Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft
File:                     T_-scXgTOS7hyHajIWceHWwqubQ.mft (raw, json)
Hash identifier:          lTcee9W1UOKG2L5uhtV/5LTdqndEcK+oT6IHiAA1F00=
Subject key identifier:   CE:E3:EE:3E:15:F1:B7:92:E0:D7:C1:20:95:F7:CA:19:BF:42:F6:A7
Authority key identifier: 4F:FF:AC:71:78:13:39:2E:E1:C8:76:A3:21:67:1E:1D:6C:2A:B9:B4
Certificate issuer:       /CN=A91CE39F/serialNumber=4FFFAC717813392EE1C876A321671E1D6C2AB9B4
Certificate serial:       0818
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_-scXgTOS7hyHajIWceHWwqubQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft
Manifest number:          0804
Signing time:             Wed 08 Oct 2025 20:56:36 +0000
Manifest this update:     Wed 08 Oct 2025 20:56:36 +0000
Manifest next update:     Wed 15 Oct 2025 20:56:36 +0000
Files and hashes:         1: T_-scXgTOS7hyHajIWceHWwqubQ.crl (hash: zLnByAyFQGkD5OJv+QcUzSx86ad4QugBh4tA2GTUIfs=)
                          2: CAF5CED2E1A511EC8AB72944C4F9AE02.roa (hash: zbiYtUOfzyp7ptHvHbV0SU4d4rP1mH83ebF8pRuNsx0=)
                          3: CC57D98CE1A511EC8AB72944C4F9AE02.roa (hash: ZYqL2fHcbNd2tSbNDmjF+dD/m7i54Wfd/1i3In6hhsU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.crl
                          rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_-scXgTOS7hyHajIWceHWwqubQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Oct 2025 20:56:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2072 (0x818)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE39F, serialNumber=4FFFAC717813392EE1C876A321671E1D6C2AB9B4
        Validity
            Not Before: Oct  8 20:56:36 2025 GMT
            Not After : Oct 15 20:56:36 2025 GMT
        Subject: CN=68e6d004-d5ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7f:ee:d1:fd:21:a4:a5:5c:36:7f:d0:38:35:
                    6a:fe:27:38:b1:ad:57:b8:a0:ad:4f:d8:0c:e8:a4:
                    cd:7d:da:b9:97:c9:e0:c8:0f:f7:d4:07:35:60:84:
                    8f:80:15:51:3d:0a:cc:f5:30:2f:9e:1c:ef:f0:ef:
                    3e:31:bc:38:36:a9:4d:7a:01:dc:b2:ce:c6:de:11:
                    fc:da:24:a5:19:c8:e7:36:dd:d4:4c:0d:99:41:28:
                    d7:8d:29:43:eb:39:34:fd:4e:d4:d0:ce:5b:24:15:
                    1d:44:1b:a1:9b:64:ea:7a:f5:5d:55:a7:d7:e6:9e:
                    40:69:70:25:11:1a:97:ac:76:2a:de:28:5f:da:9f:
                    53:15:3d:b0:71:83:e2:08:c1:db:a0:96:fb:e9:d1:
                    49:1c:f6:d3:c9:56:f8:9d:67:b4:d5:47:b7:43:da:
                    e4:6f:79:51:47:25:06:00:13:e5:54:1d:00:a7:b2:
                    6a:90:47:56:a1:1d:31:3a:2d:e2:f5:e0:81:50:16:
                    94:ab:04:ae:91:26:2b:4b:4d:ec:83:8d:e8:a8:79:
                    53:50:16:a7:61:48:5e:ce:16:85:b4:d3:4f:62:6a:
                    b6:94:13:67:22:44:c5:12:77:79:be:d0:e3:04:8e:
                    fd:8b:a1:79:c2:87:a9:c2:e1:08:4b:65:4f:28:e5:
                    82:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:E3:EE:3E:15:F1:B7:92:E0:D7:C1:20:95:F7:CA:19:BF:42:F6:A7
            X509v3 Authority Key Identifier:
                keyid:4F:FF:AC:71:78:13:39:2E:E1:C8:76:A3:21:67:1E:1D:6C:2A:B9:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_-scXgTOS7hyHajIWceHWwqubQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:7f:84:11:b8:eb:7a:93:64:a9:3e:bc:1b:74:24:23:08:46:
         61:29:00:ac:1f:f4:af:7e:5f:bf:99:56:91:55:a0:1a:9a:62:
         45:b2:9a:53:a5:32:8b:6d:1c:af:4b:93:34:7c:da:9f:27:bc:
         97:cd:00:a7:73:15:cb:4f:66:30:da:a4:bf:70:2d:a0:e6:52:
         e0:34:0e:1b:39:a0:72:51:4f:90:75:a0:29:6c:84:b8:6c:b9:
         c7:5d:c1:f4:f3:15:ee:2f:49:3b:e2:8a:f8:f7:1a:d4:0c:89:
         c4:28:93:d6:94:2b:ca:ad:cf:26:14:52:b4:c2:ef:e9:3c:0a:
         d2:89:dc:dd:61:26:67:ca:fc:78:7c:ba:a9:48:5f:25:85:cf:
         56:5b:d2:d3:0b:e6:00:7e:4d:16:4c:3e:4a:b3:ef:7e:a1:54:
         a1:df:3f:c4:58:54:84:87:e3:d8:93:f4:2b:1f:62:8b:e3:ee:
         7f:49:6c:60:95:11:c1:07:98:2b:c1:9b:18:62:b0:f7:7f:32:
         a9:2e:51:23:20:6b:25:f1:eb:3d:b6:9e:3e:c7:a0:38:a1:dd:
         45:2b:bb:b0:11:43:bb:4a:e5:1b:fa:c6:fc:6c:42:1c:6a:14:
         a9:a4:a1:e0:a0:c5:a5:ff:c3:39:da:75:e5:f6:66:47:91:78:
         11:ca:f0:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:22:53 2025 by rpki-client