Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.mft
File:                     CqcW6oHMxdteS6chFMNCmhnW2V8.mft (raw, json)
Hash identifier:          4CMQP5a/rpwfBZoScm2hcmol1NCUEvXuSk1Ppx/Ji2U=
Subject key identifier:   07:3E:9F:88:5F:CF:16:3E:C6:4C:7C:F2:6E:74:5B:C9:26:9B:F6:47
Authority key identifier: 0A:A7:16:EA:81:CC:C5:DB:5E:4B:A7:21:14:C3:42:9A:19:D6:D9:5F
Certificate issuer:       /CN=A91CED30/serialNumber=0AA716EA81CCC5DB5E4BA72114C3429A19D6D95F
Certificate serial:       0157
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqcW6oHMxdteS6chFMNCmhnW2V8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.mft
Manifest number:          0155
Signing time:             Wed 05 Nov 2025 04:16:22 +0000
Manifest this update:     Wed 05 Nov 2025 04:16:21 +0000
Manifest next update:     Wed 12 Nov 2025 04:16:21 +0000
Files and hashes:         1: CqcW6oHMxdteS6chFMNCmhnW2V8.crl (hash: XM/pzno10h6aKUFWrUxoVncvajEu0VuW9tm2LUHKxYc=)
                          2: E188F6AEAE1F11EE9E818D16C4F9AE02.roa (hash: pJb5BTsbuqpgQP5Gvhc/gW9a2gX+v1FlOBgvzyj/io0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.crl
                          rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqcW6oHMxdteS6chFMNCmhnW2V8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 04:16:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 343 (0x157)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CED30, serialNumber=0AA716EA81CCC5DB5E4BA72114C3429A19D6D95F
        Validity
            Not Before: Nov  5 04:16:21 2025 GMT
            Not After : Nov 12 04:16:21 2025 GMT
        Subject: CN=690acf96-2a58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:65:c3:0f:05:7b:a6:af:6a:f0:62:28:a5:91:
                    eb:f1:c8:71:48:21:04:ac:08:a3:21:d9:09:69:9b:
                    26:57:af:eb:0b:5c:d8:65:54:98:d3:de:55:9c:6f:
                    11:1f:27:a0:29:c1:f5:38:11:0b:b6:64:b0:1e:5d:
                    73:03:5f:ff:1d:1a:2e:fa:88:a4:27:65:d8:5b:04:
                    d8:65:ba:9c:f7:4f:35:96:ac:eb:8c:32:47:07:29:
                    78:3b:22:80:8e:cf:3f:3c:08:24:c4:6a:e6:10:34:
                    d4:67:a9:8a:2f:6f:67:25:a1:45:ed:30:4e:d3:e5:
                    25:8d:1a:b0:21:7f:b4:3e:51:9a:6c:5f:82:f9:2f:
                    35:ec:b1:ac:35:da:7b:51:d2:da:e1:5b:4a:53:66:
                    90:4b:ac:9f:f8:6e:18:c2:e0:bf:d0:08:f9:62:e5:
                    79:45:de:2a:fa:fa:af:4f:53:7b:85:e4:4f:f4:9e:
                    64:3d:84:79:56:0a:1e:5a:12:49:64:ac:e0:85:31:
                    7e:14:69:0c:c5:8c:7a:48:b5:db:a3:ab:5b:1b:f4:
                    da:57:9a:7e:3a:09:7a:d6:03:d2:41:b0:17:21:b6:
                    d5:d0:99:e6:1a:f2:79:e0:64:fd:b7:ea:bf:a0:ec:
                    6a:6a:cb:a0:3d:e9:c4:2c:ed:7e:60:d8:ac:64:ee:
                    4e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:3E:9F:88:5F:CF:16:3E:C6:4C:7C:F2:6E:74:5B:C9:26:9B:F6:47
            X509v3 Authority Key Identifier:
                keyid:0A:A7:16:EA:81:CC:C5:DB:5E:4B:A7:21:14:C3:42:9A:19:D6:D9:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqcW6oHMxdteS6chFMNCmhnW2V8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:73:e1:19:26:0f:d8:a2:62:1d:b9:2d:d6:20:a6:53:46:d9:
         b5:9e:a4:85:d6:10:b8:0a:15:1b:47:2e:21:27:26:03:76:29:
         82:22:ee:57:ee:40:b0:7e:84:30:e1:d6:93:57:19:db:7f:a8:
         52:a9:6e:ee:68:74:f3:4b:03:26:3e:52:01:7b:ae:0e:f3:d8:
         76:55:6f:67:62:1a:94:19:8a:3d:1f:73:3d:e3:16:e7:15:30:
         cb:04:fb:d4:c8:ae:a7:16:6e:48:be:99:22:96:99:dc:9c:aa:
         d7:1f:d4:25:a1:05:41:28:34:44:11:15:4d:a1:de:f0:4d:a9:
         39:42:6a:fc:ab:4e:85:41:22:8c:df:59:d9:f5:f3:79:6d:a4:
         5a:6a:7b:fa:9d:67:21:af:2a:1d:9b:d4:fe:68:54:07:e5:4f:
         18:05:03:8c:7d:11:13:b0:7d:dc:ee:98:8e:05:c4:42:2f:f0:
         ba:01:45:98:5d:8b:d7:c6:3e:13:f5:fc:74:d9:cf:7d:da:4f:
         a7:55:2e:5e:72:7f:e1:43:7e:df:44:e7:77:c8:95:2f:70:b6:
         82:a1:96:ba:fc:8c:a4:6d:a8:62:f2:04:d8:6a:03:3d:62:92:
         c1:fb:66:e8:d4:cb:fc:2b:4b:60:1e:92:cf:b3:17:e6:61:04:
         e5:8d:a1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:54:57 2025 by rpki-client