Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft
File:                     G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft (raw, json)
Hash identifier:          2R5t+ogIMtUOKHy9uZiDBqxm2VNCOFwmEhHSZiuN5gY=
Subject key identifier:   72:50:96:A9:95:08:2A:A6:FB:2B:91:A6:04:90:CF:B6:3E:81:99:EF
Authority key identifier: 1B:F5:A8:D9:4C:E0:6C:E3:01:FC:35:D8:69:F7:0D:74:0D:70:97:52
Certificate issuer:       /CN=A91F67BB/serialNumber=1BF5A8D94CE06CE301FC35D869F70D740D709752
Certificate serial:       11AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft
Manifest number:          1186
Signing time:             Sun 02 Nov 2025 17:14:31 +0000
Manifest this update:     Sun 02 Nov 2025 17:14:31 +0000
Manifest next update:     Sun 09 Nov 2025 17:14:31 +0000
Files and hashes:         1: G_Wo2UzgbOMB_DXYafcNdA1wl1I.crl (hash: nGpmM3xeCriC2dyVAjAb2UVzYBprrFxIvBODnIOq284=)
                          2: 294F19380E5111E988F3C34BC4F9AE02.roa (hash: QAHQPcFmHI85jnhx3yTg0Uyrxvkcct/mLJCXfcGhkyU=)
                          3: FB675E140F0311E997412A4EC4F9AE02.roa (hash: nR4PLCRvWUgAotRGtX9lE5KuM6BWBXj0rPbeaYR4XNg=)
                          4: FAC7FE320F0311E997412A4EC4F9AE02.roa (hash: V2NhhwUM+gXJ6K0MxfFES/mwWiEj/nQp8QceYienoFY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.crl
                          rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 17:14:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4525 (0x11ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F67BB, serialNumber=1BF5A8D94CE06CE301FC35D869F70D740D709752
        Validity
            Not Before: Nov  2 17:14:31 2025 GMT
            Not After : Nov  9 17:14:31 2025 GMT
        Subject: CN=69079177-ecbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:b9:de:ac:1a:bf:d6:2b:0c:43:15:d8:55:58:
                    28:6d:68:41:38:8b:d1:bd:b3:88:e0:30:32:3e:98:
                    12:53:c4:76:d7:73:a8:f6:42:66:a7:3f:f0:5f:4d:
                    22:40:08:79:dd:f8:3b:9b:55:f6:cd:43:6d:b4:56:
                    ff:41:a2:c6:20:e0:49:76:78:8b:95:03:5d:b6:41:
                    88:80:42:5d:f3:d3:90:2b:6b:62:6f:d9:bb:bd:42:
                    b8:d9:ca:c7:1d:94:9c:49:5e:50:ba:f9:6f:d9:77:
                    bb:b9:cf:80:7c:9f:22:a2:4a:6d:d9:aa:16:17:6f:
                    6c:ee:62:3b:69:b9:c5:50:f1:d7:18:7d:b4:15:88:
                    06:f7:08:75:24:23:73:6b:5a:b3:f0:8b:69:47:27:
                    82:ef:80:0b:5b:cc:29:dd:35:e5:01:43:ea:f3:e1:
                    dd:0d:63:04:19:33:1a:c8:76:71:cf:17:90:94:d1:
                    f9:13:c3:35:ce:e6:3f:c4:fe:ae:0d:44:f1:9f:49:
                    83:92:9b:30:d3:81:2e:7d:f3:be:bc:6a:b8:e0:33:
                    18:91:b4:2e:c5:06:45:29:15:1d:24:e4:d8:89:d1:
                    65:c2:e3:dc:d6:b1:c2:cf:de:38:c2:b4:ba:01:24:
                    b4:c2:60:e6:99:95:83:64:c4:6b:08:29:3d:f3:da:
                    65:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:50:96:A9:95:08:2A:A6:FB:2B:91:A6:04:90:CF:B6:3E:81:99:EF
            X509v3 Authority Key Identifier:
                keyid:1B:F5:A8:D9:4C:E0:6C:E3:01:FC:35:D8:69:F7:0D:74:0D:70:97:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:0f:10:72:8e:ef:e7:ee:8c:38:48:c8:0c:9e:c9:ed:05:12:
         7e:73:f6:26:5e:ee:c4:f6:c2:b8:a0:23:cf:91:af:69:21:59:
         96:35:40:1c:47:55:5b:08:0e:29:83:f3:4b:ce:2b:bc:55:cb:
         ce:06:ac:21:8d:ff:78:64:d4:03:60:86:df:be:51:c1:84:30:
         f3:43:65:67:0b:1e:a3:91:a1:8f:35:3a:4d:2e:c8:f0:fc:09:
         e2:5a:e2:de:73:cd:d4:e1:19:75:ed:94:8b:2b:ba:d7:83:6a:
         2c:da:eb:fd:f9:ed:23:15:29:4e:00:ec:2c:6a:5b:c8:39:a7:
         49:71:c6:57:60:d6:0b:2b:75:03:7e:75:d3:d7:91:88:54:b7:
         90:10:86:9c:40:55:75:96:54:1d:e3:46:33:cd:a0:65:1d:48:
         23:2b:02:8c:ad:e7:0f:e2:de:54:5f:8b:ba:48:92:8a:e9:0a:
         ad:a6:ce:09:90:9c:b3:a9:83:91:b4:6c:fb:79:ef:fc:9b:69:
         a8:e2:02:f2:f1:b0:e9:67:93:02:b4:bc:9e:4d:1b:69:bb:cc:
         28:64:42:a5:f3:b2:e2:54:64:d2:e9:2f:e7:47:70:e1:98:75:
         40:25:37:a4:3f:02:fc:06:b4:73:ff:4f:ee:68:20:86:7a:ee:
         6a:4b:f7:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 08:18:23 2025 by rpki-client