Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft
File:                     CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft (raw, json)
Hash identifier:          HmHS4iCbOBzpM49HlzYg6gBj675vsSMC1zKTOddpvSA=
Subject key identifier:   51:5D:50:97:85:5A:8D:93:52:85:84:1B:59:B7:F0:F4:3B:ED:A9:79
Authority key identifier: 0A:8B:D2:B0:2F:F6:95:17:1D:C0:1E:8C:7E:4A:A2:D9:88:DA:3B:9A
Certificate issuer:       /CN=A91705D7/serialNumber=0A8BD2B02FF695171DC01E8C7E4AA2D988DA3B9A
Certificate serial:       011B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CovSsC_2lRcdwB6Mfkqi2YjaO5o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft
Manifest number:          0116
Signing time:             Mon 03 Nov 2025 04:52:53 +0000
Manifest this update:     Mon 03 Nov 2025 04:52:53 +0000
Manifest next update:     Mon 10 Nov 2025 04:52:53 +0000
Files and hashes:         1: CovSsC_2lRcdwB6Mfkqi2YjaO5o.crl (hash: dXuUPXTF6VhA2tIIB/FGjH7twoAymxCXC5fdrKUPU54=)
                          2: 8C35F65C57F111F0B413224EC4F9AE02.roa (hash: voQWhVz+FM5Oce4JeqUGqkpzwLHV4T3Do9szQnC3FmQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.crl
                          rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CovSsC_2lRcdwB6Mfkqi2YjaO5o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 04:52:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 283 (0x11b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91705D7, serialNumber=0A8BD2B02FF695171DC01E8C7E4AA2D988DA3B9A
        Validity
            Not Before: Nov  3 04:52:53 2025 GMT
            Not After : Nov 10 04:52:53 2025 GMT
        Subject: CN=69083525-2cd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8c:18:00:0c:18:0e:7f:33:96:f1:0a:aa:39:
                    88:c8:e9:8c:01:24:2d:ee:48:2a:c3:da:a1:f0:ed:
                    3b:b0:2f:72:9d:65:29:75:ec:59:96:5d:dd:6b:76:
                    a0:a7:74:5c:0b:ce:0d:d5:e3:5e:9c:31:7f:57:cf:
                    9c:9f:b1:ec:37:af:b5:87:3d:0c:95:50:72:e6:a3:
                    7b:c6:4f:4d:d3:f6:e5:64:d9:c0:b6:89:de:de:ec:
                    36:50:9d:1a:92:db:3f:60:3b:c6:df:36:fa:86:39:
                    43:71:cb:51:ff:e8:d4:7c:36:87:c5:4c:d2:c3:61:
                    2d:b6:73:1f:dd:4b:39:4b:58:bc:06:ad:f1:2f:4c:
                    ab:6f:0e:33:af:9e:e1:49:9b:a6:af:02:eb:f4:10:
                    4c:d5:cb:c5:f0:e3:91:20:96:e3:33:37:4a:d4:01:
                    76:08:97:18:56:fc:42:94:3e:c3:eb:11:ff:de:1f:
                    ed:99:e9:c0:f5:bc:81:22:5d:e2:ef:5f:16:75:e8:
                    c7:26:47:7a:aa:2f:e8:e7:b7:56:dd:5f:83:fd:4b:
                    ec:ed:cb:e3:d0:6e:c9:45:89:5f:50:80:4a:86:f0:
                    84:23:27:81:30:ef:11:b0:5a:a2:e9:06:d3:8b:47:
                    63:a6:39:fe:2e:3b:3f:c2:b1:49:76:2d:e7:ac:6c:
                    72:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:5D:50:97:85:5A:8D:93:52:85:84:1B:59:B7:F0:F4:3B:ED:A9:79
            X509v3 Authority Key Identifier:
                keyid:0A:8B:D2:B0:2F:F6:95:17:1D:C0:1E:8C:7E:4A:A2:D9:88:DA:3B:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CovSsC_2lRcdwB6Mfkqi2YjaO5o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:6e:f6:aa:f6:44:ad:fc:f2:db:e3:17:26:df:21:e3:b9:97:
         33:ef:0d:26:87:cb:f5:ff:69:85:a3:5b:1f:54:b1:c8:9d:f1:
         93:1d:e2:2c:94:7b:46:e0:ff:50:6b:07:49:22:b9:3c:0a:12:
         d9:9c:09:03:be:43:2f:b9:e9:7d:5a:1f:62:03:c1:c5:fc:8e:
         c6:aa:ba:14:0f:ba:d9:d2:7e:85:2c:48:b5:f3:6e:06:c0:dd:
         0f:e4:c5:58:ea:6a:ff:1f:1e:f6:8f:64:b8:f4:e4:04:21:37:
         28:75:83:0e:63:84:c1:fd:96:e9:69:6d:fb:6a:a7:54:ea:29:
         e1:00:fe:9d:54:17:92:e1:24:56:ff:67:c1:31:c6:d3:3d:40:
         ed:2f:b8:79:0b:71:11:94:5b:5b:3b:5e:db:8c:69:08:bd:fd:
         8c:29:3a:23:b0:42:f9:e8:29:73:16:4a:e0:a4:43:f6:43:ce:
         83:db:70:1d:2e:29:cd:e1:46:e2:6b:96:ef:16:ab:e2:40:e2:
         42:f9:f8:8f:81:de:7b:67:3e:22:c9:eb:e8:c5:b9:63:e0:71:
         0f:7f:5b:f1:ff:d4:35:5d:9e:37:57:98:3d:fd:88:79:5c:7c:
         e6:65:7a:34:45:fb:22:99:25:a9:72:41:c9:ca:98:48:2c:8a:
         4a:8e:ed:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 01:11:56 2025 by rpki-client