Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft
File:                     R7V3ucir4sNgDFtOeT_01HtlBiA.mft (raw, json)
Hash identifier:          QzkQWEOYoZnsknjuqkM9AHvXoRkKqfYHhBiIkjgf6YY=
Subject key identifier:   01:60:1C:69:C4:85:AA:48:09:A7:51:AA:C5:38:85:C5:91:4C:72:D5
Authority key identifier: 47:B5:77:B9:C8:AB:E2:C3:60:0C:5B:4E:79:3F:F4:D4:7B:65:06:20
Certificate issuer:       /CN=A91CC0C9/serialNumber=47B577B9C8ABE2C3600C5B4E793FF4D47B650620
Certificate serial:       5B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft
Manifest number:          47
Signing time:             Sat 25 Oct 2025 11:33:48 +0000
Manifest this update:     Sat 25 Oct 2025 11:33:47 +0000
Manifest next update:     Sat 01 Nov 2025 11:33:47 +0000
Files and hashes:         1: R7V3ucir4sNgDFtOeT_01HtlBiA.crl (hash: q+fnTE8WxJO0GwkNFRfgRJRcLd9WQ8d+j6K4yJcOjgk=)
                          2: 30B2E99E5FB611F089B44784C4F9AE02.roa (hash: negZFqmBMo6VKE4VUMOsRrfxv0TCnbtWxCJ6jQA2XAg=)
                          3: 10958AE05FB611F0BF84DD83C4F9AE02.roa (hash: 99rILg0lAp1MtFrGVsL1ZVmf1GEn+BZy/AOnEIUCEaI=)
                          4: C6811EDA5FB811F094135B2FC4F9AE02.roa (hash: +YrktxlVC+PsFpuKkXdgvfc2lY3YsjGZkj0Z7YYEcZU=)
                          5: C6EC548E5FB811F094135B2FC4F9AE02.roa (hash: vQxvyyxrHRBa4iZJFOrEvTxzuAri97r7swFzpbuyhQg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.crl
                          rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 01 Nov 2025 11:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91 (0x5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CC0C9, serialNumber=47B577B9C8ABE2C3600C5B4E793FF4D47B650620
        Validity
            Not Before: Oct 25 11:33:47 2025 GMT
            Not After : Nov  1 11:33:47 2025 GMT
        Subject: CN=68fcb59c-cede
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a3:29:7e:8b:7c:ad:e2:78:fe:d0:4c:7e:3d:
                    d0:9c:2a:27:10:e0:7d:81:1e:f4:06:4e:4e:24:6f:
                    3a:ba:ec:ff:a0:f2:7a:5e:77:46:49:e1:12:18:5f:
                    a2:29:d1:f9:43:28:c8:81:88:70:3e:2c:b9:27:32:
                    79:1b:f9:0b:ef:70:1b:e6:3a:0d:96:ed:00:2a:1d:
                    13:82:99:13:25:1e:f2:76:19:6a:7e:86:a1:65:9e:
                    8b:31:71:2e:2a:d8:87:ec:40:ef:60:f2:f7:71:54:
                    53:63:dd:11:68:a9:3a:7a:4f:5a:34:62:ea:81:4f:
                    fb:89:13:a2:ed:fe:8b:80:0b:81:f8:bd:85:3f:08:
                    fc:8f:cd:23:f8:a6:26:58:51:99:f4:91:52:07:27:
                    ce:3c:48:da:28:c7:b7:72:b5:12:9d:9c:e6:a6:6b:
                    e7:f1:be:c7:d3:3b:4a:10:c2:77:5c:ee:d0:bf:9a:
                    3c:43:e8:67:92:f4:38:36:1a:0b:cb:79:26:33:36:
                    d2:60:ad:a8:62:4f:60:7b:3c:86:fb:9c:1f:21:8b:
                    00:ae:02:d8:a8:ab:f2:1e:b8:d4:24:0a:ce:06:ba:
                    0c:a8:32:ba:83:02:b7:81:c8:a4:e3:52:7a:b4:40:
                    06:b0:ad:79:8c:c2:11:bb:5e:db:a5:49:93:6e:1a:
                    c9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:60:1C:69:C4:85:AA:48:09:A7:51:AA:C5:38:85:C5:91:4C:72:D5
            X509v3 Authority Key Identifier:
                keyid:47:B5:77:B9:C8:AB:E2:C3:60:0C:5B:4E:79:3F:F4:D4:7B:65:06:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:e2:e5:81:b9:3f:c7:8a:b8:17:4f:29:8b:74:51:05:03:e3:
         6c:42:6e:98:4a:64:e2:b1:c8:83:67:d5:a8:57:18:fb:79:97:
         b8:6a:7b:94:7a:e0:6d:00:52:46:d5:82:90:aa:48:83:43:4d:
         3d:29:8e:79:f0:ed:c5:36:f1:8b:cc:b0:66:01:22:e6:c5:c0:
         c7:51:e7:74:37:4e:56:36:66:7c:a5:cd:ec:1c:77:74:62:32:
         97:59:60:6d:c6:02:cd:b6:06:ff:fb:3c:10:f0:94:cf:63:77:
         6d:cd:00:38:e1:5f:27:b5:ce:f3:ef:66:9e:c6:19:14:d0:a6:
         d7:ab:e9:7d:74:85:88:c4:52:1a:87:7b:a7:6f:35:b4:98:59:
         d1:06:83:7a:1c:8e:8f:e9:fe:55:a2:09:dd:03:10:82:74:75:
         dd:83:aa:7b:1b:7d:e1:13:90:aa:8a:78:c1:36:91:7b:3c:f7:
         52:8e:c0:2e:5c:e3:88:4a:5d:db:10:c4:5b:9f:28:52:61:2c:
         2f:39:18:76:5b:f8:8e:3e:07:01:82:10:6a:af:7f:c2:44:f5:
         47:aa:72:e5:78:05:a7:3b:79:83:64:16:0d:3c:a4:48:6e:b4:
         2b:08:50:36:18:1f:50:ea:d4:d7:df:6b:9c:7b:43:10:c4:21:
         ac:05:d6:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 07:18:47 2025 by rpki-client