Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft
File:                     RIvZcaMGqwNjmecW3CIcozj1i1k.mft (raw, json)
Hash identifier:          /R6mMTkNjgkY2kh1VEHxd3SCv2k6FNOxUnOXytEFn9U=
Subject key identifier:   38:E6:1F:46:E6:8E:56:EB:5C:EB:28:CC:2C:7C:0E:0A:EF:05:6B:9A
Authority key identifier: 44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59
Certificate issuer:       /CN=A91301D5/serialNumber=448BD971A306AB036399E716DC221CA338F58B59
Certificate serial:       1565
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft
Manifest number:          1519
Signing time:             Wed 22 Oct 2025 17:11:41 +0000
Manifest this update:     Wed 22 Oct 2025 17:11:41 +0000
Manifest next update:     Wed 29 Oct 2025 17:11:41 +0000
Files and hashes:         1: RIvZcaMGqwNjmecW3CIcozj1i1k.crl (hash: z9v/8b+OITEDH7q+SO/OjFfduqlZCa2JFXBRwsF9o9w=)
                          2: 7338235CC06011EE882BC34AC4F9AE02.roa (hash: YK6Hmo3PllZtdE5hm6A8K6SCgV+te0dB3ba976/6MCY=)
                          3: 743770A0C06011EE882BC34AC4F9AE02.roa (hash: 3SKd7JKNbo4VQv7IRdQ4lKTCd0NxnhIdEQAdsmvLftg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.crl
                          rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Oct 2025 17:11:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5477 (0x1565)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91301D5, serialNumber=448BD971A306AB036399E716DC221CA338F58B59
        Validity
            Not Before: Oct 22 17:11:41 2025 GMT
            Not After : Oct 29 17:11:41 2025 GMT
        Subject: CN=68f9104d-6a3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ce:c1:13:2d:0b:2f:03:ec:7c:dd:c9:de:36:
                    e9:8a:22:0e:b9:32:4d:a3:fb:41:9d:55:f5:2d:01:
                    c8:8e:62:c9:e8:1d:8c:23:a9:2f:c9:a5:8f:98:42:
                    1e:55:a8:2e:76:06:06:8c:d8:c9:73:2b:da:fe:ed:
                    96:8f:0e:d4:2f:3f:7c:ae:80:17:6b:cf:4b:b5:b0:
                    bd:99:61:9d:13:71:e4:00:aa:70:04:97:58:8a:3c:
                    65:8b:34:39:b8:05:b2:26:19:12:20:1f:b8:c6:52:
                    5e:90:a3:c3:c7:96:a3:9e:b0:7b:4f:6b:89:06:b3:
                    ba:33:69:7c:8d:1a:58:9b:9d:f7:e1:8e:b5:f8:65:
                    b8:8c:07:66:ab:69:d0:d7:0a:da:cf:d2:c7:8f:75:
                    dc:b9:ad:38:a6:0e:bd:2e:1a:a1:4b:f0:f6:6f:f9:
                    c0:a6:68:b3:a2:9d:69:c7:d9:bc:65:a5:4b:76:ad:
                    91:0c:37:a5:cf:25:5d:2c:cf:a7:be:9b:86:a7:2f:
                    9b:02:0e:89:93:99:7c:ee:34:d5:a7:a1:7e:32:40:
                    0b:a0:fe:fa:d5:ad:c5:2b:e1:35:7f:67:30:6c:3e:
                    a5:95:87:03:43:83:3a:22:e2:8e:9e:c4:b4:66:e0:
                    e7:a7:60:37:f2:42:4e:4c:97:7b:dc:f1:d1:7f:98:
                    de:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:E6:1F:46:E6:8E:56:EB:5C:EB:28:CC:2C:7C:0E:0A:EF:05:6B:9A
            X509v3 Authority Key Identifier:
                keyid:44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:97:15:28:a7:23:58:a6:4f:46:4f:7e:a8:8d:15:45:66:b5:
         58:84:54:14:e6:f4:1b:1d:6d:53:20:d0:74:9e:c1:bb:98:15:
         43:ae:7d:bb:5e:94:13:c8:54:11:25:31:51:69:a6:77:f4:32:
         aa:07:86:86:92:58:6f:3f:e5:0e:16:4e:a4:bc:52:9b:8e:4e:
         86:0b:67:8f:6c:bb:20:8e:87:5a:c5:1a:f2:01:40:a5:c8:46:
         48:da:22:12:ce:36:7c:c8:db:2a:ba:ba:62:3f:70:2f:a1:4a:
         22:d2:fa:f9:21:2c:28:1e:bc:ee:95:b7:f5:cc:46:bf:ef:2d:
         95:f1:20:7c:7d:6d:61:ce:ae:d3:bb:7c:f0:4c:9a:cc:b1:32:
         ea:b6:74:de:71:cf:46:dd:17:07:68:d7:28:33:7b:ba:fd:27:
         c4:30:e7:85:5a:51:ca:0e:c9:22:da:34:9c:fe:2e:63:46:ef:
         c7:51:4d:04:39:68:62:88:6e:89:f3:cc:ba:9f:0f:05:be:7c:
         fb:35:3b:c6:83:d1:8a:56:a6:2c:41:9d:aa:f7:db:3e:75:d5:
         99:16:29:8c:92:8b:9f:05:ca:59:ce:b4:ba:20:60:b7:6b:ce:
         8e:96:5b:46:c9:e0:42:d0:a5:db:92:32:fa:0d:4e:56:c8:2e:
         70:94:7e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 10:04:09 2025 by rpki-client