Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913CDE5/4993B7FC127B11EEB27E8C2BC4F9AE02/-ZQWlLaneyTFg_p4tSflS7bVv58.mft
File:                     -ZQWlLaneyTFg_p4tSflS7bVv58.mft (raw, json)
Hash identifier:          x2zgvubnDeBJbQEmZafuFaJLEJ1MMHwhS4iFgVcbj78=
Subject key identifier:   C5:12:D5:04:8A:70:6C:38:AF:80:5F:DD:B3:1C:05:CB:13:03:54:30
Authority key identifier: F9:94:16:94:B6:A7:7B:24:C5:83:FA:78:B5:27:E5:4B:B6:D5:BF:9F
Certificate issuer:       /CN=A913CDE5/serialNumber=F9941694B6A77B24C583FA78B527E54BB6D5BF9F
Certificate serial:       01C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ZQWlLaneyTFg_p4tSflS7bVv58.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913CDE5/4993B7FC127B11EEB27E8C2BC4F9AE02/-ZQWlLaneyTFg_p4tSflS7bVv58.mft
Manifest number:          01BB
Signing time:             Wed 05 Nov 2025 03:09:30 +0000
Manifest this update:     Wed 05 Nov 2025 03:09:29 +0000
Manifest next update:     Wed 12 Nov 2025 03:09:29 +0000
Files and hashes:         1: -ZQWlLaneyTFg_p4tSflS7bVv58.crl (hash: +FGRtdkLubSN1lu/J7NoKk95x0NuvVUzcPXqWfA9L08=)
                          2: 90322C4C332311EF9149E085C4F9AE02.roa (hash: IM8bZ0hnAWsH7aY2vT2HbO6/YGNWacYpzFBcV94sXXU=)
                          3: F843F2B4127E11EE9694E22BC4F9AE02.roa (hash: qOmmIPq2Qh4GMQ9MZ82z7MtasQjOaJFStGSpMCV249M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913CDE5/4993B7FC127B11EEB27E8C2BC4F9AE02/-ZQWlLaneyTFg_p4tSflS7bVv58.crl
                          rsync://rpki.apnic.net/member_repository/A913CDE5/4993B7FC127B11EEB27E8C2BC4F9AE02/-ZQWlLaneyTFg_p4tSflS7bVv58.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ZQWlLaneyTFg_p4tSflS7bVv58.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 03:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 449 (0x1c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913CDE5, serialNumber=F9941694B6A77B24C583FA78B527E54BB6D5BF9F
        Validity
            Not Before: Nov  5 03:09:29 2025 GMT
            Not After : Nov 12 03:09:29 2025 GMT
        Subject: CN=690abfe9-e9d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:20:68:4c:00:bc:4b:2a:60:fc:8c:ba:ae:01:
                    a9:0b:f6:db:26:15:76:6a:ab:5d:31:db:cf:3d:7e:
                    51:96:63:a4:c6:3d:c5:1b:38:7c:c7:01:0a:6c:4e:
                    16:2e:57:ac:57:33:79:83:66:c1:3d:ab:56:9d:6b:
                    70:a6:5d:9a:20:fb:f0:ab:86:f3:29:67:b5:4b:58:
                    b2:87:8b:0c:01:0f:ce:20:c5:e4:b8:97:1b:24:53:
                    20:2e:98:4e:95:f3:80:40:64:2e:fc:88:66:8e:8b:
                    49:d1:1e:4b:65:97:25:71:3e:b3:92:8b:18:3c:d1:
                    fe:e5:bc:30:f0:bd:eb:e8:53:45:48:b9:39:c4:56:
                    08:e4:ff:86:00:67:3b:cc:ce:0a:02:f0:d6:26:b5:
                    cf:5d:3e:08:43:7e:10:24:af:a3:64:34:16:5a:74:
                    20:ce:b7:1d:6f:cb:dd:87:b9:f3:4a:c7:04:a4:7f:
                    a9:4d:b2:fa:52:47:fa:6a:0d:e9:ca:1a:67:d1:48:
                    da:48:36:ef:61:b0:04:38:25:76:fe:e5:73:83:39:
                    63:41:42:3d:c0:48:72:62:48:46:40:cf:b9:57:28:
                    2b:c0:cd:b5:0c:11:67:d4:04:54:a2:84:ee:7d:41:
                    55:6d:f0:f9:7d:83:5b:61:c9:c8:27:bc:a0:ac:e8:
                    cb:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:12:D5:04:8A:70:6C:38:AF:80:5F:DD:B3:1C:05:CB:13:03:54:30
            X509v3 Authority Key Identifier:
                keyid:F9:94:16:94:B6:A7:7B:24:C5:83:FA:78:B5:27:E5:4B:B6:D5:BF:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913CDE5/4993B7FC127B11EEB27E8C2BC4F9AE02/-ZQWlLaneyTFg_p4tSflS7bVv58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ZQWlLaneyTFg_p4tSflS7bVv58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CDE5/4993B7FC127B11EEB27E8C2BC4F9AE02/-ZQWlLaneyTFg_p4tSflS7bVv58.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:02:12:d2:b1:1f:e2:7f:fc:02:82:9c:df:47:f6:23:f4:bb:
         e9:7a:31:78:70:2f:79:45:72:1e:36:3d:a5:5c:5d:1a:3f:e7:
         b8:a2:bd:1a:ac:79:f2:f5:fe:a0:09:23:ba:b4:4a:4a:5c:73:
         b8:90:48:9e:9e:65:b5:b0:f1:3a:33:34:37:34:8c:b8:7f:48:
         7e:45:32:78:d3:e5:a0:c7:8b:ed:79:8c:16:7e:aa:09:70:8b:
         53:e6:09:bc:e5:0d:8e:b1:32:e7:f0:49:ab:57:2f:19:c4:37:
         dc:a2:60:37:bf:96:cb:76:69:c8:81:b2:17:86:da:14:fe:63:
         85:97:50:1d:33:d0:e8:34:c1:25:ea:e3:25:24:54:51:ff:42:
         27:32:83:85:ae:c2:bc:89:12:25:fe:4a:53:82:37:f3:b5:f6:
         cf:0a:cd:eb:8c:b0:bd:cf:8a:80:3e:41:2d:6b:0a:60:66:7b:
         10:ef:1c:17:fd:de:53:12:f2:ac:54:77:73:c1:d7:78:54:e8:
         74:46:ed:1f:bf:e0:45:34:1f:40:eb:c4:a4:69:ed:c2:66:90:
         d8:2f:56:1f:04:0d:e8:23:79:93:60:b5:75:b5:90:ca:46:be:
         b8:22:09:16:26:fa:c4:b5:f2:bd:6e:84:bd:0d:e1:91:c9:c6:
         bc:5a:7d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:28:30 2025 by rpki-client