Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.mft
File:                     22JQZX_rwWTrghx2UqvjqF-prNQ.mft (raw, json)
Hash identifier:          2wJHo3OBJfwiEt5xhmQie//vRjJA5T92HXAOBbNLi/M=
Subject key identifier:   F0:1C:5D:C2:C7:35:10:E5:21:23:84:58:3E:90:8B:2C:98:96:02:B5
Authority key identifier: DB:62:50:65:7F:EB:C1:64:EB:82:1C:76:52:AB:E3:A8:5F:A9:AC:D4
Certificate issuer:       /CN=A91197BC/serialNumber=DB6250657FEBC164EB821C7652ABE3A85FA9ACD4
Certificate serial:       098D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/22JQZX_rwWTrghx2UqvjqF-prNQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.mft
Manifest number:          0972
Signing time:             Sun 02 Nov 2025 20:07:59 +0000
Manifest this update:     Sun 02 Nov 2025 20:07:59 +0000
Manifest next update:     Sun 09 Nov 2025 20:07:59 +0000
Files and hashes:         1: 22JQZX_rwWTrghx2UqvjqF-prNQ.crl (hash: z5UNhxfB1beHM8xhGyPStfuqKHVie06A07M3znmUAh4=)
                          2: 51408896A3E211EF8DAB713BC4F9AE02.roa (hash: nnJopRuWF4IPI2CoSPvt+TdVM1R3rgDYOUPBMtlzCqI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.crl
                          rsync://rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/22JQZX_rwWTrghx2UqvjqF-prNQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 20:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2445 (0x98d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91197BC, serialNumber=DB6250657FEBC164EB821C7652ABE3A85FA9ACD4
        Validity
            Not Before: Nov  2 20:07:59 2025 GMT
            Not After : Nov  9 20:07:59 2025 GMT
        Subject: CN=6907ba1f-cd40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3c:58:b4:66:d8:ea:9c:4e:47:16:2b:65:6b:
                    e0:9b:8a:2a:58:de:73:c1:a5:d1:70:d7:5c:a7:ef:
                    37:c3:6d:b7:11:62:f7:c1:9b:d5:a9:83:23:24:d7:
                    2a:a8:66:bb:92:b7:76:22:7e:f9:ae:54:56:42:4e:
                    56:be:4d:73:ec:9b:3f:b3:fe:81:7c:ff:5e:bb:af:
                    20:7f:5f:90:24:5a:2c:12:2b:15:3a:e7:ee:8a:61:
                    b5:48:78:74:6f:87:04:7c:18:5d:81:8a:18:8a:fb:
                    1e:9d:a4:e6:de:23:de:3b:8f:eb:d4:18:22:db:55:
                    f4:33:d0:4f:1f:68:b5:bc:ea:0d:e8:81:a9:8d:41:
                    d6:42:0c:97:07:3a:07:2b:f7:35:c3:bc:91:73:a0:
                    bd:25:da:56:70:0c:3f:bc:64:da:64:ce:a5:b0:b5:
                    b8:01:80:61:9c:81:02:03:af:55:a0:e8:81:83:8c:
                    96:40:c8:91:bb:34:9c:a7:39:33:f3:8d:70:97:ff:
                    d1:44:e2:a8:6b:7a:45:6b:1d:33:c0:6f:a6:ca:e0:
                    7f:4a:02:20:5c:f3:a2:3d:b7:2e:c8:2b:f4:c3:88:
                    27:82:ac:68:f2:50:b8:fa:a6:e5:91:54:ec:14:57:
                    31:a3:1d:a5:bd:78:3b:92:d2:80:78:e0:da:17:65:
                    4b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:1C:5D:C2:C7:35:10:E5:21:23:84:58:3E:90:8B:2C:98:96:02:B5
            X509v3 Authority Key Identifier:
                keyid:DB:62:50:65:7F:EB:C1:64:EB:82:1C:76:52:AB:E3:A8:5F:A9:AC:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/22JQZX_rwWTrghx2UqvjqF-prNQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:c7:7d:ae:d0:26:50:68:73:f1:51:24:18:ce:fa:4b:67:49:
         ad:ff:1d:a3:53:d0:25:92:38:85:71:40:eb:fb:77:07:16:33:
         cb:c6:55:4a:f3:8e:fc:76:52:11:06:86:7b:38:8c:67:f5:90:
         10:e1:0c:59:a7:30:8f:94:18:2b:dd:b9:59:bc:44:ff:87:41:
         8f:71:d2:0c:77:66:9b:96:49:27:ee:f5:9d:9c:cf:7d:d2:20:
         67:cd:d7:07:e8:42:9c:b3:5b:10:ce:61:d7:c6:62:cb:c1:e8:
         c1:3e:b7:f4:2f:af:85:e2:76:f9:52:94:47:87:04:b1:54:e8:
         79:b1:96:98:9e:5e:7a:5f:b4:24:6f:c1:b6:97:42:d7:b6:0f:
         e8:fe:d9:ae:63:4d:00:64:ba:a8:05:e1:88:0f:26:1e:32:c8:
         48:9f:f7:a1:ce:24:e5:d1:45:b4:dc:d5:02:fe:3f:45:0a:42:
         c0:b8:88:53:c0:42:e2:05:4b:8d:ec:3e:60:10:d7:16:ba:1e:
         55:19:2e:1e:86:8c:4a:c0:f6:38:a9:fb:6a:ad:02:8c:9f:5b:
         83:4f:33:39:30:15:e9:68:56:02:a7:21:09:14:7b:bf:97:fd:
         ef:9d:a4:78:56:7c:9f:f0:3a:01:8b:72:d3:3a:65:3c:36:bc:
         af:bc:85:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:17:06 2025 by rpki-client