Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.mft
File:                     07sK_xlZ4CkmxzdUiny-QQ25CWs.mft (raw, json)
Hash identifier:          P9QPdCeTBAFgH5JF5PVr3dNXFsi/GZxkkceSm0RDybI=
Subject key identifier:   A6:15:56:A9:93:5E:7C:93:3F:72:BF:FD:22:6C:2A:CE:80:B3:79:26
Authority key identifier: D3:BB:0A:FF:19:59:E0:29:26:C7:37:54:8A:7C:BE:41:0D:B9:09:6B
Certificate issuer:       /CN=A9155A79/serialNumber=D3BB0AFF1959E02926C737548A7CBE410DB9096B
Certificate serial:       0202
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07sK_xlZ4CkmxzdUiny-QQ25CWs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.mft
Manifest number:          01FB
Signing time:             Wed 29 Oct 2025 02:11:21 +0000
Manifest this update:     Wed 29 Oct 2025 02:11:21 +0000
Manifest next update:     Wed 05 Nov 2025 02:11:20 +0000
Files and hashes:         1: 07sK_xlZ4CkmxzdUiny-QQ25CWs.crl (hash: jK0MUREyCnzcLlG6Add0d4Hg1uy3WPr/QNtAZvb4xQs=)
                          2: A534BB46BDC611EE902E692DC4F9AE02.roa (hash: Wygmj2JKO4aGkrYbl9Bny2rS0iiXkwLAfqO4thXRj+k=)
                          3: 9A745DF6BDC611EE9C87EF29C4F9AE02.roa (hash: zelXEh8AZUnkEzzh5nIKoVPZYcm1u2v7VkQCFQEcMjQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.crl
                          rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07sK_xlZ4CkmxzdUiny-QQ25CWs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Nov 2025 02:11:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 514 (0x202)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155A79, serialNumber=D3BB0AFF1959E02926C737548A7CBE410DB9096B
        Validity
            Not Before: Oct 29 02:11:21 2025 GMT
            Not After : Nov  5 02:11:20 2025 GMT
        Subject: CN=690177c9-36b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:81:aa:be:af:30:ca:de:a7:f2:14:5a:75:42:
                    d3:c0:44:d3:34:18:ad:3d:c1:83:c2:6a:75:df:3d:
                    f9:d6:8f:6e:9c:23:92:82:1c:48:38:b8:5b:7d:ce:
                    f6:5e:7f:47:45:35:ce:54:e6:d8:1b:5f:9d:a8:5c:
                    51:22:ef:d3:29:fb:d9:25:9a:97:91:f6:c1:7d:64:
                    10:82:1d:57:62:8e:84:59:3e:7f:b4:b5:f3:86:84:
                    ff:3b:18:6b:45:2b:4c:fd:6f:f1:96:bb:34:4e:6d:
                    2f:86:5d:e8:68:ba:a0:97:12:0e:da:56:8e:e5:3f:
                    3e:96:0a:af:07:60:36:87:c2:20:da:85:ea:6f:48:
                    9d:73:80:13:af:c9:a0:ad:8a:1b:24:c8:c6:19:c5:
                    df:d6:3b:5a:e3:61:88:4b:c2:a0:42:97:ad:09:99:
                    26:b6:a4:b2:e9:ea:75:2f:85:29:66:e4:5a:2d:f0:
                    bf:e7:39:d5:c3:9a:6f:88:fc:69:7f:c0:7a:db:f9:
                    e0:07:a9:68:95:a0:3e:f3:ea:5d:87:d5:e1:79:08:
                    aa:ca:c4:10:bf:2e:19:fe:a4:86:98:c1:1d:5f:f1:
                    06:47:43:5f:5c:63:5a:32:d5:76:1f:d8:6f:5d:69:
                    b0:14:57:37:e4:b9:ba:42:94:64:d4:86:89:95:73:
                    79:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:15:56:A9:93:5E:7C:93:3F:72:BF:FD:22:6C:2A:CE:80:B3:79:26
            X509v3 Authority Key Identifier:
                keyid:D3:BB:0A:FF:19:59:E0:29:26:C7:37:54:8A:7C:BE:41:0D:B9:09:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07sK_xlZ4CkmxzdUiny-QQ25CWs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:d2:6f:14:41:3d:db:08:69:e3:1d:4a:01:73:d8:d0:df:5b:
         bd:a8:21:89:ad:26:37:ac:ea:9c:b4:da:6f:be:dd:44:09:64:
         f8:ed:de:f2:c2:47:51:ee:45:93:93:c2:ca:19:62:13:c5:b5:
         73:5c:50:f5:5d:4f:c1:30:f3:fc:83:73:1d:2b:09:81:f7:67:
         73:39:a3:1a:73:a5:53:69:c8:77:16:1c:9d:f4:07:2b:0d:5c:
         4c:3b:cf:a3:15:ef:6f:4e:bb:1d:9c:e1:2e:35:0f:19:76:72:
         21:32:3e:da:bc:a1:ea:68:c1:91:83:c0:d6:7d:81:23:12:8f:
         f6:a4:ab:23:d1:87:57:62:fa:6d:74:47:82:2e:cb:97:64:af:
         02:a1:2b:8f:61:df:5b:6a:16:a5:c5:c3:41:67:6d:3c:53:c9:
         9c:cb:11:62:66:fe:6d:25:2f:3a:72:f5:9b:ee:45:89:eb:c8:
         29:cf:9c:50:46:73:3e:2c:45:f0:2e:e2:61:75:ef:c6:a9:62:
         bd:05:35:99:f7:a8:b8:a5:3a:5d:cc:5c:5c:fe:fb:3c:aa:1e:
         13:d9:de:b0:ab:88:b6:3d:7f:4e:ee:55:dc:23:65:6c:cd:7c:
         84:e0:7a:51:50:20:6b:23:68:dd:46:21:7f:13:1c:13:d3:49:
         40:d8:d1:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 11:12:27 2025 by rpki-client