Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.mft
File:                     0Ll9wB2J8jqAX75YYe43vwmcP_A.mft (raw, json)
Hash identifier:          MfFbcpnjOF9vL2Ma6wJ3BmCL/0HEBEVb9AOT0CTVaJA=
Subject key identifier:   AB:ED:29:36:CB:D9:16:CB:DD:94:B1:18:6F:E4:AD:75:C4:16:55:90
Authority key identifier: D0:B9:7D:C0:1D:89:F2:3A:80:5F:BE:58:61:EE:37:BF:09:9C:3F:F0
Certificate issuer:       /CN=A91B62BF/serialNumber=D0B97DC01D89F23A805FBE5861EE37BF099C3FF0
Certificate serial:       0C80
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Ll9wB2J8jqAX75YYe43vwmcP_A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.mft
Manifest number:          0C6D
Signing time:             Tue 04 Nov 2025 18:40:50 +0000
Manifest this update:     Tue 04 Nov 2025 18:40:49 +0000
Manifest next update:     Tue 11 Nov 2025 18:40:49 +0000
Files and hashes:         1: 0Ll9wB2J8jqAX75YYe43vwmcP_A.crl (hash: dOcoYFe/x6DAGMA6zeOVK1z+fD3cBGyMZbXB+C2nHlI=)
                          2: 498ED6046FD011EDA007D478C4F9AE02.roa (hash: EXipC6OYrG4xeoR92F5aiQdIl63tLIL8qGG+4ZrC6cg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.crl
                          rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Ll9wB2J8jqAX75YYe43vwmcP_A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 18:40:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3200 (0xc80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B62BF, serialNumber=D0B97DC01D89F23A805FBE5861EE37BF099C3FF0
        Validity
            Not Before: Nov  4 18:40:49 2025 GMT
            Not After : Nov 11 18:40:49 2025 GMT
        Subject: CN=690a48b1-3575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:22:63:48:99:84:4b:36:a2:d4:94:f7:69:0d:
                    bd:a8:4a:e1:f2:15:27:b5:67:8a:3a:0f:24:29:4f:
                    2e:8b:8d:93:e5:c6:03:b2:ad:1b:a1:43:d0:cd:c1:
                    42:8c:68:af:e2:67:a0:6f:1d:6b:fe:1f:c3:29:16:
                    c6:a3:a7:b5:e2:fb:ac:6e:e7:01:40:05:85:fb:b7:
                    d9:f8:f8:68:f4:91:35:d7:7b:9d:05:c6:86:7d:f5:
                    0a:0f:a3:ce:79:87:c3:37:23:92:4f:90:b1:72:a9:
                    82:a0:67:9e:3f:22:b6:50:55:a6:c0:3b:ff:95:87:
                    61:08:ce:1e:b6:e2:41:65:4b:3f:42:ab:09:60:af:
                    3d:12:32:8b:7a:73:a6:72:7b:f8:fd:bc:fb:a5:4f:
                    f7:6f:4e:e3:22:cb:f2:45:b3:51:1f:23:cb:28:f9:
                    94:f4:4f:71:0d:00:8a:3e:9a:a2:a1:ba:fa:b9:5b:
                    bd:cf:b5:01:2d:37:2c:48:93:8f:60:05:2b:ae:53:
                    b0:df:f3:38:a6:70:55:9d:fa:f7:1a:4e:39:f4:f8:
                    40:03:2a:ef:48:d1:b1:13:30:23:b5:00:9b:5d:77:
                    37:68:44:7a:ec:d1:ca:d2:88:4c:3e:8c:2d:95:78:
                    3e:0c:98:f8:1f:c6:9c:55:04:13:8e:7b:66:82:2d:
                    05:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:ED:29:36:CB:D9:16:CB:DD:94:B1:18:6F:E4:AD:75:C4:16:55:90
            X509v3 Authority Key Identifier:
                keyid:D0:B9:7D:C0:1D:89:F2:3A:80:5F:BE:58:61:EE:37:BF:09:9C:3F:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Ll9wB2J8jqAX75YYe43vwmcP_A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:2a:74:9f:8b:4e:f7:d3:59:4d:b9:9c:74:38:5c:e4:0b:c7:
         af:5c:04:a5:29:9f:3d:ed:6d:29:4f:32:80:4a:61:ee:07:d4:
         54:19:6a:8d:91:93:45:b2:db:48:29:c6:30:98:3d:98:26:2a:
         f7:40:43:1d:ca:93:f0:d3:59:42:f8:d9:48:a0:f9:8b:84:d5:
         39:a9:ab:9a:81:be:e0:ff:4d:34:37:f7:df:8e:ae:51:0f:a2:
         2a:b7:42:e2:02:82:11:ae:54:45:95:3f:77:b8:07:fa:87:5e:
         a1:d6:a9:f2:30:1f:05:f9:eb:16:a7:89:5e:c0:ff:04:4d:3b:
         6c:d8:d4:93:54:a9:66:50:59:98:fe:69:3b:62:1a:0a:57:9e:
         20:cd:c3:9d:31:a1:e8:b3:89:97:92:76:84:6e:dd:45:c8:19:
         e7:42:f4:8d:69:d9:4d:fe:e4:e5:2c:b4:9d:66:20:82:dd:0d:
         ce:e6:61:5c:e2:21:2b:00:bd:86:bd:cb:5f:23:32:b5:89:02:
         fd:7c:5f:fb:fe:eb:8c:73:94:38:bd:cc:56:85:49:8f:e1:7b:
         dd:32:fb:a3:01:f7:a7:a1:03:32:09:9d:0d:fc:81:2e:c7:e4:
         96:19:37:69:32:26:cd:d0:f8:18:1a:8e:d1:88:79:63:1c:63:
         35:53:c9:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:10:12 2025 by rpki-client