Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.mft
File:                     PefvwEame5klu7vcYTKxKXXbSm0.mft (raw, json)
Hash identifier:          W3mowAOLejL9r/gWQK3v5dKstyU1yKDUy0qC76/OBDg=
Subject key identifier:   69:A6:B8:AB:0A:AF:BC:27:4C:74:41:DD:80:A0:F1:8E:62:1E:2F:DD
Authority key identifier: 3D:E7:EF:C0:46:A6:7B:99:25:BB:BB:DC:61:32:B1:29:75:DB:4A:6D
Certificate issuer:       /CN=A9176190/serialNumber=3DE7EFC046A67B9925BBBBDC6132B12975DB4A6D
Certificate serial:       0989
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PefvwEame5klu7vcYTKxKXXbSm0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.mft
Manifest number:          095E
Signing time:             Tue 04 Nov 2025 20:18:56 +0000
Manifest this update:     Tue 04 Nov 2025 20:18:55 +0000
Manifest next update:     Tue 11 Nov 2025 20:18:55 +0000
Files and hashes:         1: PefvwEame5klu7vcYTKxKXXbSm0.crl (hash: nwEQ+YukobFICn46cipgxJVSxuiWw9gPQrII36pcIns=)
                          2: 2DFEDC68A39711ED936DC309C4F9AE02.roa (hash: dHGUh2TZsDHqiOEaZNl0HaiTJBOhXu4wr+Jn6ErPPq8=)
                          3: 9BB410F021B011EFA6C95F83C4F9AE02.roa (hash: ham/XAS0gNUsA7VUjnWwNOW385MWOqUwYnVoCHtaJMM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.crl
                          rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PefvwEame5klu7vcYTKxKXXbSm0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 20:18:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2441 (0x989)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176190, serialNumber=3DE7EFC046A67B9925BBBBDC6132B12975DB4A6D
        Validity
            Not Before: Nov  4 20:18:55 2025 GMT
            Not After : Nov 11 20:18:55 2025 GMT
        Subject: CN=690a5faf-1e27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4b:6f:4e:c8:6e:20:f0:ff:42:ed:70:8d:28:
                    9d:a8:d5:92:61:f0:45:a4:5f:6f:e4:70:45:48:0e:
                    d3:06:1f:74:f0:0e:ed:7d:95:df:a0:34:75:e1:e0:
                    1a:da:1d:34:3e:70:e2:00:d0:b8:f2:ec:bf:33:b2:
                    a6:85:81:de:d0:df:33:69:89:e7:33:a9:0a:63:9b:
                    60:ca:50:30:08:74:43:16:6f:05:35:6f:8b:26:e0:
                    4d:3e:53:b2:7c:6f:75:a9:ce:bf:1a:36:9b:12:d5:
                    ac:a2:32:9b:be:6f:40:35:ef:48:21:56:63:07:1f:
                    2d:fe:43:08:1f:f6:c4:a5:72:e8:11:24:d2:c3:5a:
                    89:d1:bf:22:21:bf:fc:4c:cb:98:48:f0:5d:42:b2:
                    08:89:fa:86:c3:44:72:21:5e:2e:4f:ca:d6:f5:4d:
                    69:1c:8d:10:15:b8:5e:ea:d5:4a:a2:92:d2:71:b8:
                    e3:64:3a:7e:f9:5a:56:c0:d2:4f:d8:a1:1c:6a:af:
                    a4:4f:f0:4b:17:53:ac:11:ed:ac:ff:43:d9:5a:02:
                    2e:ad:a0:45:e4:9d:db:e7:3e:73:75:65:ae:f9:ca:
                    b2:07:54:fa:d1:d6:f1:b4:06:42:cd:3b:fa:87:e3:
                    3e:40:3e:4d:7f:bb:7b:25:2c:cb:d9:99:cc:36:a8:
                    05:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:A6:B8:AB:0A:AF:BC:27:4C:74:41:DD:80:A0:F1:8E:62:1E:2F:DD
            X509v3 Authority Key Identifier:
                keyid:3D:E7:EF:C0:46:A6:7B:99:25:BB:BB:DC:61:32:B1:29:75:DB:4A:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PefvwEame5klu7vcYTKxKXXbSm0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:0b:52:e0:f3:0d:6d:5b:a1:45:5b:8f:22:39:80:8b:28:98:
         a8:5f:8a:c6:35:4d:c9:96:08:7e:72:b5:b5:59:85:99:38:93:
         57:34:2e:50:f9:05:3b:c9:56:19:50:46:9d:f3:67:f2:90:99:
         ae:06:68:9f:6c:dc:c9:37:23:3f:1c:43:f9:f2:21:4e:da:18:
         46:fc:b7:8b:d8:b7:2b:89:2e:00:78:03:6c:1b:63:58:b6:45:
         91:27:73:b1:24:55:2a:70:3f:b3:3d:78:6f:e5:93:e0:0b:f9:
         6b:76:94:80:a1:5d:27:9a:43:d8:67:ad:35:06:cd:6e:c6:90:
         c5:28:18:23:cf:76:11:a8:1d:cc:28:4d:cc:f1:25:65:22:20:
         c5:d7:a0:7d:f3:7f:d1:67:78:91:eb:30:9c:2f:3f:35:18:2a:
         fd:1e:88:13:3a:3f:9e:7b:7d:b9:43:b7:e5:5f:51:66:ca:3e:
         d8:bc:5b:63:b8:84:eb:19:c6:c8:2f:85:cd:37:e5:a8:f2:e9:
         2d:91:7e:27:e9:d3:47:ee:54:92:b1:e3:5f:a4:08:0a:a7:8b:
         a9:d9:37:f2:92:d4:29:52:01:5c:67:49:3c:2c:75:a5:d1:5e:
         d6:78:08:3f:8b:3f:0a:3d:5e:a7:d6:54:1b:58:73:4d:44:85:
         b4:b3:2a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:00:49 2025 by rpki-client