Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.mft
File:                     AwUYVzXgl--zaoYGU7JTq-n-EVw.mft (raw, json)
Hash identifier:          Tw77K2iy/5he7+noN9Col3uccs5WV3Wftph7qNzrG8E=
Subject key identifier:   76:0B:47:F9:E1:E9:AF:DF:AD:3B:D1:29:CA:69:5F:54:73:AD:C3:17
Authority key identifier: 03:05:18:57:35:E0:97:EF:B3:6A:86:06:53:B2:53:AB:E9:FE:11:5C
Certificate issuer:       /CN=A91AEE40/serialNumber=0305185735E097EFB36A860653B253ABE9FE115C
Certificate serial:       02D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwUYVzXgl--zaoYGU7JTq-n-EVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.mft
Manifest number:          02C9
Signing time:             Mon 03 Nov 2025 01:22:50 +0000
Manifest this update:     Mon 03 Nov 2025 01:22:49 +0000
Manifest next update:     Mon 10 Nov 2025 01:22:49 +0000
Files and hashes:         1: AwUYVzXgl--zaoYGU7JTq-n-EVw.crl (hash: 7UlkeUr2ws4PSr/98eRjgEyEISPSGfz4sa4BKbOR/z8=)
                          2: 411831E23FC011F097A38852C4F9AE02.roa (hash: Z3YuqjlFc86KvX6uGgqRo2M31ge97SaPeoOB1KbRkKk=)
                          3: 485DCAA8418111F093EDEF69C4F9AE02.roa (hash: 98L2p4S3Z9XBKGOrvf/7lu6oUXBZwojag9kKA7jW8zY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.crl
                          rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwUYVzXgl--zaoYGU7JTq-n-EVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 01:22:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 723 (0x2d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AEE40, serialNumber=0305185735E097EFB36A860653B253ABE9FE115C
        Validity
            Not Before: Nov  3 01:22:49 2025 GMT
            Not After : Nov 10 01:22:49 2025 GMT
        Subject: CN=690803ea-e2ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:68:31:aa:85:8e:5f:a6:06:69:de:a4:01:1f:
                    6f:c2:43:42:25:a7:87:14:fc:f8:0d:36:9f:80:2a:
                    0e:da:cc:26:e9:f3:68:a9:27:41:4f:e3:6b:83:8a:
                    29:83:17:31:65:6a:38:70:4e:23:02:4a:13:e4:5c:
                    02:4d:ce:47:a1:0c:fb:29:35:4f:60:a2:8b:44:1f:
                    bd:81:d7:e1:b9:a3:0e:b0:02:98:6c:c6:58:a9:f5:
                    30:2d:0f:eb:d3:1f:57:f1:52:0a:f6:f9:6f:8e:dd:
                    a1:fe:2f:0c:74:5c:97:7b:da:d0:d2:28:61:9d:3c:
                    0d:de:07:a0:25:e9:3a:4b:94:43:75:cc:0b:ad:65:
                    e8:e7:cf:ef:1a:66:ff:90:7f:ea:3b:de:70:94:67:
                    8b:db:24:bb:a2:22:77:cc:9d:75:11:58:d4:8a:ee:
                    a7:fe:c0:05:ba:50:92:f4:a5:cf:39:6a:b0:09:4e:
                    68:8a:fa:76:31:7c:81:d8:26:af:49:81:23:5f:41:
                    c7:69:ed:1c:2c:23:db:80:c7:88:16:93:d3:35:10:
                    62:b1:31:83:87:c4:d5:0c:27:fd:39:81:cc:61:e5:
                    67:0c:7f:b3:67:2d:41:9a:d7:b3:79:87:93:5a:30:
                    da:6c:5d:5b:4b:72:f6:c5:9c:01:ae:e9:ea:6c:98:
                    30:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:0B:47:F9:E1:E9:AF:DF:AD:3B:D1:29:CA:69:5F:54:73:AD:C3:17
            X509v3 Authority Key Identifier:
                keyid:03:05:18:57:35:E0:97:EF:B3:6A:86:06:53:B2:53:AB:E9:FE:11:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwUYVzXgl--zaoYGU7JTq-n-EVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:1b:57:98:98:e3:90:5e:7e:46:0b:88:3d:97:36:ac:d1:8a:
         1d:20:2e:07:dd:e3:4e:48:c7:b4:c2:8c:e0:c7:2e:dd:12:3c:
         99:cb:2c:fb:1c:ba:ca:ee:0b:c9:c7:85:91:ae:f7:3b:55:b7:
         27:f2:3b:3a:ad:47:18:3f:39:0b:55:32:1a:63:71:e2:24:30:
         35:72:5a:10:b3:e9:55:ef:c4:c5:bd:8f:a3:31:da:8b:41:05:
         92:25:a8:1d:bb:7a:f9:0a:eb:a4:01:93:fd:d3:7d:7a:5e:2d:
         07:6b:a7:4e:6d:f6:a4:21:52:76:da:b2:71:93:d7:82:26:28:
         e8:d5:be:36:20:19:dc:42:8c:85:98:14:c4:a3:f2:21:69:47:
         09:aa:b6:24:d6:51:c9:bf:ba:05:90:75:eb:11:02:20:3b:09:
         e4:04:ec:f8:ef:ba:87:0a:28:4b:fb:36:da:12:74:09:75:09:
         e3:7c:67:08:b0:e1:55:e2:69:60:f8:dd:36:e9:e4:fb:b7:e5:
         6b:51:b1:05:85:c4:86:b5:0d:11:34:8b:73:97:11:b9:fe:12:
         67:8b:e9:f2:33:e4:fc:32:c6:80:04:9d:1f:08:fe:83:53:b9:
         0d:db:e2:0c:02:f6:85:c3:b6:c1:3a:6b:84:59:a7:40:a3:6a:
         62:9d:0c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:17:04 2025 by rpki-client