Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.mft
File:                     Z187oflqnh7CsBN2YsdU2x0eAHM.mft (raw, json)
Hash identifier:          ZprWbSgj0sSesjpTq/WkhKYSxEz/5+vAhxM8YBin27w=
Subject key identifier:   64:BD:E1:94:DE:79:DE:93:19:04:3B:5D:C5:AB:13:B1:A8:88:18:1B
Authority key identifier: 67:5F:3B:A1:F9:6A:9E:1E:C2:B0:13:76:62:C7:54:DB:1D:1E:00:73
Certificate issuer:       /CN=A91A4517/serialNumber=675F3BA1F96A9E1EC2B0137662C754DB1D1E0073
Certificate serial:       2965
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z187oflqnh7CsBN2YsdU2x0eAHM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.mft
Manifest number:          2944
Signing time:             Sun 02 Nov 2025 15:35:27 +0000
Manifest this update:     Sun 02 Nov 2025 15:35:27 +0000
Manifest next update:     Sun 09 Nov 2025 15:35:27 +0000
Files and hashes:         1: Z187oflqnh7CsBN2YsdU2x0eAHM.crl (hash: qV/PMbhJD0V9n7mRFESrESrvziXGkSDZwCzjqQ3MySY=)
                          2: F4246CDA561811E98A165872C4F9AE02.roa (hash: C/PaFQfpTy7SRBE+0XzPzL+bck/ugVag2KSCjWGbACs=)
                          3: 58292E96774111F0A079543BC4F9AE02.roa (hash: cB0aG0QBKc7lbuLj1XFyRNR3680AdznFwoFOUAcWcEg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.crl
                          rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z187oflqnh7CsBN2YsdU2x0eAHM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 15:35:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10597 (0x2965)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4517, serialNumber=675F3BA1F96A9E1EC2B0137662C754DB1D1E0073
        Validity
            Not Before: Nov  2 15:35:27 2025 GMT
            Not After : Nov  9 15:35:27 2025 GMT
        Subject: CN=69077a3f-bec0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:16:30:63:fc:34:81:65:8e:b0:57:f6:c5:db:
                    9d:93:51:2c:cd:10:23:ab:15:fa:12:d0:f8:62:da:
                    e4:92:13:cc:44:c8:7c:4c:b6:2f:f7:cb:fa:d0:ef:
                    6d:11:48:9f:07:d3:4d:94:48:7d:4e:0f:fb:dc:cf:
                    a7:26:80:d3:32:e5:96:22:6f:7d:94:51:1b:1d:78:
                    e6:2c:63:75:33:e6:7a:02:8e:bc:07:80:08:9f:eb:
                    bb:19:d4:07:0a:3b:04:f9:3c:b4:62:94:f4:60:5c:
                    9b:75:0d:0d:e1:ea:ca:84:ad:dc:a8:ee:4e:63:bb:
                    2b:0b:79:19:b6:ad:f5:ab:2a:34:b8:5d:8d:6e:4f:
                    71:2e:e5:80:f0:1a:de:e0:fa:4b:ca:d5:b5:bb:89:
                    13:f0:74:c1:33:4e:cb:08:a8:b6:54:84:15:95:26:
                    58:5f:d2:c7:dc:1a:fa:a7:bd:0e:84:e1:93:8f:c9:
                    33:68:2a:61:3f:44:fb:61:dc:16:cd:a9:59:fd:58:
                    9a:f2:84:bf:38:16:89:5b:a4:51:ca:6c:5f:3f:8e:
                    07:d8:bf:12:eb:9c:8a:af:4f:8c:44:7f:e3:7f:b8:
                    10:50:f1:5c:68:e1:49:49:2e:ce:40:57:6d:40:b9:
                    40:6d:7a:1e:ab:b1:1e:c8:27:50:e7:e2:af:ad:19:
                    ec:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:BD:E1:94:DE:79:DE:93:19:04:3B:5D:C5:AB:13:B1:A8:88:18:1B
            X509v3 Authority Key Identifier:
                keyid:67:5F:3B:A1:F9:6A:9E:1E:C2:B0:13:76:62:C7:54:DB:1D:1E:00:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z187oflqnh7CsBN2YsdU2x0eAHM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:28:c8:23:d4:ba:3f:82:9d:77:34:e2:ed:67:d6:7a:76:94:
         e6:b5:da:09:09:ee:b0:91:33:42:2a:78:f0:9d:8d:67:69:e2:
         30:41:19:1e:90:9e:0b:c2:91:07:f3:e8:54:d2:ac:24:7f:5c:
         34:81:99:69:90:b1:27:da:31:bd:30:9b:aa:5d:f3:fb:3d:06:
         45:c2:ef:43:e4:1e:a7:2e:e3:ff:be:b9:2e:61:1d:03:95:f3:
         04:8e:2a:9c:8c:c1:1b:70:df:07:7c:0f:2c:da:ac:6b:10:8c:
         8d:7f:90:9e:74:9d:04:21:bd:d7:ba:7e:4b:fa:a6:ae:54:d0:
         d8:a2:c5:8a:39:00:60:31:e5:ea:27:66:96:d1:52:8e:1d:66:
         17:4f:3a:11:cf:51:35:e1:7f:2f:44:30:7f:0a:c3:f9:f9:36:
         ce:4a:f9:7b:95:b6:10:5f:11:a5:57:d2:60:ff:2d:84:db:43:
         93:3b:6d:11:ab:4c:a6:0f:c2:24:d3:12:9a:97:3d:5f:5f:11:
         04:5c:c1:3a:b7:19:5d:81:50:5d:e8:f7:25:54:25:ca:9f:dc:
         c2:4e:c2:e5:78:06:04:1e:ba:0c:e0:2b:d0:fc:5e:a0:8d:da:
         32:01:d9:e2:9d:a5:a1:56:4f:cd:d3:8c:b9:79:29:7e:ff:3a:
         04:c1:47:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:14:36 2025 by rpki-client