Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.mft
File:                     Wr7NjqrTfqV665OfLAsUKXSEH4o.mft (raw, json)
Hash identifier:          h/18fpJ84LtyUTGUYKAwsLc0ihB+7KNoRPmrfBykyY4=
Subject key identifier:   7C:0E:38:99:7B:C8:04:84:E7:AA:F8:8A:87:FB:EC:6F:8B:67:29:06
Authority key identifier: 5A:BE:CD:8E:AA:D3:7E:A5:7A:EB:93:9F:2C:0B:14:29:74:84:1F:8A
Certificate issuer:       /CN=A91A5A82/serialNumber=5ABECD8EAAD37EA57AEB939F2C0B142974841F8A
Certificate serial:       73
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr7NjqrTfqV665OfLAsUKXSEH4o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.mft
Manifest number:          72
Signing time:             Mon 03 Nov 2025 06:53:03 +0000
Manifest this update:     Mon 03 Nov 2025 06:53:03 +0000
Manifest next update:     Mon 10 Nov 2025 06:53:03 +0000
Files and hashes:         1: Wr7NjqrTfqV665OfLAsUKXSEH4o.crl (hash: T1GM3rG5T74kBI7G3GHrME3mlEWqx2cowlSHWu9kQDQ=)
                          2: D0B32912090911F0A5348F26C4F9AE02.roa (hash: uW1VF7Kvr3qqb0xY8fd0nDeotf3CK4ccwfdt9+YehUk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.crl
                          rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr7NjqrTfqV665OfLAsUKXSEH4o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 06:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115 (0x73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5A82, serialNumber=5ABECD8EAAD37EA57AEB939F2C0B142974841F8A
        Validity
            Not Before: Nov  3 06:53:03 2025 GMT
            Not After : Nov 10 06:53:03 2025 GMT
        Subject: CN=6908514f-a5dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:53:69:93:7d:b9:06:d6:fc:6a:3d:0e:35:7f:
                    1b:57:d9:d4:a5:da:d3:9e:f7:da:e7:b1:75:49:28:
                    07:86:5b:ca:49:bd:e7:20:1a:98:a8:17:bd:f9:a7:
                    42:ea:5f:ea:22:00:17:1b:1e:53:2d:1f:65:3e:88:
                    0a:5c:8f:21:7d:23:a0:a0:9f:e1:7e:46:22:4f:3a:
                    c8:02:da:bd:7a:c2:0a:ae:e7:2a:54:92:24:c8:ab:
                    19:f1:2c:57:9e:f6:d3:2b:a5:fc:37:27:b8:f9:21:
                    3d:b2:f3:25:5d:6b:3f:a6:fe:34:8d:d8:5e:90:32:
                    53:61:47:3c:b8:7a:cb:47:08:5b:d6:b5:19:c1:d3:
                    44:4a:16:6d:e3:16:15:e3:3c:e6:41:c6:a8:47:23:
                    17:be:f0:88:cc:66:62:f5:de:f0:71:8a:c0:af:0e:
                    3c:89:26:e5:bf:62:a8:9c:fd:06:b2:96:1a:db:39:
                    d4:eb:7c:bd:eb:57:85:f2:2a:21:ad:11:fe:37:4f:
                    cb:9f:76:34:e8:a5:a1:82:81:02:47:93:18:cc:da:
                    e0:ed:3d:ff:76:f6:88:31:17:a9:9a:66:ab:39:1d:
                    8a:a6:3e:76:f2:2d:59:7c:d8:9e:64:21:23:f9:89:
                    51:ce:1f:a0:b0:eb:c5:d2:02:4d:b1:04:04:78:f5:
                    cf:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:0E:38:99:7B:C8:04:84:E7:AA:F8:8A:87:FB:EC:6F:8B:67:29:06
            X509v3 Authority Key Identifier:
                keyid:5A:BE:CD:8E:AA:D3:7E:A5:7A:EB:93:9F:2C:0B:14:29:74:84:1F:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr7NjqrTfqV665OfLAsUKXSEH4o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:ad:23:81:68:2b:03:c0:01:2d:14:b5:55:72:ce:c0:cc:be:
         46:da:5d:2a:0c:70:27:8d:23:b6:6d:f3:91:5a:6b:bb:e5:bb:
         93:59:e6:44:d2:77:ed:78:29:92:3a:6a:66:56:22:70:ba:ec:
         b2:fe:e5:dd:74:92:7c:b7:0f:78:9a:ad:82:18:f6:48:01:fa:
         ee:05:51:3b:e3:b7:5b:fa:06:3a:14:67:88:ee:3e:d6:61:d9:
         e0:bc:79:ed:1d:f3:2c:15:4d:07:02:60:0c:27:9f:99:17:36:
         88:d9:26:41:2c:43:d6:35:d9:05:8d:d9:9d:30:7f:42:7e:bc:
         dc:68:35:b5:5c:88:99:59:10:d5:66:ea:cd:80:40:a6:f7:3b:
         23:86:64:a0:7f:56:23:88:c9:67:79:6f:ca:d9:38:53:f4:87:
         ee:41:f9:49:8d:25:a6:16:61:55:60:bf:5d:6a:13:af:49:2a:
         fe:75:83:c8:0c:99:b6:c8:c0:de:de:99:fd:8d:60:40:34:c1:
         b4:ef:df:76:0c:bf:15:38:bc:21:a5:c2:73:3a:44:b7:fd:76:
         57:c6:b3:8f:1d:42:23:1b:b0:32:78:16:3c:3b:8d:02:e5:26:
         e5:31:dc:82:19:78:96:38:3c:2a:c6:09:8e:ff:b0:8b:68:95:
         af:09:01:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:19:17 2025 by rpki-client