Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.mft
File:                     15aZWndnWcQmQxeAAofr7u-0umo.mft (raw, json)
Hash identifier:          s0uXks7Rs4ubGDc/C3TPErej3jWD9g6qZEvKxApEJtM=
Subject key identifier:   35:D0:9F:D2:42:00:66:33:57:DF:49:FA:AC:C5:FB:97:24:E6:DA:24
Authority key identifier: D7:96:99:5A:77:67:59:C4:26:43:17:80:02:87:EB:EE:EF:B4:BA:6A
Certificate issuer:       /CN=A91C022C/serialNumber=D796995A776759C4264317800287EBEEEFB4BA6A
Certificate serial:       9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15aZWndnWcQmQxeAAofr7u-0umo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.mft
Manifest number:          9A
Signing time:             Mon 03 Nov 2025 06:27:38 +0000
Manifest this update:     Mon 03 Nov 2025 06:27:37 +0000
Manifest next update:     Mon 10 Nov 2025 06:27:37 +0000
Files and hashes:         1: 15aZWndnWcQmQxeAAofr7u-0umo.crl (hash: /2PQYzdQZ8HOi581PNKDSDmeZYGCVl8m2gMOMjNZduk=)
                          2: 90405CE2D5DD11EF99075D78C4F9AE02.roa (hash: hTL1z9/ySOlu0XaviOinYnMnBTyzcwAp4EbODVpERNU=)
                          3: B6CFF1B2D5F911EFB9B1055CC4F9AE02.roa (hash: ZxCbb7cdq/LewtopQIPSnB7gN2Ydt1y4TyGzN7hgTr4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.crl
                          rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15aZWndnWcQmQxeAAofr7u-0umo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 06:27:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 158 (0x9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C022C, serialNumber=D796995A776759C4264317800287EBEEEFB4BA6A
        Validity
            Not Before: Nov  3 06:27:37 2025 GMT
            Not After : Nov 10 06:27:37 2025 GMT
        Subject: CN=69084b5a-4e33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1a:34:3b:ab:28:d4:d0:3d:5d:cd:92:53:1a:
                    8c:88:a3:1f:cf:de:e8:09:7d:b1:dc:30:b3:7b:64:
                    61:70:20:c6:d9:2c:64:f5:e1:f5:54:94:42:86:85:
                    70:32:ac:6c:b8:87:fd:c4:73:1f:e2:1b:f1:de:90:
                    db:ff:e2:a6:36:5f:8d:91:5a:ff:3f:8e:a4:d9:a8:
                    94:e9:58:a2:7b:a6:66:71:69:94:b6:60:25:f8:2d:
                    e0:f8:7c:2d:56:e3:22:78:7b:0e:6d:c9:d9:c2:37:
                    11:7a:63:38:01:fa:9f:0a:e0:4f:88:f2:af:e9:da:
                    4f:fd:8d:40:18:b0:d8:4e:f9:50:a4:b6:19:f6:9c:
                    db:db:93:bb:9a:2c:39:39:e1:47:f7:ff:b3:02:1d:
                    d5:4a:fe:ff:af:f7:4c:51:b6:df:ec:48:2b:18:70:
                    50:b0:30:67:e9:62:80:d0:db:bf:5f:f2:68:a4:b6:
                    d3:58:ba:2a:30:40:10:2a:76:a1:23:90:16:bd:ae:
                    8f:33:5e:3c:53:3a:a4:20:2c:21:4e:1c:45:12:5d:
                    60:87:31:d0:b8:7b:85:b1:32:53:0d:7d:1e:de:e8:
                    96:10:97:28:22:86:ed:5e:12:64:29:3b:17:ba:81:
                    9a:c2:d0:8b:b5:28:7f:65:3b:60:89:5b:8b:f6:81:
                    41:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:D0:9F:D2:42:00:66:33:57:DF:49:FA:AC:C5:FB:97:24:E6:DA:24
            X509v3 Authority Key Identifier:
                keyid:D7:96:99:5A:77:67:59:C4:26:43:17:80:02:87:EB:EE:EF:B4:BA:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15aZWndnWcQmQxeAAofr7u-0umo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:cc:39:9e:01:1d:b4:e2:0e:93:15:35:23:4d:3f:d5:1e:ec:
         6c:6b:65:fc:49:3f:12:ed:4e:db:3d:f2:3b:5e:3c:bf:91:45:
         ab:2a:65:d8:3b:76:74:b2:17:c6:c4:7c:4c:fb:f6:b5:03:69:
         af:06:9b:f9:bc:d7:f8:02:cf:38:f3:84:1b:d7:f6:67:15:8e:
         3a:9c:5a:56:41:e3:8e:35:bd:14:3c:42:5e:71:e4:3a:19:89:
         cc:43:6b:4d:cd:72:9c:80:50:1a:0a:87:e2:23:04:fb:c9:ba:
         cb:44:15:3a:63:18:7d:fc:87:ed:19:44:37:60:d8:dc:04:ab:
         2b:ed:12:38:d4:1e:40:28:4c:aa:3c:61:ea:45:8d:19:69:98:
         db:d7:53:2b:b1:1a:b1:20:c4:e1:9d:ea:cb:db:ee:f7:96:45:
         f7:5b:60:ee:5d:26:da:4c:90:2c:1d:2c:9a:43:26:cb:3a:47:
         9d:3f:66:71:cb:9d:1e:ba:59:f9:24:9b:13:e3:f2:e6:75:a7:
         aa:02:96:3d:6f:bf:6a:80:ca:7c:fd:b2:65:f2:fc:2e:e8:b9:
         6f:4a:c2:a2:87:5a:bc:d7:6e:32:eb:29:57:58:bc:ae:ca:6d:
         d9:3b:6a:3a:ad:95:ab:1c:5d:83:fd:60:d0:e0:d2:51:75:57:
         d6:f8:5b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:20:04 2025 by rpki-client