Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916E377/8A6D10B6883C11EE9556BB6EC4F9AE02/55ST8wo-6fDuQFIv8Z1oXIBium4.mft
File:                     55ST8wo-6fDuQFIv8Z1oXIBium4.mft (raw, json)
Hash identifier:          6AKBp1rfDQRMZzcFMpnfuu6Ppkdg+CCsVUmVh/bT5R0=
Subject key identifier:   0A:34:2D:DB:A0:70:18:2D:E0:D0:32:24:B7:1C:CE:6B:28:2F:D3:69
Authority key identifier: E7:94:93:F3:0A:3E:E9:F0:EE:40:52:2F:F1:9D:68:5C:80:62:BA:6E
Certificate issuer:       /CN=A916E377/serialNumber=E79493F30A3EE9F0EE40522FF19D685C8062BA6E
Certificate serial:       017A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/55ST8wo-6fDuQFIv8Z1oXIBium4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916E377/8A6D10B6883C11EE9556BB6EC4F9AE02/55ST8wo-6fDuQFIv8Z1oXIBium4.mft
Manifest number:          0172
Signing time:             Wed 05 Nov 2025 04:00:41 +0000
Manifest this update:     Wed 05 Nov 2025 04:00:40 +0000
Manifest next update:     Wed 12 Nov 2025 04:00:40 +0000
Files and hashes:         1: 55ST8wo-6fDuQFIv8Z1oXIBium4.crl (hash: jb60rcUEpKeHgtG3j2Vh4xEIjor1iY8C1pts/+R9V+8=)
                          2: 54692EB02FB111EFAD1C6322C4F9AE02.roa (hash: keI95qCS2k4Lve5N7wDY/bHgpp8mJTarNaBOO1lqZJQ=)
                          3: 53F6AEC62FB111EFAD1C6322C4F9AE02.roa (hash: B6FxffQfLCkDnb0AjYYHgyj86lwe6hNFxc5bjeq/NIU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916E377/8A6D10B6883C11EE9556BB6EC4F9AE02/55ST8wo-6fDuQFIv8Z1oXIBium4.crl
                          rsync://rpki.apnic.net/member_repository/A916E377/8A6D10B6883C11EE9556BB6EC4F9AE02/55ST8wo-6fDuQFIv8Z1oXIBium4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/55ST8wo-6fDuQFIv8Z1oXIBium4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 04:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 378 (0x17a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916E377, serialNumber=E79493F30A3EE9F0EE40522FF19D685C8062BA6E
        Validity
            Not Before: Nov  5 04:00:40 2025 GMT
            Not After : Nov 12 04:00:40 2025 GMT
        Subject: CN=690acbe8-4af4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:39:65:ca:fd:f8:94:c9:35:c7:2f:02:a3:ad:
                    d8:24:29:a6:09:e8:cd:2b:6a:43:82:73:71:6c:37:
                    ac:0c:10:17:49:dc:a8:4a:0d:ad:99:62:be:6c:5f:
                    26:0e:1e:1f:18:7e:0f:9e:d3:be:82:8b:00:86:4c:
                    e7:14:83:13:65:ed:e3:16:a8:72:46:de:4c:7b:54:
                    6a:e6:fa:dd:85:5a:c2:70:e7:0b:fa:d1:de:de:61:
                    b2:84:38:d0:56:e9:1a:5d:16:58:82:ed:64:8d:d2:
                    ca:a2:3a:39:90:4d:db:97:36:9b:3c:77:08:41:fe:
                    71:62:d6:62:db:71:59:de:ee:ed:96:82:c1:91:6c:
                    e9:05:13:83:9d:7e:6b:6c:40:ae:6c:2b:52:35:22:
                    90:42:7e:8c:56:92:17:d9:20:6d:eb:60:e4:cd:56:
                    75:a5:43:ba:c4:79:c4:65:3c:4d:df:d8:50:10:f4:
                    19:e8:8e:46:eb:c3:d0:b0:fe:39:59:14:73:52:a3:
                    9b:1b:01:1f:79:12:3b:44:e1:0b:0f:d0:3f:20:86:
                    a6:9a:c5:44:ad:18:e5:5c:56:0d:6e:50:a9:e0:2c:
                    da:ee:1a:c2:85:90:f0:8f:f9:78:88:fc:49:53:1d:
                    fe:0d:77:03:ce:22:5c:2e:ca:1c:d5:40:df:03:87:
                    d7:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:34:2D:DB:A0:70:18:2D:E0:D0:32:24:B7:1C:CE:6B:28:2F:D3:69
            X509v3 Authority Key Identifier:
                keyid:E7:94:93:F3:0A:3E:E9:F0:EE:40:52:2F:F1:9D:68:5C:80:62:BA:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916E377/8A6D10B6883C11EE9556BB6EC4F9AE02/55ST8wo-6fDuQFIv8Z1oXIBium4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/55ST8wo-6fDuQFIv8Z1oXIBium4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E377/8A6D10B6883C11EE9556BB6EC4F9AE02/55ST8wo-6fDuQFIv8Z1oXIBium4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:7f:b1:3d:30:de:ff:d9:7d:33:01:6e:aa:93:05:05:fb:12:
         2c:33:48:34:21:bb:36:0b:78:9a:dd:ec:9a:30:13:03:2b:05:
         00:dd:42:83:32:8b:e9:05:cb:9f:38:7e:ac:7d:1c:c6:9a:46:
         9a:86:74:84:28:1f:12:06:3d:12:8d:70:a5:a4:00:bb:ed:bd:
         db:6b:41:59:32:2a:b1:94:fb:ff:fd:a7:07:5c:d5:d5:ba:fd:
         60:db:85:6e:58:69:54:95:92:5e:59:41:36:fa:94:48:a6:01:
         70:64:69:f6:40:34:b8:af:46:e5:68:a9:f6:fc:75:91:67:05:
         76:0e:4b:6b:ac:1a:c1:bd:de:2e:ce:e1:6d:3a:da:c0:9e:22:
         ca:44:2a:ef:a3:48:a3:76:01:89:50:0d:11:b9:f7:91:c7:1d:
         1b:f2:ae:33:a8:bf:94:03:55:a5:b0:4d:ff:c8:f6:40:42:8c:
         51:82:b6:15:2f:54:3a:62:61:81:06:a1:43:7d:33:99:a3:a5:
         f6:24:b6:8c:b5:1d:66:ba:33:0b:6f:39:92:27:bd:91:31:64:
         f8:71:7d:47:ab:14:30:5b:85:22:8a:de:01:99:c4:b3:e1:f5:
         9e:01:23:de:76:3e:db:c8:cd:7b:b5:76:dd:33:d2:50:9a:77:
         f6:06:ad:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:18:41 2025 by rpki-client