Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.mft
File:                     MFikabZ9AwcsLYo4Xp8qq7oTTis.mft (raw, json)
Hash identifier:          lveW1zIFgdVA+MwfD+MnvIjxSzFxaLjzgExAf+7hCwU=
Subject key identifier:   1D:AC:FB:4C:32:78:30:CD:47:CF:7A:FC:B9:72:CD:2A:CE:A0:C1:59
Authority key identifier: 30:58:A4:69:B6:7D:03:07:2C:2D:8A:38:5E:9F:2A:AB:BA:13:4E:2B
Certificate issuer:       /CN=A91F9665/serialNumber=3058A469B67D03072C2D8A385E9F2AABBA134E2B
Certificate serial:       077B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MFikabZ9AwcsLYo4Xp8qq7oTTis.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.mft
Manifest number:          0756
Signing time:             Sun 02 Nov 2025 21:43:17 +0000
Manifest this update:     Sun 02 Nov 2025 21:43:16 +0000
Manifest next update:     Sun 09 Nov 2025 21:43:16 +0000
Files and hashes:         1: MFikabZ9AwcsLYo4Xp8qq7oTTis.crl (hash: VbrIgOEs/N8P90bVgG/FECV2inkEb4VQpVkzlEx0vjI=)
                          2: 446CB34270E711F083707432C4F9AE02.roa (hash: uFL5RjAw4kEYDcTfQf/ACzUtZlfbZY0gAVLRJAbolRI=)
                          3: 62884F1AB6CC11EF84CBC45FC4F9AE02.roa (hash: jnitWwuKyYOH3VPLX9zSQ1RGbPj0ej4xv8sYHOecNfE=)
                          4: B791EB5251A811F08D434B5BC4F9AE02.roa (hash: Ryo/ggbAvRq53R+p9bEGSceue4muKwWx8AVsuS/Cdrs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.crl
                          rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MFikabZ9AwcsLYo4Xp8qq7oTTis.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 21:43:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1915 (0x77b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9665, serialNumber=3058A469B67D03072C2D8A385E9F2AABBA134E2B
        Validity
            Not Before: Nov  2 21:43:16 2025 GMT
            Not After : Nov  9 21:43:16 2025 GMT
        Subject: CN=6907d075-46cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:be:da:ef:4d:33:fa:9b:48:dc:82:e6:de:fd:
                    d6:95:83:d2:4e:af:89:c2:00:ca:42:c6:c4:ec:63:
                    8d:3d:57:01:fc:2b:ac:58:8a:08:d6:90:7f:e3:85:
                    5e:bd:c2:30:a9:21:61:5e:81:13:1f:80:6a:89:86:
                    48:d7:13:62:5b:66:e1:ea:cd:1f:22:d4:6d:e1:3e:
                    7a:07:08:ce:55:17:50:8d:ca:d9:bf:07:9d:91:48:
                    c0:b0:d9:0e:da:ed:4d:78:d6:fe:c4:eb:d2:29:d3:
                    97:f0:a8:f1:60:08:0a:05:34:83:d9:d9:36:e7:1f:
                    e1:a2:1a:42:ef:eb:ac:50:36:27:f9:e4:b5:3b:2e:
                    15:18:8a:7e:c1:83:a9:8c:65:d3:f3:df:11:b0:00:
                    2d:6b:e4:65:57:c3:9f:de:eb:06:17:0d:0a:5a:75:
                    5e:a6:ef:92:dd:13:fc:db:0d:c1:a0:f8:50:9b:db:
                    02:5c:cb:d3:4f:ab:d1:7e:60:14:bf:a6:f5:7f:df:
                    c4:c8:ff:3a:52:47:a4:c2:10:69:84:c1:8e:66:2d:
                    b2:95:3d:c5:a1:ed:d6:2c:28:63:1d:62:d2:45:ca:
                    9f:9e:bb:68:05:f9:d0:7c:09:9c:b7:4e:f8:8c:3c:
                    22:c6:dd:2b:a3:3d:ce:ad:77:b7:0e:7b:70:62:be:
                    af:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:AC:FB:4C:32:78:30:CD:47:CF:7A:FC:B9:72:CD:2A:CE:A0:C1:59
            X509v3 Authority Key Identifier:
                keyid:30:58:A4:69:B6:7D:03:07:2C:2D:8A:38:5E:9F:2A:AB:BA:13:4E:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MFikabZ9AwcsLYo4Xp8qq7oTTis.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:4a:f7:24:0b:14:14:cb:ef:b5:f7:f7:dd:11:48:aa:c0:01:
         ac:84:5b:23:3d:9b:44:f3:83:47:89:fc:86:a9:27:04:fb:7b:
         b1:a9:c0:58:38:16:1a:88:d9:43:68:a2:5b:5b:f8:1a:87:55:
         a8:ba:ef:cc:dc:35:2e:1d:2f:76:1e:a5:23:95:7b:16:63:48:
         7b:9a:4f:1c:92:20:a7:69:d5:ad:39:ec:9d:ab:15:f7:bf:f6:
         68:ac:9b:fc:07:2e:1a:7a:a0:b3:e1:8f:e8:5c:21:96:62:08:
         20:eb:48:b9:00:2c:2b:69:21:30:66:d6:14:e9:ec:70:e9:ea:
         7c:c4:87:f4:14:e2:24:a6:43:02:ee:3f:0d:b9:5a:fc:6e:7c:
         02:91:49:78:54:8b:10:56:ff:41:00:52:6a:41:4e:e3:23:20:
         93:1b:7a:17:41:ff:f4:b9:0d:ca:f1:4e:bd:53:8b:50:47:fb:
         99:92:8b:41:2d:1d:8d:ec:39:1b:dc:e6:ae:cc:3b:3a:14:31:
         c5:60:5a:d6:ba:31:c1:b1:fc:e0:14:f6:f8:df:12:46:52:eb:
         95:3e:ee:e7:c6:0f:a9:a0:a6:33:b6:07:73:19:cb:14:da:60:
         56:bc:a4:b1:0d:79:bc:c9:ce:04:3e:09:35:2a:08:1b:0e:49:
         74:18:a3:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:01:51 2025 by rpki-client