Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.mft
File:                     cNFtdzeYmxXGyN8dyiqYDgu_ug8.mft (raw, json)
Hash identifier:          QEd+z3ZUlf4yV51QBdirSLvtaIG9Dq9kS3TWcxOchvo=
Subject key identifier:   9C:D0:CF:7D:80:20:63:4B:A0:7D:4F:18:E7:BB:A0:D5:6C:AA:5A:D5
Authority key identifier: 70:D1:6D:77:37:98:9B:15:C6:C8:DF:1D:CA:2A:98:0E:0B:BF:BA:0F
Certificate issuer:       /CN=A9186980/serialNumber=70D16D7737989B15C6C8DF1DCA2A980E0BBFBA0F
Certificate serial:       07B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNFtdzeYmxXGyN8dyiqYDgu_ug8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.mft
Manifest number:          07AE
Signing time:             Tue 04 Nov 2025 21:26:30 +0000
Manifest this update:     Tue 04 Nov 2025 21:26:29 +0000
Manifest next update:     Tue 11 Nov 2025 21:26:29 +0000
Files and hashes:         1: cNFtdzeYmxXGyN8dyiqYDgu_ug8.crl (hash: C8GMbsekQbWB/thjDcFhlbVMpH6KkI4V952sQYN15ZA=)
                          2: FFA6AD56DF7211EDB0D24244C4F9AE02.roa (hash: q05bnDBuCJsrUlvlSely8w0jnLrUU3dVN/rTyJ4umLg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.crl
                          rsync://rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNFtdzeYmxXGyN8dyiqYDgu_ug8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 21:26:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1969 (0x7b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186980, serialNumber=70D16D7737989B15C6C8DF1DCA2A980E0BBFBA0F
        Validity
            Not Before: Nov  4 21:26:29 2025 GMT
            Not After : Nov 11 21:26:29 2025 GMT
        Subject: CN=690a6f85-5470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:33:4f:cf:fe:e2:17:68:c7:c3:0c:d4:43:dd:
                    9f:74:0d:da:0a:65:13:c9:ff:8e:9e:98:85:9c:78:
                    2d:27:c7:69:4b:61:e3:68:41:43:82:94:ec:0d:9d:
                    26:54:22:38:b6:9d:41:2d:97:be:dc:79:5a:9f:6c:
                    fd:81:3b:f6:fd:d7:fa:85:4b:51:7e:47:95:cc:27:
                    6c:34:34:1e:0e:17:c8:9f:07:04:f0:1a:41:60:21:
                    66:77:b4:1d:f9:71:c3:fe:14:03:2f:c8:b0:ea:82:
                    bd:6d:86:68:1b:c7:4b:ff:0d:05:d8:24:a9:d4:16:
                    a5:24:37:57:9f:3d:ed:59:99:7e:45:26:d1:96:22:
                    75:bc:41:26:64:06:97:09:f6:05:91:12:83:93:26:
                    47:a4:56:a5:63:e4:98:d0:36:5b:cd:20:96:df:52:
                    05:20:eb:22:3e:99:55:76:aa:b1:93:9e:d4:a0:e7:
                    53:9f:bb:94:c6:ba:5e:ba:51:a3:ad:45:50:30:c2:
                    ef:30:90:7d:70:31:96:59:31:39:f8:65:eb:c6:ee:
                    53:d1:81:ef:c4:aa:82:c7:7a:2b:6a:60:ac:08:d2:
                    b2:87:60:53:dd:b3:4d:30:fc:75:f5:cb:d4:bc:a4:
                    70:d5:48:62:f1:0e:bf:df:5e:c7:4c:ce:df:4d:b0:
                    1d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:D0:CF:7D:80:20:63:4B:A0:7D:4F:18:E7:BB:A0:D5:6C:AA:5A:D5
            X509v3 Authority Key Identifier:
                keyid:70:D1:6D:77:37:98:9B:15:C6:C8:DF:1D:CA:2A:98:0E:0B:BF:BA:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNFtdzeYmxXGyN8dyiqYDgu_ug8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:ff:30:57:5b:62:56:1a:18:e2:be:33:58:f1:38:e4:dd:6b:
         ac:70:10:05:78:df:0f:74:6a:99:8f:0c:c9:6f:d2:6b:73:a9:
         31:9d:57:31:a9:d9:ab:3e:0f:f5:55:76:e7:b6:da:eb:7d:14:
         ff:9e:e2:41:86:e3:6f:9e:81:48:27:61:22:8a:81:ca:b7:06:
         9c:92:08:69:4d:06:af:25:ef:07:58:c4:68:52:79:5b:e8:78:
         8a:3f:7d:30:5a:0b:6f:2b:25:a9:85:ff:fc:b8:98:5e:8a:dc:
         a7:9a:b4:37:84:73:8d:7f:ce:74:26:81:21:16:fe:0b:23:7d:
         18:77:a2:c2:4f:6a:28:64:de:0b:e8:cc:bd:a2:55:af:24:22:
         66:a7:28:41:7d:c7:90:93:d2:63:a7:c3:95:55:69:27:4e:9d:
         fa:5c:27:71:32:59:ff:e8:b2:71:07:2f:e1:9a:de:30:66:a6:
         d0:fa:a8:18:12:6d:2d:76:9b:c4:eb:27:2a:e1:cb:8a:9a:c3:
         b2:8c:ba:de:5d:95:df:30:a4:84:62:81:d2:11:c1:f4:35:a9:
         8f:ad:b0:21:db:d6:66:7c:e0:ee:35:05:06:11:b9:07:15:a7:
         83:9f:5b:9d:2b:00:b9:ae:2c:59:11:eb:83:ad:ef:2b:c7:a7:
         72:6e:95:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:25:04 2025 by rpki-client