Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.mft
File:                     PR1qMyrqTsUCA3oJCfTMGdQtsZg.mft (raw, json)
Hash identifier:          DpJYoxROWwVSTd7DM0F5iPEeZHi8VwO+iIta3iyXqcM=
Subject key identifier:   F9:62:09:30:BA:AF:4A:51:72:17:0A:A0:7B:E7:BE:24:10:F6:9D:5F
Authority key identifier: 3D:1D:6A:33:2A:EA:4E:C5:02:03:7A:09:09:F4:CC:19:D4:2D:B1:98
Certificate issuer:       /CN=A91450A4/serialNumber=3D1D6A332AEA4EC502037A0909F4CC19D42DB198
Certificate serial:       0874
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR1qMyrqTsUCA3oJCfTMGdQtsZg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.mft
Manifest number:          0827
Signing time:             Tue 04 Nov 2025 21:13:57 +0000
Manifest this update:     Tue 04 Nov 2025 21:13:57 +0000
Manifest next update:     Tue 11 Nov 2025 21:13:57 +0000
Files and hashes:         1: PR1qMyrqTsUCA3oJCfTMGdQtsZg.crl (hash: 0AwgeYLy5D+3BOQ/l1XeLvBvXe93X0yCZXGshy/Xl4o=)
                          2: CD1E94321A7D11F09A63C576C4F9AE02.roa (hash: vVJ4ZPcH3lbEogl2hIa71k4678GTw2JTT698EnTX0sk=)
                          3: DD8B40E41A7E11F098A37378C4F9AE02.roa (hash: L6v9N1lps3HT+4hWevJV8kUzpnpP386yo30tBD8aoeQ=)
                          4: 50379A94992611EC94DB646EC4F9AE02.roa (hash: UQSilDbz/hE2pQQ6qsVZpBDsORWehlq7xmMJwgsCEF0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.crl
                          rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR1qMyrqTsUCA3oJCfTMGdQtsZg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 21:13:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2164 (0x874)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91450A4, serialNumber=3D1D6A332AEA4EC502037A0909F4CC19D42DB198
        Validity
            Not Before: Nov  4 21:13:57 2025 GMT
            Not After : Nov 11 21:13:57 2025 GMT
        Subject: CN=690a6c95-900d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:84:98:93:64:92:69:db:42:5f:ae:10:72:20:
                    30:e1:04:e7:32:3e:ab:f3:38:eb:25:07:5c:7a:58:
                    6b:c9:9f:df:9c:94:2e:98:9b:a3:77:ae:74:31:de:
                    36:a4:c3:cd:26:0e:a5:81:41:f7:52:7e:a2:6d:d3:
                    2a:34:a0:d9:fa:85:69:ab:9a:f4:ec:76:12:52:56:
                    29:94:0b:b2:e5:77:d6:49:39:88:2d:14:7c:e3:d8:
                    7f:a5:50:91:36:8b:6c:93:9f:67:48:04:e5:6b:cb:
                    61:4e:62:13:81:ea:6c:1d:70:33:88:80:04:ae:d9:
                    05:23:84:6d:a2:f3:ab:4f:b6:b6:73:9c:09:46:57:
                    98:a9:fb:fa:75:64:21:84:c0:96:dc:de:03:11:6d:
                    cd:bb:1e:78:46:95:6f:bb:17:d8:55:8a:3a:9c:a2:
                    e6:c6:3b:e8:25:cf:13:83:c1:f2:31:73:70:62:55:
                    ee:2b:e4:1d:57:65:39:49:f1:7a:42:2a:bf:fa:c9:
                    45:60:af:21:b8:e3:b0:1a:a3:9e:d4:2e:59:7e:69:
                    62:2f:33:0f:23:80:5d:33:a3:fe:c4:92:7b:40:5d:
                    80:89:65:3b:a5:84:9c:20:f7:19:49:0d:e5:8b:c8:
                    a3:ea:04:b8:6f:a5:27:3c:8d:d6:23:a3:72:55:6e:
                    7d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:62:09:30:BA:AF:4A:51:72:17:0A:A0:7B:E7:BE:24:10:F6:9D:5F
            X509v3 Authority Key Identifier:
                keyid:3D:1D:6A:33:2A:EA:4E:C5:02:03:7A:09:09:F4:CC:19:D4:2D:B1:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR1qMyrqTsUCA3oJCfTMGdQtsZg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:94:da:af:bc:3d:1d:8b:50:f6:99:00:f0:e5:8f:16:c7:ac:
         6c:10:b4:92:40:fd:85:6e:fc:84:2e:6c:98:da:e9:f1:73:46:
         fd:f4:4a:78:87:83:e9:84:41:a0:5e:d7:1d:29:6e:68:59:41:
         fd:15:89:f3:4c:2c:c4:41:75:71:80:0e:e5:f3:13:4d:ae:e9:
         1c:75:0a:25:ad:13:56:2a:68:54:75:14:70:e5:83:43:9d:25:
         ad:16:71:63:bf:75:c6:7d:bf:1e:47:6c:21:f2:2c:4e:4a:0a:
         9e:72:e8:b2:4c:6f:53:33:fd:f0:f9:71:ec:0b:20:2a:90:ac:
         22:3f:c3:73:43:6d:48:c5:43:4c:0b:3e:d9:5e:08:f6:70:8a:
         d9:c5:5e:f2:8f:99:e6:d1:d6:3d:68:5e:b1:75:9d:de:33:c3:
         8f:2b:43:c7:4b:72:fd:3e:0e:06:fd:b1:76:0d:a3:e2:6d:35:
         0b:ef:43:cc:63:2f:c7:78:8a:b4:7f:00:3a:03:c0:c7:c2:b3:
         5b:cd:1b:1a:bd:e0:a0:a6:c6:e9:e2:9c:87:ed:03:1f:c2:97:
         c7:f9:8a:c4:79:c5:7d:23:8f:83:e5:66:f2:9e:22:f0:80:c3:
         4b:55:86:2c:48:3e:2e:68:ac:21:4b:00:27:ad:e4:05:11:6c:
         4c:1f:5f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:40:52 2025 by rpki-client