Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.mft
File:                     A4qG82KyVX-Uvncu4MX9MYRf4mM.mft (raw, json)
Hash identifier:          AcjCi6qimGU3/dsZ45iHna1288a//eIwfARQ36VxC5s=
Subject key identifier:   FC:18:FA:20:B8:C8:D7:B7:52:EB:21:60:F3:6B:03:8B:15:A1:BE:8E
Authority key identifier: 03:8A:86:F3:62:B2:55:7F:94:BE:77:2E:E0:C5:FD:31:84:5F:E2:63
Certificate issuer:       /CN=A91C4003/serialNumber=038A86F362B2557F94BE772EE0C5FD31845FE263
Certificate serial:       0C43
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4qG82KyVX-Uvncu4MX9MYRf4mM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.mft
Manifest number:          0C2E
Signing time:             Tue 04 Nov 2025 18:48:43 +0000
Manifest this update:     Tue 04 Nov 2025 18:48:42 +0000
Manifest next update:     Tue 11 Nov 2025 18:48:42 +0000
Files and hashes:         1: A4qG82KyVX-Uvncu4MX9MYRf4mM.crl (hash: HxBHvQDjLOElz9dBLHHA767xU09hHzZ85boTMjTE/xA=)
                          2: 711115241AD911EA97EF1C30C4F9AE02.roa (hash: If6A0dtzlgPVB4CBNXQ4TMiF5xMEzeKvLljq5QFI3bk=)
                          3: 398848523A0011EFB7007939C4F9AE02.roa (hash: Zlhwy82VHpRYLPT4enDdRaV9Hjue+wnu8x2KNE0lTzk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.crl
                          rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4qG82KyVX-Uvncu4MX9MYRf4mM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 18:48:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3139 (0xc43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C4003, serialNumber=038A86F362B2557F94BE772EE0C5FD31845FE263
        Validity
            Not Before: Nov  4 18:48:42 2025 GMT
            Not After : Nov 11 18:48:42 2025 GMT
        Subject: CN=690a4a8a-a1ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:66:f2:ad:7b:2d:fa:f7:b6:f7:9e:e4:0f:7e:
                    30:bc:54:c5:b8:43:8a:9b:b5:14:3b:b0:90:36:be:
                    58:2b:2d:38:6d:07:e0:cc:b0:85:05:39:93:b5:f7:
                    34:b6:30:5c:33:3c:75:c2:6b:a9:b8:ac:d2:35:b1:
                    71:8d:e9:61:8a:6c:47:dd:81:9c:c3:0d:bf:54:ff:
                    3b:b0:f5:11:d5:49:4d:3d:f7:e5:52:69:92:bd:b2:
                    d3:f8:a0:95:aa:75:46:2d:f7:42:2e:77:da:91:fb:
                    d7:04:3d:3b:a9:76:5f:22:89:ac:39:fd:72:c6:85:
                    c2:ab:f6:2d:a7:09:fb:17:61:00:69:ed:c7:45:c9:
                    20:ec:89:48:68:31:6d:89:a4:7a:1a:82:0b:8e:1e:
                    10:9f:5d:e7:62:14:9e:f8:54:96:a8:e8:31:34:a4:
                    19:b1:c4:2b:c4:c9:0e:17:79:56:4a:ea:08:d1:85:
                    41:fd:3b:c8:ec:b2:0a:ad:ac:d2:2e:f6:d0:c8:8b:
                    2a:67:d5:e9:92:61:59:d9:fc:a2:4f:29:4b:52:a4:
                    20:e5:77:f7:c7:ad:39:eb:93:c3:7e:22:e2:fd:47:
                    b0:63:ab:eb:a2:d2:1a:2e:10:d1:cc:ef:f0:8f:8c:
                    60:05:96:2e:d3:81:f8:99:71:ec:e1:6f:0d:59:7f:
                    15:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:18:FA:20:B8:C8:D7:B7:52:EB:21:60:F3:6B:03:8B:15:A1:BE:8E
            X509v3 Authority Key Identifier:
                keyid:03:8A:86:F3:62:B2:55:7F:94:BE:77:2E:E0:C5:FD:31:84:5F:E2:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4qG82KyVX-Uvncu4MX9MYRf4mM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:69:8f:d8:ea:85:db:5b:dc:84:b2:42:d1:d8:6c:e3:6c:63:
         e0:be:79:60:4d:2d:32:81:0a:94:fb:13:55:ff:15:5c:e7:06:
         90:2f:c9:f6:aa:bc:c5:39:78:11:97:31:8c:79:87:7a:97:f3:
         74:7a:86:68:2d:93:93:49:86:9d:ad:24:26:92:b0:a1:79:1b:
         f6:85:62:8a:43:4d:2a:42:dd:0f:d5:a3:81:70:b2:ce:99:db:
         7a:b3:a4:5a:58:e7:07:62:18:35:df:13:e7:d7:45:42:d0:a8:
         ff:f7:5e:57:f7:cd:91:be:87:91:cc:ce:3b:be:cc:b0:a3:23:
         fe:56:60:20:24:06:0f:f2:cd:3a:b3:c8:34:47:38:ff:f9:ea:
         bf:27:f7:20:19:c1:25:29:fe:5a:ca:08:ee:d9:14:73:61:d2:
         61:4d:5a:8b:6b:d6:fe:b5:63:8a:50:22:1b:44:40:51:6e:41:
         81:7a:b7:19:e0:60:00:ed:07:af:61:54:56:49:0d:f2:69:53:
         51:ab:c6:1b:c7:2c:70:c0:f1:7b:1c:c6:fd:c0:46:fd:49:16:
         3f:b5:4b:5e:1b:fc:47:8f:06:74:97:43:0b:28:59:31:77:52:
         73:88:03:57:df:c3:11:29:a9:70:d8:fd:3e:57:f2:c9:2b:35:
         de:61:02:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:04:52 2025 by rpki-client