97:32:87:39:1a:9c:
                    88:1e:b5:44:95:b1:b5:8a:8c:36:31:6c:0b:96:8f:
                    1c:38:17:b5:d5:70:f6:cb:ce:4d:8e:23:2e:35:8b:
                    ba:67:d2:99:28:13:13:ef:cc:9c:ee:45:7c:00:5a:
                    07:0a:98:a5:05:d2:24:33:3a:52:84:96:ca:56:b9:
                    d0:3d:14:fb:3f:14:12:96:d4:45:f3:90:52:57:24:
                    7e:35:ba:ae:a5:9d:14:6a:5e:46:ac:47:20:37:f5:
                    a9:d9:d1:69:da:c5:58:b0:08:73:f0:ed:68:65:75:
                    44:6d:8b:28:1e:0a:45:f0:71:54:21:36:d4:28:64:
                    2a:89:76:c7:17:62:7d:6b:af:91:4f:c4:c9:62:9c:
                    54:2e:83:70:cf:e8:1e:88:ca:df:1b:13:86:92:b3:
                    93:7b:5d:60:75:c2:97:b9:ce:70:92:08:0c:15:24:
                    78:25:04:62:ef:a6:b7:cb:2d:1d:20:72:8d:23:0e:
                    59:8c:60:fe:f8:88:bf:5f:1b:76:0b:50:d4:83:21:
                    34:08:7f:42:0d:87:56:f0:e7:f5:5d:8c:c1:f2:1d:
                    84:f0:73:86:3f:b1:bb:ca:1c:2a:6c:2b:c9:38:2d:
                    ee:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:BC:CE:53:47:89:00:57:0E:A6:E7:2A:A0:3D:2A:56:26:48:5B:AA
            X509v3 Authority Key Identifier:
                keyid:17:F4:FB:12:87:56:EB:B0:BA:C5:9D:4E:0F:4B:7E:08:72:79:76:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_T7EodW67C6xZ1OD0t-CHJ5dg0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:43:f8:99:bf:ac:47:09:19:1b:2d:f2:75:b1:f1:13:3c:1e:
         02:c7:7b:58:00:d2:76:e3:c2:4c:bd:40:77:26:70:ea:4b:85:
         95:f2:d1:44:23:2c:d9:92:8c:56:e0:86:4f:70:d7:81:d9:d9:
         fb:80:1d:4f:a3:a1:e5:aa:33:7f:1e:78:de:4e:b5:ed:d8:fc:
         c4:5e:26:0f:4f:ac:7e:b8:f8:32:1b:4f:21:72:20:6b:35:d8:
         10:bd:93:2c:ed:d8:a2:ef:cf:81:dc:7c:44:78:37:7c:3a:f0:
         da:4e:91:39:51:b7:9a:4f:44:80:e6:96:31:ae:47:c5:07:1e:
         d0:43:40:e7:dd:ac:37:d0:fe:8e:24:4e:45:bc:ff:ec:4b:f6:
         ea:71:cc:2f:13:07:86:73:59:8e:18:19:aa:43:3a:4c:c0:67:
         69:ca:a3:78:f7:06:26:92:ad:26:ab:49:2d:75:75:2d:76:90:
         ca:10:88:92:93:fc:40:27:fe:39:f9:4e:15:0b:37:0f:82:05:
         36:1e:19:46:34:3e:e2:8c:2a:85:4d:ab:5c:3e:9f:21:4b:68:
         c7:10:cd:77:86:6c:e7:27:9b:58:ee:fc:a7:d1:d6:11:36:9a:
         9b:1e:d9:6b:1c:c5:3b:93:16:e8:b3:18:ee:83:ed:13:ea:8e:
         f9:d6:ec:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:31:38 2025 by rpki-client