Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/S1wWI_uzPZaiQas12w8L3rXDnLA.mft
File:                     S1wWI_uzPZaiQas12w8L3rXDnLA.mft (raw, json)
Hash identifier:          ivJ7ZbG8cOEidmmnRLsFQX2vPaZe/V7UZPf7Rp6tshM=
Subject key identifier:   AF:F3:0E:F2:7B:57:DD:89:07:B7:62:6B:7C:3C:82:7D:0A:C2:65:76
Authority key identifier: 4B:5C:16:23:FB:B3:3D:96:A2:41:AB:35:DB:0F:0B:DE:B5:C3:9C:B0
Certificate issuer:       /CN=A91BD614/serialNumber=4B5C1623FBB33D96A241AB35DB0F0BDEB5C39CB0
Certificate serial:       41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S1wWI_uzPZaiQas12w8L3rXDnLA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/S1wWI_uzPZaiQas12w8L3rXDnLA.mft
Manifest number:          0237
Signing time:             Mon 03 Nov 2025 02:30:07 +0000
Manifest this update:     Mon 03 Nov 2025 02:30:07 +0000
Manifest next update:     Mon 10 Nov 2025 02:30:07 +0000
Files and hashes:         1: S1wWI_uzPZaiQas12w8L3rXDnLA.crl (hash: Nmncmtuzkw/L35KaCdaCndK1KdYKJNaiyixeyCMocj4=)
                          2: FBDB9F4A57F911F0B7986D41C4F9AE02.roa (hash: m14z6Uh4ysiLxJ7zkokYHBwiwVXoe+55LfJcOc7XaG4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/S1wWI_uzPZaiQas12w8L3rXDnLA.crl
                          rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/S1wWI_uzPZaiQas12w8L3rXDnLA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S1wWI_uzPZaiQas12w8L3rXDnLA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 02:30:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65 (0x41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BD614, serialNumber=4B5C1623FBB33D96A241AB35DB0F0BDEB5C39CB0
        Validity
            Not Before: Nov  3 02:30:07 2025 GMT
            Not After : Nov 10 02:30:07 2025 GMT
        Subject: CN=690813af-5abc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:4f:2f:4d:eb:33:6b:ff:09:a1:1e:4d:c8:ad:
                    78:1d:f7:5b:0e:fb:ca:9c:e6:87:09:ad:d1:aa:e9:
                    2c:70:61:ae:63:e5:78:20:80:a0:36:2a:a9:18:fe:
                    1a:06:f7:3e:ea:b9:cf:5c:98:e8:03:a1:0a:c2:35:
                    aa:8a:80:7a:e9:4e:9c:d1:bc:84:20:c9:2e:7e:d7:
                    cb:45:cc:a2:0a:4a:5b:87:d3:f0:99:d9:f1:9f:b5:
                    b0:0d:7d:0d:09:f8:55:5a:ee:b8:2c:3b:ed:dd:99:
                    64:86:4b:5d:5a:6e:f8:b5:f0:7f:8c:94:07:fd:d3:
                    b3:8e:7b:44:0a:ec:69:c8:66:d6:4f:b0:15:62:43:
                    2d:4f:53:dc:f6:2e:ac:aa:f5:55:68:d3:08:12:a2:
                    80:25:20:f2:58:a0:c1:38:46:ca:de:38:c7:f8:5d:
                    be:5a:67:a3:e7:b7:8c:d3:a8:28:58:79:1f:f7:be:
                    7a:5c:be:5b:52:96:8f:28:39:d4:7d:cf:ca:39:de:
                    b8:ba:ea:f6:55:2f:35:a0:76:2d:39:18:2c:92:da:
                    3f:be:d4:c8:c0:9a:a2:a5:3f:73:21:1e:7b:66:e6:
                    38:74:d4:72:44:70:42:d3:0f:fb:a2:97:4d:81:26:
                    b1:25:57:b7:93:ab:7d:01:43:9d:c0:f4:88:27:67:
                    35:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:F3:0E:F2:7B:57:DD:89:07:B7:62:6B:7C:3C:82:7D:0A:C2:65:76
            X509v3 Authority Key Identifier:
                keyid:4B:5C:16:23:FB:B3:3D:96:A2:41:AB:35:DB:0F:0B:DE:B5:C3:9C:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/S1wWI_uzPZaiQas12w8L3rXDnLA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S1wWI_uzPZaiQas12w8L3rXDnLA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/S1wWI_uzPZaiQas12w8L3rXDnLA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:a7:7c:08:6d:d0:90:de:fa:69:88:4a:b5:ee:f3:2a:7c:9a:
         27:f7:de:f0:a1:dc:18:fe:f8:0b:5f:26:bc:93:6b:f8:c0:17:
         43:7e:9d:83:44:92:28:66:70:ec:7b:50:61:82:d4:48:a2:ce:
         d9:2b:0d:b2:70:44:da:bc:6d:7f:16:e4:25:f3:1d:d7:d3:68:
         46:0d:49:c0:01:3a:39:ff:79:ee:45:be:e1:cb:11:15:cb:b4:
         b3:03:bc:9c:98:d4:75:16:42:c9:24:f9:5b:19:19:c7:ff:45:
         65:f4:e4:1f:f2:d6:91:fb:e7:4b:6a:68:c2:19:5a:6d:32:e1:
         86:e4:c1:a0:28:5a:fe:f1:39:14:d2:0e:b8:40:44:1e:77:67:
         c3:d2:19:a4:64:73:c9:a1:b4:67:57:ce:15:6a:fa:ae:99:e1:
         5a:2b:32:89:d6:21:0c:0e:fc:c1:ec:2b:cc:4b:65:cb:f3:98:
         01:98:68:d5:64:65:88:82:30:61:4b:15:67:8c:bf:94:02:c0:
         cf:c5:c8:d6:89:9a:c5:2a:a4:d2:82:2d:16:1c:46:c6:ef:28:
         0f:91:72:c9:44:21:0f:74:4a:4a:c1:94:c2:b8:e7:3e:12:2c:
         62:4c:10:35:94:25:43:fe:e2:6a:57:2b:ad:44:4b:85:34:23:
         69:04:06:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:07:39 2025 by rpki-client