Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.mft
File:                     jGb5wOZorJCB33ENYELfR0kLCrk.mft (raw, json)
Hash identifier:          Xyyuy5m0kz84c9DNkXiBw2oDadP1FcqOdMxzWNwt7ds=
Subject key identifier:   63:5C:D8:7C:4B:1D:AD:BF:A7:17:DB:22:D4:E9:5E:CB:64:79:92:85
Authority key identifier: 8C:66:F9:C0:E6:68:AC:90:81:DF:71:0D:60:42:DF:47:49:0B:0A:B9
Certificate issuer:       /CN=A91A97F0/serialNumber=8C66F9C0E668AC9081DF710D6042DF47490B0AB9
Certificate serial:       0C83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jGb5wOZorJCB33ENYELfR0kLCrk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.mft
Manifest number:          0C6E
Signing time:             Sun 02 Nov 2025 18:35:55 +0000
Manifest this update:     Sun 02 Nov 2025 18:35:55 +0000
Manifest next update:     Sun 09 Nov 2025 18:35:55 +0000
Files and hashes:         1: jGb5wOZorJCB33ENYELfR0kLCrk.crl (hash: EigQRGEJayZKUJaJifwA9mKGvl1HH7FWJJZi8JaWuAQ=)
                          2: 90576660E19711EFA11C2227C4F9AE02.roa (hash: 4znOjftmOLUP9F0sqZtn3shUbp4rIvm9xbYnsSSpuqA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.crl
                          rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jGb5wOZorJCB33ENYELfR0kLCrk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 18:35:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3203 (0xc83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A97F0, serialNumber=8C66F9C0E668AC9081DF710D6042DF47490B0AB9
        Validity
            Not Before: Nov  2 18:35:55 2025 GMT
            Not After : Nov  9 18:35:55 2025 GMT
        Subject: CN=6907a48b-cef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:93:ef:ae:8e:29:df:5f:81:84:a3:43:ae:43:
                    69:15:e6:99:3f:f8:42:73:f4:1c:7f:b6:ac:ef:4b:
                    79:56:25:5a:fd:e9:be:9e:48:02:bb:ad:11:dc:53:
                    b1:1d:32:4a:60:29:64:ab:31:0f:f7:08:57:e0:33:
                    12:d5:df:3d:36:0c:47:f9:e6:af:d6:cb:78:e1:23:
                    1c:d0:3f:08:cd:d0:c4:ad:40:38:3b:c4:a1:3b:2a:
                    cf:c7:34:31:f7:24:22:d1:f3:d9:d0:68:ad:9a:fa:
                    e3:96:b1:5c:60:b9:7b:1c:51:a7:84:6d:3e:a1:95:
                    42:fc:98:37:07:2d:82:ee:08:0a:49:40:6f:27:8d:
                    75:f8:35:28:81:98:f7:8e:a8:1d:a6:a3:c2:11:85:
                    07:20:24:f0:c2:b7:1e:94:17:eb:c0:83:20:72:9b:
                    b6:b3:c7:1f:bf:d5:b4:64:0d:42:46:da:ec:92:4c:
                    0a:7d:3d:b6:11:39:87:15:d3:2e:6e:7f:61:2d:61:
                    99:e9:3d:fd:ed:8b:b8:a7:5a:59:56:cf:c4:a6:9f:
                    24:b4:c5:35:48:e0:b9:fe:8e:06:a1:16:f5:a3:fa:
                    de:f8:06:d7:53:28:20:0b:10:db:3e:51:3e:55:19:
                    14:f7:ac:9e:22:f4:8e:b2:02:6f:01:d6:23:cf:8b:
                    47:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:5C:D8:7C:4B:1D:AD:BF:A7:17:DB:22:D4:E9:5E:CB:64:79:92:85
            X509v3 Authority Key Identifier:
                keyid:8C:66:F9:C0:E6:68:AC:90:81:DF:71:0D:60:42:DF:47:49:0B:0A:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jGb5wOZorJCB33ENYELfR0kLCrk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:46:63:eb:a5:a7:1a:e9:46:ee:bb:d8:e4:dd:79:92:5f:92:
         1b:1d:12:2b:2d:7d:f1:9f:dc:91:67:98:8c:48:b1:56:d5:db:
         98:0a:be:f9:1f:2d:3c:1a:ba:c5:cc:be:43:87:45:66:71:a5:
         67:a2:5b:92:d6:ce:9f:00:6c:b3:c6:35:a0:d9:42:40:86:96:
         5e:09:76:1b:07:e8:00:d4:d8:41:1f:c5:10:65:26:3c:56:38:
         90:f3:92:e3:b9:0a:f1:8a:46:a6:59:92:28:42:30:d2:32:87:
         cd:ab:1b:f3:27:88:80:cf:2b:17:06:73:a9:68:38:77:3b:29:
         17:fb:c7:e7:63:b4:4c:57:60:36:7a:07:40:04:80:c0:8d:93:
         cd:c0:46:94:92:f6:1c:16:ad:cd:ac:00:c9:31:fb:15:b4:4e:
         47:a2:dc:1a:c1:9b:90:c8:d7:d0:93:a0:b1:34:f8:10:df:53:
         f9:26:2d:e6:ba:08:33:db:6d:e3:45:05:d1:25:91:4c:cf:2b:
         cb:ff:17:56:a4:36:a8:75:88:c9:a2:8d:38:c5:c0:ca:c3:9f:
         2e:6c:65:07:df:b7:c0:61:9a:33:76:39:3d:e2:21:fd:5b:46:
         93:33:f3:cc:c8:e4:e1:7f:33:35:91:80:0c:ad:7d:56:7b:e9:
         c5:ca:f7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:20:04 2025 by rpki-client