Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft
File:                     rdlBjw-bVfO3N2oJPbEdutOu_sg.mft (raw, json)
Hash identifier:          6fwEYKCMEinybKpkV7xYDr+24JKzJ/pG4upLAzXhAdU=
Subject key identifier:   E3:89:7B:0A:74:5F:57:A2:36:E2:E6:89:56:4E:C8:01:FE:E2:93:C4
Authority key identifier: AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8
Certificate issuer:       /CN=A91CFFA0/serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8
Certificate serial:       0F6C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft
Manifest number:          0E5A
Signing time:             Mon 20 Oct 2025 18:30:21 +0000
Manifest this update:     Mon 20 Oct 2025 18:30:20 +0000
Manifest next update:     Mon 27 Oct 2025 18:30:20 +0000
Files and hashes:         1: rdlBjw-bVfO3N2oJPbEdutOu_sg.crl (hash: XTxSaUz8snxM10f82TWMIybzuIqE9C98NwSS4zxX2rE=)
                          2: C735E33E1CB511EAB25B4768C4F9AE02.roa (hash: gyfd8yfpcrsdUm362X9/UdNM3mZBfttbTMqza0Depgs=)
                          3: 7FBDDAE21A9411F087D4BC86C4F9AE02.roa (hash: +Ezz1sJmRvUn7ofcNz6zucevlAunQnc+pNOTGGaRXs4=)
                          4: 59C7E67C77CC11EAB764ED34C4F9AE02.roa (hash: EzmlYDIYm1xOfkY9Xnj3Z3SdpIMp5IBIa3y1OFN4eK4=)
                          5: 8C9FFE4C0F2F11EE85C26C11C4F9AE02.roa (hash: j4EoNG6mPHnfhB1j42qxfNdNciMiEtrw2eJw4okWk0c=)
                          6: 1B88FC66823D11EC8E3CB427C4F9AE02.roa (hash: mn3sE8XpKvVWd9UbJMQ1OKNZuj9ls9xZNaLI7yAeig4=)
                          7: 2C3F5F0C1CB711EAAA03506DC4F9AE02.roa (hash: bNiaBxLSaec5WOSjMopZEcGaxVMAzUvwIFjDNwtzIXo=)
                          8: E79C4936420D11EC89D7C163C4F9AE02.roa (hash: GZEHbZPKjeuR0ecqQm5rnrjDlAtA7+UPoWqGJrdoIkc=)
                          9: 598351E2476011F097E14360C4F9AE02.roa (hash: Z9kiwDBj6+SjMsFsgY7gi9FIlXbv7JHD5bPoLzc5FlA=)
                          10: B3B97C46510311EDA562C34DC4F9AE02.roa (hash: jtYt/pU+ooAIkmhjTmjyuCh451/edjbb8L7BPLMNm/A=)
                          11: 0134DE8CC77211EC9B377B2DC4F9AE02.roa (hash: ZJYPWa1zVWtxLs6YCjscQz9YmQ7dtlau1Mnxy99zbcE=)
                          12: 849EBBA60CCA11ED97820077C4F9AE02.roa (hash: GSV2og2vZfzpYKFvoDWTGBKAz8dr3rumZNKGGO3jHY0=)
                          13: B86FBE4A2E3611EB84E66039C4F9AE02.roa (hash: sLEtAwDgKICVdyB7EW9vv5iaJ4c0aSu+tPvZcmtVPKg=)
                          14: AB2FDD4CA56911EA8F159D7BC4F9AE02.roa (hash: 5W1NfRExr5L2qQL5H136NrVKGoHwAdTpjf3o+jUw4fM=)
                          15: 27F85F401B0811EEA3313C43C4F9AE02.roa (hash: lKd14RCSyU2vrCrtMJxPKeMYKMqLc77HXu+4PUEXtJI=)
                          16: 8B0EC9621D0611EDBAB65333C4F9AE02.roa (hash: hncV0VkKM0GHDpxNiR5xutYPqnkMPO9a8qqBVzFUIdw=)
                          17: 3949DB48056711F09B0C9329C4F9AE02.roa (hash: U4MBST0cKb6RFa7OBRmsAZWClvdETmVq86pgqwAZx3A=)
                          18: 624A8CB0A75211EDB46F8967C4F9AE02.roa (hash: H2lEK0K0kQYeTrVqMlmr1093uk7p/5P20OC6SGdaiQI=)
                          19: 640C18A214AD11EEAA685687C4F9AE02.roa (hash: rUC7HAYZSDdTVk9lHvd/Wl7kYoqQUYqgnEKO2kEnvDw=)
                          20: DA05FC5C58A311EC952D4D56C4F9AE02.roa (hash: FQj+ZVLFAzitzpiwqDx7ibMG/ct51yOTa3qwsRqg/wY=)
                          21: 706D3EA4140211EB87D7320FC4F9AE02.roa (hash: a/CArtNqj+X7FLzknDiVLBMQF895RFRrNOFXjFmjzNk=)
