Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.mft
File:                     9ssujrx6iSv6FcRHs5gkoFjHVa4.mft (raw, json)
Hash identifier:          EoYBediR+FFIU2mHw//ioeUozV3fKwFPLVJkr690E0M=
Subject key identifier:   3A:6A:0F:95:49:DD:87:19:BD:D4:4C:DC:EE:84:A0:3E:C1:77:FB:60
Authority key identifier: F6:CB:2E:8E:BC:7A:89:2B:FA:15:C4:47:B3:98:24:A0:58:C7:55:AE
Certificate issuer:       /CN=A91B9EF3/serialNumber=F6CB2E8EBC7A892BFA15C447B39824A058C755AE
Certificate serial:       0B3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ssujrx6iSv6FcRHs5gkoFjHVa4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.mft
Manifest number:          0B31
Signing time:             Sun 02 Nov 2025 19:14:31 +0000
Manifest this update:     Sun 02 Nov 2025 19:14:31 +0000
Manifest next update:     Sun 09 Nov 2025 19:14:31 +0000
Files and hashes:         1: 9ssujrx6iSv6FcRHs5gkoFjHVa4.crl (hash: HFYQm9QwCP+wvpzUg70ffmP5H3HS04LbiNCvXYPxZ3o=)
                          2: 2902D956492411EAAC15FB67C4F9AE02.roa (hash: ndMYLuFm1npGXhTqyafB2ux+qylKnhbABDCIs0+SmbQ=)
                          3: 82C388B8492511EAB59F4F6EC4F9AE02.roa (hash: DJ5UPh4W8eU78pV9FNPBPxM5RGyD7+r3WrHHI7kvMUo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.crl
                          rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ssujrx6iSv6FcRHs5gkoFjHVa4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 19:14:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2879 (0xb3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9EF3, serialNumber=F6CB2E8EBC7A892BFA15C447B39824A058C755AE
        Validity
            Not Before: Nov  2 19:14:31 2025 GMT
            Not After : Nov  9 19:14:31 2025 GMT
        Subject: CN=6907ad97-df22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f4:6a:36:89:58:d6:6a:7b:e0:20:33:61:df:
                    ef:c6:6b:b9:38:6d:f5:8c:d4:a3:bc:12:a3:bc:48:
                    e4:30:61:5e:8d:43:31:03:ac:17:86:cd:aa:87:21:
                    24:8f:2a:45:50:ae:38:ee:5a:7b:6b:d2:46:d4:43:
                    2b:2a:97:0e:42:ef:a6:5d:b2:9c:4c:06:d9:b5:a7:
                    9f:83:6d:c2:8e:34:16:a8:60:0a:58:4e:58:d4:65:
                    e9:00:63:9c:c3:da:7c:77:5d:89:b9:c5:db:3f:14:
                    c1:53:c6:09:3b:57:3d:ba:c1:2c:f9:54:88:18:d7:
                    b5:25:a2:d5:99:6e:f7:8c:6c:b8:db:6a:c0:84:3f:
                    67:17:97:1f:11:a7:72:3d:57:b3:ca:55:b6:62:bf:
                    b5:11:b4:b8:48:91:b2:6f:52:0f:5c:2a:8c:40:32:
                    36:c0:c9:94:e2:04:67:29:38:c2:47:60:76:42:4c:
                    af:e9:f5:2f:9d:90:1e:10:34:e1:54:3b:b3:77:46:
                    d7:52:12:64:f4:26:8e:d3:02:16:d0:6d:e7:d1:8d:
                    db:fc:37:6c:95:2e:f6:77:b9:9e:29:0e:23:ff:2d:
                    52:b2:3f:ee:fb:dd:c2:f3:95:76:31:40:d9:5c:da:
                    9e:87:ff:27:71:9e:09:72:32:67:d5:35:2b:98:14:
                    fe:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:6A:0F:95:49:DD:87:19:BD:D4:4C:DC:EE:84:A0:3E:C1:77:FB:60
            X509v3 Authority Key Identifier:
                keyid:F6:CB:2E:8E:BC:7A:89:2B:FA:15:C4:47:B3:98:24:A0:58:C7:55:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ssujrx6iSv6FcRHs5gkoFjHVa4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:97:5c:f1:07:d1:69:e4:75:31:25:10:70:ce:a6:8f:08:1a:
         8c:03:54:83:be:c0:a3:e4:5b:ef:c6:5c:c8:56:ae:2b:2f:9d:
         e9:61:2d:83:32:84:c8:c6:4c:5a:be:84:6d:28:32:aa:4e:e7:
         d2:43:95:72:8c:c9:b0:27:48:b0:bf:42:c5:e0:45:b8:8d:22:
         21:41:bd:ae:db:33:2a:36:d8:de:37:ca:e0:92:97:23:9e:64:
         0d:67:9a:7d:a2:77:7b:ec:ea:ab:b2:d4:e7:a3:79:5c:f7:54:
         c9:e2:25:7d:0b:ed:a3:c7:2a:0d:b2:01:d6:49:0c:ed:01:80:
         a5:35:02:99:0a:7c:ba:e5:27:4b:d6:8e:67:27:41:c7:2e:e9:
         6d:66:18:c3:fc:29:41:0e:d6:6b:ea:4a:87:32:c3:1e:d4:eb:
         fc:f9:48:da:0c:52:01:d4:11:ec:b7:86:a8:76:99:b4:2b:2b:
         84:e0:d8:ad:05:72:9c:f0:e8:17:4c:30:96:4f:de:68:7a:57:
         d9:68:1f:ca:6e:be:d6:ad:f0:3a:76:13:5a:55:7c:d1:d9:bb:
         3c:ed:a7:ca:04:38:4e:ec:53:a6:0c:5f:69:50:8d:6d:c8:54:
         56:7a:d3:b3:2b:df:58:49:04:bc:b1:f5:95:25:db:52:5b:a2:
         48:5d:b8:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:18:09 2025 by rpki-client