Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91627F9/288DF14AE9C411EF9920930AC4F9AE02/83VHbzI13D1SUXHivpIRY45JCEc.mft
File:                     83VHbzI13D1SUXHivpIRY45JCEc.mft (raw, json)
Hash identifier:          d4WHIVQrbbo8ylGe76Ki7yD7h7WL/MaqtYcpZuVQQu4=
Subject key identifier:   5F:02:DF:40:0F:9D:2B:6E:E8:F3:27:4B:5B:FF:B1:B1:A8:0C:87:3E
Authority key identifier: F3:75:47:6F:32:35:DC:3D:52:51:71:E2:BE:92:11:63:8E:49:08:47
Certificate issuer:       /CN=A91627F9/serialNumber=F375476F3235DC3D525171E2BE9211638E490847
Certificate serial:       8E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83VHbzI13D1SUXHivpIRY45JCEc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91627F9/288DF14AE9C411EF9920930AC4F9AE02/83VHbzI13D1SUXHivpIRY45JCEc.mft
Manifest number:          89
Signing time:             Thu 23 Oct 2025 08:46:43 +0000
Manifest this update:     Thu 23 Oct 2025 08:46:42 +0000
Manifest next update:     Thu 30 Oct 2025 08:46:42 +0000
Files and hashes:         1: 83VHbzI13D1SUXHivpIRY45JCEc.crl (hash: 6CR/mYE2b8zXKCw7GFlhNpF+6NSExxaKsXtNbumCRLk=)
                          2: BA8DB662085911F082EDFD31C4F9AE02.roa (hash: +kDevtWz9Zb8E9hUtq+Uoh1dNdwrgx3ww0ByNbhsSc4=)
                          3: 99E2D388E9C411EFAFABDD0BC4F9AE02.roa (hash: HyBY5t49VXGObL7xNBvYsj3P5DUndJz8OLCiO0M3LtI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91627F9/288DF14AE9C411EF9920930AC4F9AE02/83VHbzI13D1SUXHivpIRY45JCEc.crl
                          rsync://rpki.apnic.net/member_repository/A91627F9/288DF14AE9C411EF9920930AC4F9AE02/83VHbzI13D1SUXHivpIRY45JCEc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83VHbzI13D1SUXHivpIRY45JCEc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Oct 2025 08:46:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142 (0x8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91627F9, serialNumber=F375476F3235DC3D525171E2BE9211638E490847
        Validity
            Not Before: Oct 23 08:46:42 2025 GMT
            Not After : Oct 30 08:46:42 2025 GMT
        Subject: CN=68f9eb72-9d7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:bb:0a:b3:a5:60:ab:92:61:af:24:e8:1d:41:
                    4f:bb:11:c4:27:90:5b:43:42:bf:b8:5b:ee:86:7d:
                    4f:85:55:61:33:96:5f:0c:5b:8d:35:b4:a7:19:f9:
                    57:ac:b0:0e:ce:50:4e:d7:94:05:13:e7:e7:b1:1d:
                    a6:8a:0c:8e:b6:e4:7d:16:27:ce:dd:6d:12:46:dd:
                    09:7f:1f:40:4c:b4:54:24:80:82:ce:60:11:16:78:
                    d9:94:b7:d7:d8:0d:e2:24:0a:d8:b6:47:ae:a0:78:
                    e2:68:f0:e2:0f:6f:ae:79:ff:c7:38:90:cd:7a:f4:
                    f5:15:27:00:7a:f9:b1:05:2d:1e:c9:bd:35:f6:b0:
                    7d:dc:12:a2:7b:b0:bf:f3:88:f2:f2:fb:d6:e0:ef:
                    13:8f:25:f8:6a:c7:6d:2d:cc:24:c8:b5:79:dc:31:
                    26:11:ff:0a:dd:5f:1b:88:e7:0f:87:4a:c8:18:7d:
                    62:25:99:5c:af:d4:77:bb:c5:63:bc:57:c2:30:25:
                    eb:6b:ab:eb:ea:22:7f:ab:38:77:04:27:8d:ea:d6:
                    c3:28:13:0d:c9:fc:7b:57:2f:a0:b2:6c:45:d7:13:
                    07:70:09:70:b5:fb:19:12:9d:fb:44:d5:60:0c:6f:
                    dc:76:4a:39:e9:a9:f5:02:dd:48:ea:c7:3a:b0:81:
                    ca:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:02:DF:40:0F:9D:2B:6E:E8:F3:27:4B:5B:FF:B1:B1:A8:0C:87:3E
            X509v3 Authority Key Identifier:
                keyid:F3:75:47:6F:32:35:DC:3D:52:51:71:E2:BE:92:11:63:8E:49:08:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91627F9/288DF14AE9C411EF9920930AC4F9AE02/83VHbzI13D1SUXHivpIRY45JCEc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83VHbzI13D1SUXHivpIRY45JCEc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91627F9/288DF14AE9C411EF9920930AC4F9AE02/83VHbzI13D1SUXHivpIRY45JCEc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:47:39:9d:ac:04:dd:4a:ab:06:c4:8e:c0:f1:89:b8:21:59:
         34:ae:e1:a9:81:3f:06:9a:ee:21:e3:a1:35:b7:11:66:0e:12:
         3a:41:c0:8b:4c:0e:1b:39:2e:81:4b:df:7d:b3:cb:3e:19:dc:
         56:de:32:d3:9e:0c:16:62:ae:48:08:56:d2:fa:c3:c3:6f:49:
         01:f9:43:fa:67:3d:fc:fa:13:7e:8b:3d:2d:fb:f0:9d:83:03:
         3d:fb:e6:56:1d:94:fc:cf:da:5f:ba:be:83:dd:1a:a9:18:2d:
         8d:97:00:27:24:cc:7b:63:8f:81:62:32:11:29:86:d2:b5:36:
         2a:c7:35:1d:e0:0b:c2:97:dd:27:ec:0d:31:6c:85:0c:a8:00:
         34:b3:64:06:27:4f:f8:54:74:17:99:7f:9e:c0:7e:9e:16:a4:
         d9:89:27:80:79:27:15:c2:81:a9:30:22:36:5e:47:12:c4:33:
         3f:65:a4:8c:c0:63:a0:ac:ed:90:10:2c:a4:04:41:d1:69:e5:
         65:28:c9:b2:76:71:4f:09:6a:9e:e9:3d:2e:4f:51:05:3f:a9:
         72:06:c5:cc:1b:8f:87:5c:29:a6:f5:1d:61:c1:a4:d1:a2:f2:
         fd:c0:3b:b0:5b:15:51:ae:cd:9e:8f:b2:c8:8f:be:2c:f9:f9:
         2d:41:19:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 06:15:06 2025 by rpki-client