Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A549/4D25BCAAD24411EF9E654B14C4F9AE02/HIAVCsljCYTTjMb1nD7MdRsl8-c.mft
File:                     HIAVCsljCYTTjMb1nD7MdRsl8-c.mft (raw, json)
Hash identifier:          oh75QWoUgnaT8rwn/rDBOBcU5wtLZOoGuPkgyJcpnUI=
Subject key identifier:   4D:72:2D:7F:20:65:CF:14:D0:BF:79:12:BA:47:7E:B5:21:45:03:88
Authority key identifier: 1C:80:15:0A:C9:63:09:84:D3:8C:C6:F5:9C:3E:CC:75:1B:25:F3:E7
Certificate issuer:       /CN=A915A549/serialNumber=1C80150AC9630984D38CC6F59C3ECC751B25F3E7
Certificate serial:       9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HIAVCsljCYTTjMb1nD7MdRsl8-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A549/4D25BCAAD24411EF9E654B14C4F9AE02/HIAVCsljCYTTjMb1nD7MdRsl8-c.mft
Manifest number:          98
Signing time:             Mon 03 Nov 2025 06:26:31 +0000
Manifest this update:     Mon 03 Nov 2025 06:26:31 +0000
Manifest next update:     Mon 10 Nov 2025 06:26:31 +0000
Files and hashes:         1: HIAVCsljCYTTjMb1nD7MdRsl8-c.crl (hash: VT/Ns10UMkDv4Epceshm6mlROxY5i8NZcNs9RP7G7sc=)
                          2: E9B51C0AD24411EFBD747915C4F9AE02.roa (hash: h7LkbeKD0rtGSmQTm/4/z1tqrdfuxl9pJq7z33t/Gys=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A549/4D25BCAAD24411EF9E654B14C4F9AE02/HIAVCsljCYTTjMb1nD7MdRsl8-c.crl
                          rsync://rpki.apnic.net/member_repository/A915A549/4D25BCAAD24411EF9E654B14C4F9AE02/HIAVCsljCYTTjMb1nD7MdRsl8-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HIAVCsljCYTTjMb1nD7MdRsl8-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 06:26:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 154 (0x9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A549, serialNumber=1C80150AC9630984D38CC6F59C3ECC751B25F3E7
        Validity
            Not Before: Nov  3 06:26:31 2025 GMT
            Not After : Nov 10 06:26:31 2025 GMT
        Subject: CN=69084b17-d60a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1e:d7:ca:5e:d9:16:8e:20:84:71:41:66:27:
                    a1:80:9e:84:0e:45:1d:a2:a7:cc:c0:c2:6c:01:09:
                    9e:16:35:57:f0:8d:ff:e0:14:7e:07:9f:1f:61:8b:
                    4b:cb:bf:81:0a:91:49:da:63:f2:f6:44:81:c8:d7:
                    e1:14:6b:fa:16:ac:de:71:c5:45:44:9d:10:f8:f5:
                    23:f9:9e:6a:25:42:23:f0:19:aa:f4:f4:4b:80:c4:
                    a1:4e:fb:d8:72:1e:e9:06:2f:01:c6:a4:43:e6:aa:
                    fe:b0:71:8f:f8:24:2e:2a:58:d2:51:61:bf:3b:06:
                    af:a0:35:63:89:f5:cb:fd:bb:6d:f3:b7:d6:2c:26:
                    59:c7:85:cd:6f:ce:67:25:d8:50:c5:06:f8:55:44:
                    21:d7:90:2d:f2:a8:73:7e:bd:5e:97:c0:15:ae:14:
                    85:f6:fd:0a:96:1d:6a:0c:50:96:67:12:96:78:b1:
                    67:06:ec:5e:35:18:bc:2e:b1:7f:75:f4:e6:14:24:
                    23:2c:30:5e:37:6d:57:11:f0:37:67:9e:72:73:9f:
                    c7:50:90:61:15:b4:eb:66:cc:85:41:07:f0:a0:e7:
                    bf:17:e0:c1:f0:b2:65:63:c7:e4:b2:3c:9f:7a:09:
                    a3:cf:97:2b:b8:1b:db:a8:c1:b9:24:8e:c5:3b:64:
                    24:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:72:2D:7F:20:65:CF:14:D0:BF:79:12:BA:47:7E:B5:21:45:03:88
            X509v3 Authority Key Identifier:
                keyid:1C:80:15:0A:C9:63:09:84:D3:8C:C6:F5:9C:3E:CC:75:1B:25:F3:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A549/4D25BCAAD24411EF9E654B14C4F9AE02/HIAVCsljCYTTjMb1nD7MdRsl8-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HIAVCsljCYTTjMb1nD7MdRsl8-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A549/4D25BCAAD24411EF9E654B14C4F9AE02/HIAVCsljCYTTjMb1nD7MdRsl8-c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:82:e5:39:89:cb:9b:37:75:2b:53:23:52:f9:63:97:78:bf:
         8a:b1:b3:00:5d:d2:66:c3:f1:40:ef:75:63:9f:da:49:38:de:
         00:52:b3:3d:c0:21:2a:af:8a:fa:24:6c:78:3b:63:f1:98:1a:
         df:5e:b6:7f:03:f1:d2:7e:45:2f:b8:84:fe:37:5a:4c:1b:8b:
         7d:7a:64:1e:5f:48:89:c6:3a:ae:bb:cb:3c:24:1b:f3:73:5f:
         a3:c8:05:38:94:c9:6c:97:37:5b:c1:ac:17:b3:5f:31:44:bc:
         40:9d:3a:6b:71:58:ea:6e:80:eb:32:10:ed:c1:bc:8c:92:28:
         a2:2d:bf:ed:80:29:c8:21:8b:f3:30:a9:76:cc:cb:8c:61:7f:
         62:3d:81:22:47:9b:53:81:5c:d0:6d:56:bb:1a:e5:d8:95:39:
         8e:d8:94:84:cc:e6:65:9f:a5:c1:d4:a7:b9:34:6e:a6:09:60:
         4c:70:73:6e:ec:61:94:4e:af:fb:6f:89:74:f6:49:cc:c2:e0:
         47:37:3b:84:ae:47:b4:fe:ac:e0:62:9e:63:50:69:cd:d6:0e:
         21:da:3e:55:fe:02:cd:fc:d9:70:82:f6:74:25:77:c1:7e:6b:
         b1:5d:30:60:ee:75:a3:60:ca:79:54:d4:93:d9:e9:a6:f1:fa:
         93:90:dc:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 04:04:21 2025 by rpki-client