Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/v-RhN13CI9T3snBV4rNHRf5hAdQ.mft
File:                     v-RhN13CI9T3snBV4rNHRf5hAdQ.mft (raw, json)
Hash identifier:          h/Xla4u8ohy7LvbGd0EVLd8k3tFpXj7uv2zXMLSpaNg=
Subject key identifier:   BE:B7:6B:D3:6F:0B:AF:8F:9E:55:AC:8C:B8:00:CD:64:82:42:17:14
Authority key identifier: BF:E4:61:37:5D:C2:23:D4:F7:B2:70:55:E2:B3:47:45:FE:61:01:D4
Certificate issuer:       /CN=A91CD98D/serialNumber=BFE461375DC223D4F7B27055E2B34745FE6101D4
Certificate serial:       07AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v-RhN13CI9T3snBV4rNHRf5hAdQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/v-RhN13CI9T3snBV4rNHRf5hAdQ.mft
Manifest number:          0773
Signing time:             Tue 04 Nov 2025 21:50:34 +0000
Manifest this update:     Tue 04 Nov 2025 21:50:33 +0000
Manifest next update:     Tue 11 Nov 2025 21:50:33 +0000
Files and hashes:         1: v-RhN13CI9T3snBV4rNHRf5hAdQ.crl (hash: SyTW8uOZiPTPlvUoM5j6hXhLwX47z6MKVs5hgwW7HD0=)
                          2: 05AF21A4B71311F0B98A8D22C4F9AE02.roa (hash: /IPfDG3dNkKnM9ckspPgqTdtR8Igue5PV2ka5sPIhHQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/v-RhN13CI9T3snBV4rNHRf5hAdQ.crl
                          rsync://rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/v-RhN13CI9T3snBV4rNHRf5hAdQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v-RhN13CI9T3snBV4rNHRf5hAdQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 21:50:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1964 (0x7ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD98D, serialNumber=BFE461375DC223D4F7B27055E2B34745FE6101D4
        Validity
            Not Before: Nov  4 21:50:33 2025 GMT
            Not After : Nov 11 21:50:33 2025 GMT
        Subject: CN=690a7529-1ec3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:03:40:84:f8:7f:5f:b9:8e:20:75:40:22:01:
                    40:98:58:a4:6a:d2:b0:bc:06:f3:12:9e:23:6a:ea:
                    db:0c:04:67:0c:d4:d1:73:74:84:52:1a:83:01:cc:
                    26:44:a3:0e:74:54:bf:8e:a5:96:87:db:60:6a:ca:
                    ed:e5:74:f1:9c:46:5e:74:54:14:23:97:c1:12:1c:
                    e2:52:07:57:f7:16:77:5f:0e:97:be:40:4e:7d:cf:
                    a5:ea:7f:ec:ce:b6:be:98:7e:1c:ad:b9:6e:1d:c8:
                    bf:26:6b:7f:04:57:07:55:e8:20:00:3e:a9:0d:f3:
                    e9:3e:48:a5:32:8d:84:24:07:23:b9:cc:13:5a:b3:
                    5d:ce:9a:31:3b:46:e3:09:87:0d:33:c2:6a:c9:f0:
                    14:32:11:34:0f:dc:83:e7:81:2d:15:7f:c6:fb:8e:
                    8a:6b:ab:05:ae:57:4e:af:bd:d9:ce:ee:9e:19:49:
                    5c:4c:34:c5:8e:21:ec:65:45:2f:4a:7f:66:9d:43:
                    7e:c5:14:fc:03:82:70:d9:9a:69:e8:83:ce:32:79:
                    15:a2:ea:d6:17:29:46:2e:de:2e:cb:fb:6b:21:7e:
                    7b:15:ea:e1:e5:78:72:72:0e:0a:f4:41:24:cc:09:
                    91:42:c9:76:12:2b:99:ad:38:8c:4d:92:b9:44:62:
                    47:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:B7:6B:D3:6F:0B:AF:8F:9E:55:AC:8C:B8:00:CD:64:82:42:17:14
            X509v3 Authority Key Identifier:
                keyid:BF:E4:61:37:5D:C2:23:D4:F7:B2:70:55:E2:B3:47:45:FE:61:01:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/v-RhN13CI9T3snBV4rNHRf5hAdQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v-RhN13CI9T3snBV4rNHRf5hAdQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/v-RhN13CI9T3snBV4rNHRf5hAdQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:7a:9f:08:2f:dd:ab:7b:26:a1:a8:bb:ef:1c:9d:aa:e5:04:
         7c:ae:0e:e1:b7:e4:52:4a:45:42:c0:31:c7:68:77:46:d5:cd:
         16:21:dc:40:ee:9d:03:08:8c:44:5e:99:e3:71:c8:9e:ed:49:
         14:84:c3:9b:03:05:3e:bb:f8:fd:b4:97:6b:67:fa:46:3f:0a:
         25:89:d6:0e:ff:da:6d:e9:e5:87:55:68:fe:f9:64:12:27:09:
         e3:ef:f4:5c:6d:26:2c:d9:1c:8d:af:7d:95:05:4b:1a:10:9e:
         c1:34:5c:7f:c1:7b:42:57:64:99:09:b5:d0:5c:a5:da:02:29:
         59:81:c6:1c:cd:19:bc:ec:ff:db:ec:79:4d:8f:0a:59:2a:ee:
         cb:1c:99:3b:3c:1c:d6:1b:f2:72:f7:5d:c6:c8:40:b1:aa:fd:
         63:08:26:9b:4f:37:eb:e3:cc:bc:61:3f:26:f5:aa:11:ff:33:
         76:8f:35:67:d7:bd:0e:43:b2:7b:02:1e:c6:65:93:de:5c:07:
         18:9b:a3:1b:2d:17:25:fc:fe:de:ee:31:95:ab:1e:4e:18:9b:
         8c:19:75:a6:cf:3e:d3:4b:6a:c2:9a:83:41:2a:fd:32:64:10:
         2d:5a:3a:f9:ad:8b:57:eb:76:db:ef:bb:0d:f8:8b:f6:fb:3c:
         f2:f0:98:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:28:20 2025 by rpki-client