Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.mft
File:                     07TuvD2fWh6iApZpmumSiBsdjf0.mft (raw, json)
Hash identifier:          DKDiul5p0gQdwoFMuzefyldJr+My/enCUV/fWWh29X8=
Subject key identifier:   C4:44:3B:B1:8D:58:DD:29:E8:77:B0:E4:4D:EB:28:1B:94:1A:6E:BF
Authority key identifier: D3:B4:EE:BC:3D:9F:5A:1E:A2:02:96:69:9A:E9:92:88:1B:1D:8D:FD
Certificate issuer:       /CN=A91CD4E0/serialNumber=D3B4EEBC3D9F5A1EA20296699AE992881B1D8DFD
Certificate serial:       069F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07TuvD2fWh6iApZpmumSiBsdjf0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.mft
Manifest number:          069C
Signing time:             Fri 24 Oct 2025 14:52:22 +0000
Manifest this update:     Fri 24 Oct 2025 14:52:22 +0000
Manifest next update:     Fri 31 Oct 2025 14:52:22 +0000
Files and hashes:         1: 07TuvD2fWh6iApZpmumSiBsdjf0.crl (hash: 2/u7F7HwmLz7CsSQAu/BlqqE2yQj+W1a3Sr09xwO+wU=)
                          2: E969742CB33B11EEB4D87842C4F9AE02.roa (hash: oxmHGKf/WSOT7WzpjdLiOn3oXWfHw/6ypS3n/mBbPHA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.crl
                          rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07TuvD2fWh6iApZpmumSiBsdjf0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Oct 2025 14:52:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1695 (0x69f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD4E0, serialNumber=D3B4EEBC3D9F5A1EA20296699AE992881B1D8DFD
        Validity
            Not Before: Oct 24 14:52:22 2025 GMT
            Not After : Oct 31 14:52:22 2025 GMT
        Subject: CN=68fb92a6-5689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:92:19:fb:e2:a0:54:57:b7:b9:07:20:9c:83:
                    bc:95:cc:8a:f5:a0:ed:f9:10:24:65:10:40:07:17:
                    c8:d6:08:79:c8:eb:29:bc:e3:da:2c:b5:e6:fd:09:
                    cd:0d:af:64:d5:04:18:b6:32:b2:9e:cc:fd:4d:56:
                    0b:20:80:1d:99:72:e5:02:40:ff:b1:70:93:3b:79:
                    8a:34:f2:b1:52:80:78:bb:01:2c:98:cf:a1:2e:ab:
                    58:83:e1:4b:d7:94:5a:ea:44:00:22:6e:bf:70:8e:
                    3a:f8:3d:49:75:d1:1b:bd:47:68:1f:23:2a:aa:dc:
                    6c:6b:de:f3:39:08:65:10:1f:2b:8a:1f:3a:1c:93:
                    ed:05:60:d5:22:6f:e0:f1:2a:c2:ff:aa:d9:a3:ab:
                    14:e2:06:94:3d:71:a5:b4:74:b8:3c:a0:d8:6c:ad:
                    db:d5:bb:20:3f:61:83:5b:9c:78:83:08:91:fb:3a:
                    9a:71:20:83:87:1f:7d:10:24:24:c3:0f:23:62:c6:
                    20:d8:b6:e2:c8:df:5c:01:46:db:dd:d7:72:9c:27:
                    35:44:21:52:78:46:e9:76:bd:22:85:25:fd:60:aa:
                    d3:5b:82:5e:ad:c6:57:d6:2d:5d:7a:6c:9a:e2:15:
                    16:c1:93:a1:ae:f1:16:9e:06:9c:0d:87:d6:88:03:
                    25:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:44:3B:B1:8D:58:DD:29:E8:77:B0:E4:4D:EB:28:1B:94:1A:6E:BF
            X509v3 Authority Key Identifier:
                keyid:D3:B4:EE:BC:3D:9F:5A:1E:A2:02:96:69:9A:E9:92:88:1B:1D:8D:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07TuvD2fWh6iApZpmumSiBsdjf0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:5d:5a:35:e0:62:c1:3b:00:e0:a7:77:db:92:14:9d:35:08:
         af:fa:47:78:b8:d2:b4:b9:da:74:1d:f2:66:4b:0f:c4:2d:58:
         48:bb:e7:43:42:60:6e:f1:dd:5f:35:bf:e7:0d:e5:1b:61:ab:
         0f:c7:49:02:70:18:88:3b:3a:7f:33:ba:ee:a1:b4:3f:03:db:
         01:76:b3:de:cc:76:f7:87:aa:4b:ac:91:5d:7c:fb:e2:e8:d6:
         ea:d8:c5:fa:94:e8:11:b8:2a:ab:36:6b:2d:02:e7:e2:d4:8e:
         48:cb:a4:12:42:e4:9e:7b:fa:cf:81:51:0e:60:a5:a8:89:93:
         2f:ef:ce:49:8c:83:cd:14:80:4d:5e:3a:7f:67:c7:85:fc:c9:
         d7:2c:e9:ae:e3:b3:1d:02:19:de:86:c7:b2:70:4f:ac:25:28:
         d9:2d:fa:60:7f:7d:99:cd:ff:60:e3:40:36:e1:02:de:32:70:
         ee:99:57:63:05:81:99:01:c1:67:a1:ff:35:45:be:41:44:7a:
         52:bd:bd:28:cf:3b:eb:9d:ec:7a:14:93:68:1f:7b:b8:07:9d:
         ba:4e:43:41:18:a9:8b:08:d6:c7:e9:b5:b6:e6:7c:57:84:38:
         1d:89:7a:03:3f:ba:ab:9d:41:0f:54:f3:f6:63:8a:82:50:dc:
         46:0d:5d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 06:19:06 2025 by rpki-client