Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.mft
File:                     n60jAjoVW9JbIkKAY6wZeHznwr4.mft (raw, json)
Hash identifier:          KdP8HNa6HRdfQWC2SsiRIIQgTBP1+6Yun6QCtSzvUZQ=
Subject key identifier:   A1:37:6D:90:BC:F6:49:69:25:4F:59:5C:35:38:02:A6:A0:F6:2E:E4
Authority key identifier: 9F:AD:23:02:3A:15:5B:D2:5B:22:42:80:63:AC:19:78:7C:E7:C2:BE
Certificate issuer:       /CN=A91B53AF/serialNumber=9FAD23023A155BD25B22428063AC19787CE7C2BE
Certificate serial:       07B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n60jAjoVW9JbIkKAY6wZeHznwr4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.mft
Manifest number:          07B1
Signing time:             Tue 04 Nov 2025 21:27:49 +0000
Manifest this update:     Tue 04 Nov 2025 21:27:48 +0000
Manifest next update:     Tue 11 Nov 2025 21:27:48 +0000
Files and hashes:         1: n60jAjoVW9JbIkKAY6wZeHznwr4.crl (hash: wkm8F4A8tECFrYrWVH/bZlPcX0gAOXMv059uTSSNNH0=)
                          2: 5E802AC41DB911EB90A5461AC4F9AE02.roa (hash: 41aqCCC0CIJrASUZjn/UMATRac/pjiORpElfAzdM3kk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.crl
                          rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n60jAjoVW9JbIkKAY6wZeHznwr4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 21:27:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1975 (0x7b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B53AF, serialNumber=9FAD23023A155BD25B22428063AC19787CE7C2BE
        Validity
            Not Before: Nov  4 21:27:48 2025 GMT
            Not After : Nov 11 21:27:48 2025 GMT
        Subject: CN=690a6fd4-f664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:47:1f:bd:b6:f0:d8:6e:67:d2:76:a0:2f:7b:
                    77:e8:4a:73:18:d2:c6:4c:f1:ab:f7:f1:0c:50:53:
                    b3:e8:60:70:1c:44:d1:79:62:24:29:6b:6f:de:eb:
                    49:50:75:a9:fa:df:b8:25:d6:48:b2:94:cb:39:ef:
                    6c:ef:c7:94:0a:93:66:e7:87:4c:de:14:12:0d:3c:
                    fe:1a:c7:c2:99:10:d4:ef:64:0d:4c:b9:0f:4f:92:
                    c1:fd:9f:40:55:3e:8a:bb:e8:06:da:78:5d:28:fa:
                    72:db:1c:7d:4f:09:30:81:71:a0:56:d1:3f:0c:b2:
                    7d:80:a8:58:1b:ad:52:b6:64:98:b4:55:c2:1c:f3:
                    63:0d:89:fa:74:c3:6e:03:13:a7:3e:40:66:d9:fe:
                    33:a4:1c:c7:84:b9:66:41:f2:3d:4c:aa:26:ca:7c:
                    50:88:7d:e1:d6:16:88:8c:27:e9:35:20:5e:96:06:
                    7f:2d:dd:2e:3a:52:3a:c3:46:47:89:6c:a5:3e:32:
                    ab:49:95:5b:d8:90:cc:00:59:df:25:cb:53:c4:fa:
                    d2:84:46:55:da:f8:bb:9a:87:da:b7:8a:44:a2:99:
                    62:c5:04:74:71:c8:7d:be:12:08:cd:38:3b:27:04:
                    96:a3:82:38:e6:b0:7f:40:48:c6:a8:a7:d9:52:a3:
                    de:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:37:6D:90:BC:F6:49:69:25:4F:59:5C:35:38:02:A6:A0:F6:2E:E4
            X509v3 Authority Key Identifier:
                keyid:9F:AD:23:02:3A:15:5B:D2:5B:22:42:80:63:AC:19:78:7C:E7:C2:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n60jAjoVW9JbIkKAY6wZeHznwr4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:34:e8:a9:49:a2:ea:c2:65:0b:7a:78:80:b8:9d:62:34:ff:
         20:39:db:5e:6f:cb:79:97:90:3e:42:cb:54:0f:98:76:7f:3f:
         ae:56:2c:ff:59:e7:e2:f0:dc:37:b6:b0:51:e6:0f:cc:93:ab:
         a4:17:7a:70:0c:7c:ac:2d:0e:bc:dc:13:b7:44:4b:06:93:8b:
         44:12:ca:27:01:21:08:fe:24:8d:48:11:85:20:1c:b2:47:08:
         4d:5e:f1:18:08:9a:6b:3a:0c:43:b1:b6:a3:6d:a9:2f:98:aa:
         df:4b:49:58:db:ab:70:3a:e4:1d:c5:67:d4:12:bf:50:24:15:
         4f:3e:3c:27:1c:8b:a2:7a:54:71:6d:17:17:5d:43:6b:c4:f5:
         58:44:30:e9:ca:ae:93:e6:0d:4c:27:20:86:c1:bb:60:15:3c:
         d1:37:89:bf:42:0d:e2:8d:bd:3f:08:8d:98:44:ac:b1:80:3b:
         41:e3:ea:41:d6:4c:65:00:02:50:99:2c:69:94:67:e1:23:e0:
         ff:20:9d:72:48:d3:e3:9f:42:3f:51:3b:33:21:42:08:a0:43:
         c4:74:08:33:92:cc:18:10:ea:70:96:cf:1a:ad:f9:df:d3:35:
         6f:61:2b:fc:b0:fd:46:9d:64:cd:a7:45:f1:39:d6:33:bc:6d:
         30:df:a0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:09:18 2025 by rpki-client