Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft
File:                     5CnUKeZreXs9ihy-JJFXetw4pI4.mft (raw, json)
Hash identifier:          gKq/RcYtWKFOzKm3flEKHw4lEC/vnhIsLavVXrZBp10=
Subject key identifier:   15:E3:2F:21:6D:06:05:7E:41:5E:52:6C:22:6A:D4:48:08:21:4E:A8
Authority key identifier: E4:29:D4:29:E6:6B:79:7B:3D:8A:1C:BE:24:91:57:7A:DC:38:A4:8E
Certificate issuer:       /CN=A91CC711/serialNumber=E429D429E66B797B3D8A1CBE2491577ADC38A48E
Certificate serial:       014B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft
Manifest number:          012B
Signing time:             Sat 25 Oct 2025 08:38:31 +0000
Manifest this update:     Sat 25 Oct 2025 08:38:30 +0000
Manifest next update:     Sat 01 Nov 2025 08:38:30 +0000
Files and hashes:         1: 5CnUKeZreXs9ihy-JJFXetw4pI4.crl (hash: /6u8VGSDuZCp5O6TmPhdrNDUTrmtXPYjbcTajcBrdp8=)
                          2: 06FA65A81F2711EF98DA2926C4F9AE02.roa (hash: oS4PRK+VFwkVhFqqmzFtlUlVZ/0tESve4AVvdpaS7tg=)
                          3: 25ED44B41EE411EFA62B1335C4F9AE02.roa (hash: zb91MkoqcDkuzuZwD7VYBRLCNDf9oSeL0ikN94ozVn8=)
                          4: A7FC5DEE8D0411EFBD7A0057C4F9AE02.roa (hash: TGsIq74Qma+U6c7Ey8qeEz04VjG5STVU5SpvAS46Q6U=)
                          5: 359CBDB28D0D11EF90882959C4F9AE02.roa (hash: qdwbcsIyL1f3wI2tO7dwB6BR0n7SfSV/G7xRpNDHqtU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.crl
                          rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 01 Nov 2025 08:38:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 331 (0x14b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CC711, serialNumber=E429D429E66B797B3D8A1CBE2491577ADC38A48E
        Validity
            Not Before: Oct 25 08:38:30 2025 GMT
            Not After : Nov  1 08:38:30 2025 GMT
        Subject: CN=68fc8c86-1c79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c1:f4:7f:6f:38:6c:31:1d:cd:cf:cc:67:55:
                    1d:c7:23:66:a9:7c:a7:9d:1e:d3:f2:33:60:d8:99:
                    c6:18:d5:f1:8e:d4:26:62:c4:ca:ca:d3:80:d0:ad:
                    7a:27:a2:61:7c:3a:4e:91:98:d6:3e:6a:d0:42:05:
                    3d:5e:c7:52:6c:29:d6:2a:b2:f5:a5:9d:41:72:00:
                    43:1d:05:72:5c:25:c9:0c:64:27:19:4b:3a:5e:ea:
                    f2:91:45:00:80:3a:f4:a2:71:78:ec:f0:ad:00:91:
                    2c:f0:9f:25:2a:9f:fa:af:84:a2:d9:f3:42:2c:be:
                    bd:e4:a0:3a:e7:3f:e3:5f:7c:47:6e:de:55:fe:57:
                    92:b7:ed:11:fa:de:cc:a6:ab:68:48:54:84:3f:62:
                    0a:de:e0:ce:62:69:12:a9:34:82:22:ab:02:9d:47:
                    8e:9b:5c:c6:48:48:9b:cc:2f:86:74:5f:fc:8a:12:
                    db:1c:28:3f:00:8c:2c:22:d9:d7:3c:55:ce:99:bd:
                    90:bc:ec:13:fd:c3:e3:1c:26:82:8b:74:17:71:81:
                    a0:17:d2:e3:e3:f9:dd:c2:9c:5b:6f:61:67:f0:93:
                    9f:3a:4e:4c:cd:96:ea:46:33:cd:d9:66:5d:a5:f8:
                    39:b9:db:72:fb:ef:ec:11:5d:f4:bc:9a:a0:10:ff:
                    b3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:E3:2F:21:6D:06:05:7E:41:5E:52:6C:22:6A:D4:48:08:21:4E:A8
            X509v3 Authority Key Identifier:
                keyid:E4:29:D4:29:E6:6B:79:7B:3D:8A:1C:BE:24:91:57:7A:DC:38:A4:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:ca:a0:2b:4f:e7:a8:ce:92:40:0b:e2:ec:03:76:2f:95:46:
         0b:c0:20:36:99:ef:3a:68:6f:a6:1e:03:76:a1:53:90:0e:01:
         02:74:56:9e:39:f2:11:dd:e4:9c:17:9e:53:e3:fc:bc:d8:e1:
         ca:d4:f9:ea:05:ee:e9:8e:b5:f6:80:8c:15:27:33:4f:20:60:
         83:37:d4:90:41:d8:c3:2b:af:f1:bb:5b:3d:87:f3:a3:b8:01:
         e9:13:63:48:6f:c2:65:0c:29:c6:8c:be:df:3b:9c:c3:b5:6a:
         97:71:29:d2:a3:ae:fa:82:32:4d:f3:76:21:c0:0e:49:68:cb:
         15:ad:b4:50:a0:00:72:68:37:85:bb:17:bf:ab:66:61:41:44:
         ec:5d:cf:1b:dd:20:ff:99:fc:b2:71:d8:04:08:f6:8c:cf:8d:
         fe:d3:d8:f7:83:c5:ca:57:40:90:78:4c:33:32:d9:59:e9:89:
         67:39:41:43:6b:15:b4:72:49:8c:16:1e:f0:c3:a0:dc:b0:b8:
         14:92:af:a4:1b:8b:c6:b1:b0:41:25:5c:22:2e:80:ba:de:7b:
         79:0a:76:fa:3a:34:32:cb:0d:8a:88:97:eb:7f:e9:88:12:1a:
         8b:d0:29:dd:12:fa:01:90:15:4b:c3:6a:8a:c7:71:6a:fd:ec:
         ff:27:af:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 20:04:23 2025 by rpki-client