                          22: AE9742429B5711EB8E3BEB19C4F9AE02.roa (hash: IgmSu1xooZkjMSIy5UaMn0KJuSc5PeG/UAY2iz4v00A=)
                          23: 5A4C001A77CC11EAB764ED34C4F9AE02.roa (hash: ynz+ZXVYon6qCCwSg68HnlbJgsz7oHMRryvXyKUGv9g=)
                          24: 54AB633219D211F09C581262C4F9AE02.roa (hash: TW7LWSWDjilmokwKD8PcTDpey43GdF1QSznkCaq0KaE=)
                          25: 6ACBF170CC4C11ED8B54A36FC4F9AE02.roa (hash: PNn4hloLWsO3US5KtLsv/gJGCuFiAV7h2ZsPkySZuPM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl
                          rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 18:30:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3948 (0xf6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFFA0, serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8
        Validity
            Not Before: Oct 20 18:30:20 2025 GMT
            Not After : Oct 27 18:30:20 2025 GMT
        Subject: CN=68f67fbc-d6af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9a:8e:ad:d3:a0:5c:00:5a:57:d0:9b:05:58:
                    31:ca:cd:fb:85:76:ab:e6:f7:db:40:99:eb:05:20:
                    19:5a:67:a7:1e:87:5d:70:87:a5:59:c5:42:e1:d5:
                    d7:98:b3:c0:42:4a:0d:f6:ba:6d:13:b9:ad:f6:a9:
                    f7:f7:0a:24:0c:4d:fb:16:13:1a:0b:f1:56:c4:2b:
                    b5:b6:43:4a:14:fa:98:43:99:51:25:db:26:62:d0:
                    48:39:d9:13:98:c0:58:46:a0:92:17:5c:12:ea:b4:
                    13:3f:b0:71:21:fd:a0:25:be:75:28:3c:02:e2:e9:
                    cd:8c:bd:45:e8:d5:00:69:aa:ed:27:dc:92:eb:b5:
                    ac:4c:2e:5b:47:18:0a:e1:48:23:d3:a7:5a:c6:5a:
                    87:77:52:a8:b4:48:8e:a8:19:dc:64:6f:54:77:75:
                    ad:80:4b:43:24:44:20:0f:09:86:b1:99:7b:09:82:
                    4c:74:30:28:85:98:d4:13:39:f3:50:70:96:bc:2b:
                    c0:84:ea:26:03:43:20:56:0f:b0:f9:22:d1:14:d7:
                    c9:46:cb:79:c1:91:93:4d:6b:17:7c:5a:d0:6a:1d:
                    68:d8:dd:13:c3:1c:6c:fd:f6:dc:55:cc:f3:b9:3a:
                    15:b3:7e:6a:00:88:f7:ce:c5:2a:41:cb:7c:c2:6a:
                    9b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:89:7B:0A:74:5F:57:A2:36:E2:E6:89:56:4E:C8:01:FE:E2:93:C4
            X509v3 Authority Key Identifier:
                keyid:AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:99:48:b8:8a:b7:44:76:36:95:9f:39:e7:00:62:cd:37:84:
         4b:66:1b:b0:15:d8:f1:7a:d1:97:9f:c5:74:ff:97:ea:93:4f:
         aa:82:3c:0c:9b:94:bc:1d:25:17:a9:38:03:4c:cc:c4:0b:27:
         47:b4:4e:7c:f0:99:52:e7:19:ae:64:16:04:bf:0b:77:99:69:
         7f:c7:15:79:3a:66:50:a0:f2:21:e6:6d:0d:e2:01:fd:b2:3e:
         19:85:22:9e:45:b3:64:28:73:d9:3a:89:a1:f4:ed:37:6d:63:
         d7:c2:2e:8c:63:29:eb:b4:18:d0:65:a9:c4:70:82:46:b1:8e:
         d6:7e:b7:ae:79:42:e3:35:a4:0b:9b:ca:cf:39:40:a7:71:2a:
         98:e5:fc:8f:24:08:38:8d:63:a8:41:e0:dd:10:6e:7b:ec:ac:
         cc:0a:3b:e7:96:61:0d:35:30:d6:55:1e:2d:7f:e9:8f:66:c9:
         cb:e6:db:6c:39:13:6e:61:c8:44:a6:c5:b9:6f:98:96:22:40:
         e0:69:74:5b:e1:0d:cd:2f:63:18:3a:36:68:b7:bc:7c:28:02:
         e8:f3:51:11:91:fc:90:b7:ae:90:52:9a:eb:77:7f:27:a0:67:
         8a:b3:3c:d2:02:b7:eb:6e:31:fb:5a:5a:53:0c:2b:c1:89:ae:
         f2:cf:5c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 10:28:50 2025 by rpki-client