Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.mft
File:                     FZbEu-cy2oXLg-incIc-o0E3AaU.mft (raw, json)
Hash identifier:          XWYQ2Tu0fRIPAnvgyB/3JCuczVrz1Oks3sTrLZyldM0=
Subject key identifier:   9B:70:5E:B9:8C:13:0C:69:E8:EA:DB:4C:F2:CF:AB:ED:7A:C3:BD:D5
Authority key identifier: 15:96:C4:BB:E7:32:DA:85:CB:83:E8:A7:70:87:3E:A3:41:37:01:A5
Certificate issuer:       /CN=A91771E3/serialNumber=1596C4BBE732DA85CB83E8A770873EA3413701A5
Certificate serial:       13AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZbEu-cy2oXLg-incIc-o0E3AaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.mft
Manifest number:          1382
Signing time:             Sun 02 Nov 2025 16:59:37 +0000
Manifest this update:     Sun 02 Nov 2025 16:59:37 +0000
Manifest next update:     Sun 09 Nov 2025 16:59:37 +0000
Files and hashes:         1: FZbEu-cy2oXLg-incIc-o0E3AaU.crl (hash: IWuO3R3gwctRyhdauKeDMscwT10jDEhPYd3pOT2aIN4=)
                          2: 56094384320611EA84C94231C4F9AE02.roa (hash: mZoT1sj2WR9PydzJ0T/LJHzRsHoob8BeC9+MkrsPnys=)
                          3: 443241A0321B11EA83044473C4F9AE02.roa (hash: n0sRanfJ+3KhBJUHh6jH9cwbJaaTZCbfJ+87aODuzgM=)
                          4: 1FD07ED231FB11EAA335E10FC4F9AE02.roa (hash: y17aQP9C+LDn4Yph2n6mf2nnVwvpkbeV6pXqgmt1qVQ=)
                          5: 4B18BBA8A9F811EEB85DBD24C4F9AE02.roa (hash: sd3UhNYbHggo+XcciVWTFZxv/tGVhGFf2hY/GpsuhSs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.crl
                          rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZbEu-cy2oXLg-incIc-o0E3AaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 16:59:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5035 (0x13ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91771E3, serialNumber=1596C4BBE732DA85CB83E8A770873EA3413701A5
        Validity
            Not Before: Nov  2 16:59:37 2025 GMT
            Not After : Nov  9 16:59:37 2025 GMT
        Subject: CN=69078df9-46d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:22:3d:e3:5d:aa:86:3b:c7:87:db:30:36:31:
                    da:f2:f3:19:a9:86:d1:c8:b7:de:67:1d:ba:da:35:
                    22:db:6a:08:4e:41:95:fd:52:a2:10:12:e3:34:05:
                    1b:f5:2d:9c:46:1f:7d:65:ce:cc:86:7d:75:13:dc:
                    5d:5f:4d:c0:27:cb:c7:15:21:eb:2e:bf:7e:38:11:
                    e7:7f:20:9b:de:ae:aa:96:19:40:9d:d8:51:75:ef:
                    b1:07:93:87:fb:85:a7:d6:32:ae:90:42:f6:e4:04:
                    54:67:bc:27:ae:cb:2b:71:36:54:92:0d:77:55:23:
                    fa:a5:5c:20:2f:09:42:9d:20:0f:22:d9:c1:73:72:
                    c3:15:a6:51:59:2a:1f:08:3b:ab:d5:25:84:55:d3:
                    5e:ff:0a:bf:c6:ab:ea:f4:2d:37:c1:fd:60:02:76:
                    dc:3c:ac:e0:8f:3a:e1:2b:18:70:5f:85:a4:eb:57:
                    74:6b:77:98:10:8f:34:28:44:43:ff:cf:c2:2d:cd:
                    a3:b2:4c:39:63:2a:9e:e6:49:66:1a:aa:fd:ef:35:
                    4a:3b:2b:d4:06:a3:cd:c4:d7:28:75:0d:d5:84:1c:
                    d2:21:a7:4c:56:a5:d8:ed:4d:77:0b:c2:4e:65:bf:
                    1f:84:54:a2:dc:21:e5:25:5e:3d:7a:7f:0c:c6:d1:
                    df:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:70:5E:B9:8C:13:0C:69:E8:EA:DB:4C:F2:CF:AB:ED:7A:C3:BD:D5
            X509v3 Authority Key Identifier:
                keyid:15:96:C4:BB:E7:32:DA:85:CB:83:E8:A7:70:87:3E:A3:41:37:01:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZbEu-cy2oXLg-incIc-o0E3AaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:ab:f3:bb:8d:49:5c:5a:51:c4:ee:f9:9f:bb:96:41:f5:fc:
         70:59:2e:2a:93:e2:fe:09:b8:e8:a1:d9:61:7f:4f:68:14:53:
         eb:2a:a6:e9:15:43:c7:a3:8e:4b:5c:c8:6b:e9:e9:ff:c6:d7:
         c1:fe:5d:3d:12:02:22:7e:e6:55:b6:02:e8:19:1f:73:db:bf:
         cd:58:bd:dc:05:61:8a:b2:a9:62:54:83:c8:87:66:90:3d:bf:
         28:eb:6b:dc:09:fe:86:8f:fc:1e:49:00:50:d8:9f:a3:ab:f5:
         2f:2e:9b:bc:97:25:aa:8c:c2:31:63:4c:ab:b6:99:e9:8e:da:
         b7:e0:c3:b2:fa:ab:36:b7:40:01:99:d4:76:57:18:32:ca:07:
         2f:3c:a9:41:56:68:2f:e9:23:78:c0:b4:43:c3:fe:b5:28:8d:
         86:21:84:06:e6:ed:0d:ec:c4:c4:e3:26:f2:2b:01:5f:e1:93:
         41:5f:4a:02:9b:4a:45:f8:57:a4:b7:66:64:4f:74:38:41:f8:
         4b:38:fc:b0:9d:e0:9d:46:3a:5d:86:64:ef:a7:95:93:09:7c:
         8d:fe:f6:e6:39:f8:b3:0b:2f:0b:6f:0f:12:ec:ff:2d:7e:b2:
         a3:e4:30:97:cf:e0:86:57:48:5e:1b:62:22:4a:d2:98:c8:e8:
         04:e2:6b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:07:33 2025 by rpki-client