Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft
File:                     A7x0msFoLEtG2iWat-tmKqIlsO4.mft (raw, json)
Hash identifier:          GVI/eLcxJ7BwnwOwy/tNyQJ79Kgb3AnFHq/VZGpHya8=
Subject key identifier:   71:1A:2A:40:55:03:64:54:CA:59:EF:75:83:85:7F:36:8E:A8:50:F5
Authority key identifier: 03:BC:74:9A:C1:68:2C:4B:46:DA:25:9A:B7:EB:66:2A:A2:25:B0:EE
Certificate issuer:       /CN=A91C6BB2/serialNumber=03BC749AC1682C4B46DA259AB7EB662AA225B0EE
Certificate serial:       02F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft
Manifest number:          02DF
Signing time:             Wed 29 Oct 2025 01:05:51 +0000
Manifest this update:     Wed 29 Oct 2025 01:05:51 +0000
Manifest next update:     Wed 05 Nov 2025 01:05:50 +0000
Files and hashes:         1: A7x0msFoLEtG2iWat-tmKqIlsO4.crl (hash: rn0zsiO8st90q/WhK92F/9ul0iTRUBMrcL2IYGJX3Us=)
                          2: 810DCA288C6511EF813EB90EC4F9AE02.roa (hash: 9vbaTvEONgGnCCzzlIBphmxj6A21NbejzXiij71gCyE=)
                          3: CFB6C2ECB55511EFB8F19317C4F9AE02.roa (hash: Nuqi/DwAfsIbvqEslH1o2Nq9pgL64KpNEMZ+W/5PR6U=)
                          4: 0A9DA996655311EF8D61E41CC4F9AE02.roa (hash: YEePosDji6p318PSaVsMzMykST1cQDsNsrEk48Tp9ic=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.crl
                          rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Nov 2025 01:05:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 752 (0x2f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6BB2, serialNumber=03BC749AC1682C4B46DA259AB7EB662AA225B0EE
        Validity
            Not Before: Oct 29 01:05:51 2025 GMT
            Not After : Nov  5 01:05:50 2025 GMT
        Subject: CN=6901686f-a019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:63:da:19:cb:c0:5d:e1:aa:2d:2a:e2:18:2e:
                    ae:0b:8b:e7:70:f0:6c:7d:36:a4:47:39:30:ac:a8:
                    e1:1a:63:a5:73:50:e3:74:e2:50:bb:f0:15:30:b5:
                    ff:72:41:62:7c:6a:de:64:e7:9d:f3:99:cf:c5:37:
                    89:09:76:ea:23:1c:22:e0:21:ef:0c:d2:67:52:b6:
                    4c:c1:05:74:20:7c:11:96:97:68:07:0a:d5:0a:45:
                    79:3a:06:dd:47:b0:b2:d2:1f:73:52:48:66:9b:e5:
                    ff:18:4a:0d:a8:03:8e:d2:a8:59:2c:59:6f:0d:b3:
                    3e:0c:85:ae:e9:25:00:75:60:79:b8:41:f0:b9:88:
                    f4:e8:82:db:72:ed:ca:8c:17:27:f9:e8:09:db:9d:
                    74:41:8d:5e:ea:86:db:e4:d9:1f:0e:74:a3:65:52:
                    0d:d7:68:33:f0:ed:bf:b9:ee:ee:f8:fc:bb:cd:3e:
                    10:37:da:46:7e:c2:9f:60:1d:7e:73:58:cc:94:8d:
                    c0:9f:f9:0c:9e:22:2c:97:99:da:54:82:f6:a5:fe:
                    6b:72:0a:a4:16:da:7f:66:cf:13:bf:7b:2b:5f:35:
                    2d:1f:bc:0e:15:9a:13:61:15:19:c3:b1:d3:cb:9d:
                    f2:49:62:3f:57:ce:09:52:3e:02:d4:f8:e8:81:41:
                    6e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:1A:2A:40:55:03:64:54:CA:59:EF:75:83:85:7F:36:8E:A8:50:F5
            X509v3 Authority Key Identifier:
                keyid:03:BC:74:9A:C1:68:2C:4B:46:DA:25:9A:B7:EB:66:2A:A2:25:B0:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:c4:d3:f2:10:76:50:03:57:6b:89:ce:dc:0c:de:8e:7e:b1:
         7c:94:a7:36:e9:53:ad:5b:23:d2:13:b5:b0:80:b7:09:dc:6a:
         ed:4b:43:f4:90:6f:dc:c4:1d:db:44:9e:32:8d:61:c1:e7:0c:
         3e:a5:1a:3d:34:03:c2:3e:7d:67:cf:da:e7:67:48:86:0f:f8:
         d7:2e:b9:1c:18:4a:17:4b:9b:bd:a4:f8:14:57:6a:74:2a:71:
         c1:de:a5:ff:63:71:2c:8b:94:91:1a:d4:a6:55:48:3b:85:6d:
         a3:b8:fd:e3:6e:e4:d0:4b:a3:91:7c:cd:7e:29:5a:ab:14:99:
         97:79:09:cf:59:db:be:f5:70:36:3f:50:07:ec:0a:2e:6c:a1:
         df:6a:18:f9:54:f4:20:e5:83:71:dd:67:1b:46:f1:b1:9b:4e:
         76:79:35:7c:58:fb:02:2e:8b:b7:37:8e:8c:46:76:c0:ba:d1:
         5c:26:e7:01:cd:53:62:c1:8d:4c:8c:fe:6d:94:76:95:4c:a3:
         68:86:ec:f9:40:26:27:5f:d9:67:af:d5:22:9f:19:6e:a0:f0:
         0b:dc:dc:80:b1:8d:53:c4:c3:ec:78:6e:91:b5:80:40:48:70:
         27:1b:e4:57:56:17:9b:a3:ff:47:a2:13:23:ae:19:4c:ae:c3:
         f9:98:3a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 03:55:52 2025 by rpki-client