Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.mft
File:                     X5M9MPJH0EGf8L4GA-FtXCfEBAc.mft (raw, json)
Hash identifier:          uFs4rM2td/2DU1JmIi8hQmYD7oqNwoQrzkFL5hO/U/w=
Subject key identifier:   19:71:1E:55:32:23:8C:EF:39:72:C5:94:87:D2:86:D8:93:5E:4F:D2
Authority key identifier: 5F:93:3D:30:F2:47:D0:41:9F:F0:BE:06:03:E1:6D:5C:27:C4:04:07
Certificate issuer:       /CN=A91A6B8E/serialNumber=5F933D30F247D0419FF0BE0603E16D5C27C40407
Certificate serial:       0795
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5M9MPJH0EGf8L4GA-FtXCfEBAc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.mft
Manifest number:          078B
Signing time:             Sun 02 Nov 2025 21:30:21 +0000
Manifest this update:     Sun 02 Nov 2025 21:30:21 +0000
Manifest next update:     Sun 09 Nov 2025 21:30:21 +0000
Files and hashes:         1: X5M9MPJH0EGf8L4GA-FtXCfEBAc.crl (hash: Hy2h5xoXPO0q8L6IIEWTzG34t7vrlKBydp7HYMRYKgM=)
                          2: 4D12DEAE2E9311EBB9FC5259C4F9AE02.roa (hash: 7nAwvijUmnaIMOxevk905gWR2HOoFSC7V0ZEJzsRaVE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.crl
                          rsync://rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5M9MPJH0EGf8L4GA-FtXCfEBAc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 21:30:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1941 (0x795)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6B8E, serialNumber=5F933D30F247D0419FF0BE0603E16D5C27C40407
        Validity
            Not Before: Nov  2 21:30:21 2025 GMT
            Not After : Nov  9 21:30:21 2025 GMT
        Subject: CN=6907cd6d-ed8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:c3:68:55:11:6c:b9:42:7c:a5:14:d1:b0:24:
                    9f:8f:b3:21:db:67:78:a7:6a:9b:e1:7d:d6:35:6b:
                    ef:90:63:5e:0f:1c:3c:33:3c:75:2e:a4:4a:e4:4b:
                    29:00:73:a1:d3:f5:e0:d2:d9:8f:bc:33:62:90:b4:
                    90:b0:ca:79:19:94:dc:2d:8b:03:93:fe:42:c8:81:
                    02:c6:7f:33:ba:80:88:5a:1e:60:df:e4:c7:09:1e:
                    97:22:e3:70:e0:45:24:7e:41:8e:9d:29:f5:02:dc:
                    5e:37:0d:b3:84:89:47:df:4a:f6:a0:83:c4:b6:8b:
                    10:a5:82:b6:f2:4c:30:bd:01:a7:a9:f3:ed:4d:53:
                    c1:b0:db:1c:18:7e:6b:85:a6:94:64:7f:fc:33:12:
                    a0:61:a3:97:a3:c4:2e:38:2c:99:a7:8e:63:f0:96:
                    5e:e0:08:a1:39:1b:cc:76:70:7c:fe:6e:0e:bc:85:
                    51:11:e7:51:1c:c7:fe:57:e7:71:0b:c9:5c:94:aa:
                    0d:c5:17:58:70:e9:8e:60:99:b0:08:c3:b9:8c:03:
                    92:49:3d:b3:78:bd:13:21:99:53:a8:e8:88:08:8a:
                    c9:bf:1b:a2:57:02:9e:79:3d:bb:c3:52:6f:b5:0b:
                    ed:49:b7:a9:c5:84:f6:52:2d:68:42:ad:21:0d:5b:
                    0e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:71:1E:55:32:23:8C:EF:39:72:C5:94:87:D2:86:D8:93:5E:4F:D2
            X509v3 Authority Key Identifier:
                keyid:5F:93:3D:30:F2:47:D0:41:9F:F0:BE:06:03:E1:6D:5C:27:C4:04:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5M9MPJH0EGf8L4GA-FtXCfEBAc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:06:31:dd:fc:4c:10:e0:5c:47:2c:1e:68:47:00:86:76:95:
         77:0b:09:c7:e9:54:6f:13:eb:24:9f:65:47:2f:cb:e9:ad:24:
         0a:b4:33:e9:eb:c2:1a:ab:f1:6b:a0:f6:75:ad:4d:84:a3:7b:
         29:8c:4d:64:7f:fd:79:b0:84:c5:ff:bf:fa:1c:67:08:7b:2d:
         b8:96:50:72:3b:75:4e:da:38:f6:f9:7b:8f:83:70:9d:ab:43:
         39:d2:e3:87:e8:9d:2a:5f:39:9c:b8:36:59:58:2d:54:76:06:
         59:2f:d8:4b:60:82:5b:fe:76:8e:d8:79:3f:e9:a5:a8:b4:fd:
         64:1a:4a:16:d6:b1:25:3f:89:b5:a7:18:40:c1:b3:82:4e:d9:
         25:6a:ae:27:7e:c4:4f:e9:98:20:cb:e9:d2:45:63:70:6a:e8:
         dd:30:0e:4e:9d:dc:70:64:ae:96:d4:76:7e:a9:e4:e2:9f:6c:
         57:ef:b1:db:d7:d3:70:2e:d4:6f:45:67:11:50:2f:dc:3f:16:
         5c:8f:64:64:3b:73:81:cf:a3:1b:58:44:98:35:47:d5:4d:88:
         f9:d3:be:75:1c:54:3e:0e:84:3a:12:fe:1a:fa:ff:ed:3f:f1:
         0a:79:7a:fd:8f:55:a6:dc:f6:7c:c2:9a:84:ec:80:3f:49:d8:
         16:f6:71:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:07:03 2025 by rpki-client