Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft
File:                     4x5nyg5b7bJI-Xplfe_2LshvUks.mft (raw, json)
Hash identifier:          B/8gpPQZLlPLSgZb3QGKkQXBwgMthOLbKf3G/fbjRFE=
Subject key identifier:   6B:EB:0C:90:75:B6:FD:C4:D6:5C:46:69:B7:B7:39:83:FE:85:62:72
Authority key identifier: E3:1E:67:CA:0E:5B:ED:B2:48:F9:7A:65:7D:EF:F6:2E:C8:6F:52:4B
Certificate issuer:       /CN=A91ED5D9/serialNumber=E31E67CA0E5BEDB248F97A657DEFF62EC86F524B
Certificate serial:       02CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4x5nyg5b7bJI-Xplfe_2LshvUks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft
Manifest number:          02C9
Signing time:             Mon 03 Nov 2025 01:20:51 +0000
Manifest this update:     Mon 03 Nov 2025 01:20:50 +0000
Manifest next update:     Mon 10 Nov 2025 01:20:50 +0000
Files and hashes:         1: 4x5nyg5b7bJI-Xplfe_2LshvUks.crl (hash: ejULdAJrawj9LtSUSm3eMAFSIVBiVz0knbZSZwq53Oc=)
                          2: A3013D2A0CCB11ED97820077C4F9AE02.roa (hash: h+ue+R5DGdF0uaqUXBTnmoh/DYvzHxp90t2bN+4sANk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.crl
                          rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4x5nyg5b7bJI-Xplfe_2LshvUks.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 01:20:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 717 (0x2cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED5D9, serialNumber=E31E67CA0E5BEDB248F97A657DEFF62EC86F524B
        Validity
            Not Before: Nov  3 01:20:50 2025 GMT
            Not After : Nov 10 01:20:50 2025 GMT
        Subject: CN=69080372-451f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3c:d1:15:1a:58:54:75:03:8e:44:b7:c8:77:
                    7a:77:ea:7e:ad:87:f6:73:a6:ee:e8:90:3d:23:49:
                    a5:97:64:c3:f5:17:4b:69:b4:6c:49:96:57:99:17:
                    4d:a6:d8:28:c7:6e:a1:b0:cf:64:82:6a:f7:8a:a0:
                    d6:07:36:29:6c:b9:d0:df:0f:d3:14:33:96:00:fe:
                    ff:3a:fe:17:15:ce:b5:48:4e:15:81:2d:33:a0:93:
                    74:db:be:b0:a7:9c:26:26:af:f0:f7:7b:28:d9:23:
                    fc:5e:9f:f8:9d:2d:78:01:7b:17:8f:c1:62:3a:9f:
                    e2:8a:26:d5:7e:5a:61:64:db:07:2d:bd:36:8b:75:
                    f5:99:5b:59:6e:49:f3:e1:4b:0d:78:e6:fb:ca:98:
                    92:d7:76:a0:a0:11:f0:53:ee:1e:a2:e5:4a:5d:ac:
                    3f:17:7a:27:a8:0b:96:de:54:17:3e:28:f5:79:b5:
                    83:1c:fc:1f:ca:5e:8d:6b:f0:28:1d:6d:b9:80:4f:
                    bd:2e:f7:18:52:ae:f8:23:28:4d:99:1b:bb:a1:35:
                    08:57:23:47:da:21:25:c3:30:bd:d2:8c:b3:ca:32:
                    03:5e:0d:84:05:12:7b:86:2c:b9:40:71:7d:e0:3c:
                    36:ba:72:9c:20:d0:42:30:56:94:d5:23:40:77:f9:
                    75:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:EB:0C:90:75:B6:FD:C4:D6:5C:46:69:B7:B7:39:83:FE:85:62:72
            X509v3 Authority Key Identifier:
                keyid:E3:1E:67:CA:0E:5B:ED:B2:48:F9:7A:65:7D:EF:F6:2E:C8:6F:52:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4x5nyg5b7bJI-Xplfe_2LshvUks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:58:d2:15:2d:e9:d3:7d:22:e2:a4:5e:a7:7e:18:23:a5:77:
         fd:6f:27:bf:2d:cd:db:88:75:f4:ce:83:a1:7f:51:6a:4a:63:
         1e:cb:38:da:1b:fc:29:c5:fb:70:e6:99:d5:62:75:b9:0e:a2:
         24:db:66:a5:9c:c1:ec:d4:94:d8:bc:2c:56:f3:23:40:a1:6c:
         31:aa:f6:58:18:e5:90:c4:78:3d:9c:6b:aa:2d:eb:70:22:03:
         8b:3c:95:dd:cb:9c:63:2d:13:b7:0c:db:e6:f2:a4:00:fd:42:
         4d:75:5f:f3:f9:0b:6d:0f:22:db:fc:0e:22:43:2a:6a:9e:e4:
         93:56:9c:35:f8:5b:f0:10:a5:55:42:42:7d:48:2f:4e:3b:47:
         59:f1:cc:ed:d1:36:be:ae:e3:0b:72:d3:da:48:31:0f:11:81:
         21:65:bb:cd:d2:54:34:53:21:2d:cc:a3:c3:d5:9a:3a:1d:e4:
         52:03:62:eb:35:a4:3c:35:37:b3:6d:1d:50:7b:f7:4f:6c:ff:
         2c:7a:96:5e:10:dd:66:bb:93:36:e9:33:f9:a0:48:43:13:57:
         ac:a9:d3:7c:30:e9:f9:b7:d2:82:ee:cf:03:a7:ec:67:1d:bd:
         f7:5a:c7:15:2b:ae:5a:99:d1:05:2d:f1:b5:17:94:eb:7b:5f:
         07:f4:b3:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:04:06 2025 by rpki-client