Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916BF2B/459E666EB78A11EFB874276EC4F9AE02/_MSmV91TDZU6LW8_FZMv_gHykdY.mft
File:                     _MSmV91TDZU6LW8_FZMv_gHykdY.mft (raw, json)
Hash identifier:          V6jFIt5sue1yEojto9OgS6tiIvvGcQECna/wwfsPn+4=
Subject key identifier:   54:B5:F8:DA:50:03:1C:2D:E1:F6:C4:C5:BA:1C:73:46:03:A4:F0:7A
Authority key identifier: FC:C4:A6:57:DD:53:0D:95:3A:2D:6F:3F:15:93:2F:FE:01:F2:91:D6
Certificate issuer:       /CN=A916BF2B/serialNumber=FCC4A657DD530D953A2D6F3F15932FFE01F291D6
Certificate serial:       B6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_MSmV91TDZU6LW8_FZMv_gHykdY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916BF2B/459E666EB78A11EFB874276EC4F9AE02/_MSmV91TDZU6LW8_FZMv_gHykdY.mft
Manifest number:          AE
Signing time:             Mon 03 Nov 2025 06:12:38 +0000
Manifest this update:     Mon 03 Nov 2025 06:12:38 +0000
Manifest next update:     Mon 10 Nov 2025 06:12:38 +0000
Files and hashes:         1: _MSmV91TDZU6LW8_FZMv_gHykdY.crl (hash: JqhWKY3zGMk2z9Yo3ejsoWIH7dNrE4f4sAfLoo28Tsk=)
                          2: 7A3EF584AEAE11F0ADA6ED46C4F9AE02.roa (hash: elYg1v5yT+4gyLrlduaGTUbEueFhcutz+Vh7PlnDDoE=)
                          3: 79553296AEAE11F0ADA6ED46C4F9AE02.roa (hash: 4OTn+G3JYqI1U5LJYjCTVjdk961mZ5M87rMKzQPFTZ0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916BF2B/459E666EB78A11EFB874276EC4F9AE02/_MSmV91TDZU6LW8_FZMv_gHykdY.crl
                          rsync://rpki.apnic.net/member_repository/A916BF2B/459E666EB78A11EFB874276EC4F9AE02/_MSmV91TDZU6LW8_FZMv_gHykdY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_MSmV91TDZU6LW8_FZMv_gHykdY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 06:12:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 182 (0xb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916BF2B, serialNumber=FCC4A657DD530D953A2D6F3F15932FFE01F291D6
        Validity
            Not Before: Nov  3 06:12:38 2025 GMT
            Not After : Nov 10 06:12:38 2025 GMT
        Subject: CN=690847d6-92ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:00:62:4f:ec:cc:79:cd:b9:59:9e:7c:43:8c:
                    bd:81:6f:fa:ea:55:68:25:84:2f:7d:c4:ca:4a:21:
                    6c:df:49:b3:51:92:20:4f:77:a8:ec:4c:c4:d6:e1:
                    bb:96:0f:55:c6:17:26:b4:15:cd:ee:8d:53:25:0b:
                    a4:5e:f2:02:89:f9:09:98:dd:6e:7e:f9:dc:52:ff:
                    2b:99:d2:88:b7:f3:27:f9:31:52:5d:f4:19:39:ef:
                    41:54:a3:34:54:d7:32:33:51:f6:67:ad:24:65:58:
                    12:2f:ab:f7:ca:41:bf:8f:1d:6e:36:91:27:9a:4d:
                    13:fe:00:65:87:bc:60:4d:a8:20:3d:e2:24:7a:6f:
                    0f:b2:81:7a:09:5a:d5:63:95:f3:73:b5:d7:f4:2f:
                    96:57:3f:b7:1f:82:81:8b:27:ec:ba:e1:18:d6:4a:
                    8c:c2:87:fd:87:d0:44:3f:12:de:fa:2b:4d:9c:b5:
                    5d:51:8f:cc:6d:91:09:f8:2d:67:25:64:e2:18:cd:
                    57:31:6e:39:39:05:fd:1a:fb:0e:f5:26:4a:3d:c6:
                    ba:29:1d:92:f8:0a:61:9d:41:ca:c7:c2:e1:a7:09:
                    13:6f:a6:9c:d3:62:6c:c4:55:ea:54:54:66:38:45:
                    d2:86:f4:ea:50:fc:ec:75:44:db:ef:6c:04:66:d3:
                    21:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:B5:F8:DA:50:03:1C:2D:E1:F6:C4:C5:BA:1C:73:46:03:A4:F0:7A
            X509v3 Authority Key Identifier:
                keyid:FC:C4:A6:57:DD:53:0D:95:3A:2D:6F:3F:15:93:2F:FE:01:F2:91:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916BF2B/459E666EB78A11EFB874276EC4F9AE02/_MSmV91TDZU6LW8_FZMv_gHykdY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_MSmV91TDZU6LW8_FZMv_gHykdY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BF2B/459E666EB78A11EFB874276EC4F9AE02/_MSmV91TDZU6LW8_FZMv_gHykdY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:5f:86:e6:00:6e:95:99:d2:d2:b5:cd:49:a7:e3:bf:df:e7:
         f3:e2:e9:94:5e:4e:02:49:62:3a:c8:e0:4a:9e:69:be:8a:e5:
         8a:85:7e:6f:c6:37:38:7f:20:de:ae:04:f6:10:5c:e9:c1:2b:
         11:2f:0c:6f:5c:52:df:a9:f8:6a:70:91:88:41:64:ec:e9:05:
         75:0e:a7:8f:b0:bf:8e:bd:7a:e5:d7:f5:fb:5f:b9:f8:59:e1:
         57:af:3c:28:2f:cf:0a:78:73:83:df:f6:b9:b7:06:a7:3e:f3:
         de:4c:37:88:d6:9b:ad:f4:d7:f1:74:22:20:71:52:e8:99:af:
         d4:2a:ca:ed:bb:b0:3d:16:4b:6d:5b:d6:fa:84:fb:7f:e4:57:
         d9:49:48:aa:05:46:87:a9:53:fa:64:32:30:6f:a7:e0:d9:d0:
         26:80:b9:a1:d0:01:e3:96:68:2d:b9:7a:cd:86:b9:3d:67:93:
         b4:e2:89:46:6f:52:56:b3:96:c0:d0:89:cc:cc:16:68:d8:05:
         08:84:7e:25:bf:8b:d5:7d:d7:48:33:60:a1:0e:c6:94:2d:db:
         f6:3c:1b:e4:f4:1f:01:65:53:dc:0b:32:fc:c7:8b:cb:5c:e5:
         1b:f1:61:5e:7c:74:89:a4:26:3b:bd:89:6e:8d:38:d9:48:0c:
         d5:95:bb:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:55:55 2025 by rpki-client