Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft
File:                     1vBnJNCWhwftHfr9uyJYArPaoZQ.mft (raw, json)
Hash identifier:          CQbwSHno0rx3YpDBLNr7vVq2zsNN8OVX9wiWslOM+m0=
Subject key identifier:   E5:07:49:A3:C1:1F:53:87:85:84:9A:8F:96:B3:DE:FE:95:DD:27:AC
Authority key identifier: D6:F0:67:24:D0:96:87:07:ED:1D:FA:FD:BB:22:58:02:B3:DA:A1:94
Certificate issuer:       /CN=A91D1F95/serialNumber=D6F06724D0968707ED1DFAFDBB225802B3DAA194
Certificate serial:       02AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vBnJNCWhwftHfr9uyJYArPaoZQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft
Manifest number:          02A6
Signing time:             Thu 23 Oct 2025 02:58:25 +0000
Manifest this update:     Thu 23 Oct 2025 02:58:25 +0000
Manifest next update:     Thu 30 Oct 2025 02:58:25 +0000
Files and hashes:         1: 1vBnJNCWhwftHfr9uyJYArPaoZQ.crl (hash: ZUxfv3WSw3kzSbAheIykI8om6YXjNzkYmZ5YrGNKWGA=)
                          2: 834FFE88679911EEB8243436C4F9AE02.roa (hash: Yrv7ZBN66aHo1fxboSYdyeMXxVo+vZh3rt3Di282sAw=)
                          3: C965E8C4679911EEB466ED36C4F9AE02.roa (hash: 4shhW+hfwKEr12lvGKCQFs6BqumTNDAweN+QTLEQJao=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.crl
                          rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vBnJNCWhwftHfr9uyJYArPaoZQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Oct 2025 02:58:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 686 (0x2ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1F95, serialNumber=D6F06724D0968707ED1DFAFDBB225802B3DAA194
        Validity
            Not Before: Oct 23 02:58:25 2025 GMT
            Not After : Oct 30 02:58:25 2025 GMT
        Subject: CN=68f999d1-8878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c4:2c:40:d6:60:5f:f3:c0:45:ab:b4:3f:3c:
                    42:f8:30:47:b1:56:ed:56:bd:c5:97:59:40:d9:1e:
                    1b:6f:84:cb:26:8c:dd:87:9f:5c:b7:24:c9:10:da:
                    d1:cf:1a:d5:75:7a:67:e1:1a:f4:60:60:ff:ff:9a:
                    23:2f:29:91:f8:9d:db:f2:07:13:42:24:58:c5:ec:
                    fa:87:c1:b5:c7:58:10:06:ee:8f:79:6d:4b:34:35:
                    64:d5:24:64:1a:98:3d:3e:1b:d9:2e:69:09:d9:4a:
                    8e:7e:24:cb:d5:10:92:da:e9:df:c4:70:54:76:78:
                    18:eb:93:00:4a:2d:7e:3f:1b:52:c6:25:5a:fa:e2:
                    50:2b:60:b7:4e:a4:55:d2:a8:01:3f:72:73:05:9f:
                    1d:6d:fd:5c:23:94:79:df:e8:96:09:af:cd:1d:31:
                    f1:d2:98:ba:fc:9b:3c:2b:47:83:b6:48:00:28:f1:
                    38:db:e5:45:da:c9:a0:a7:e8:a4:77:1f:35:ca:50:
                    d3:b2:8c:60:75:7a:c6:59:20:32:e7:bf:ef:cf:c2:
                    fb:ca:4a:24:16:4e:60:44:42:e1:87:9c:7d:d8:37:
                    e3:63:b3:93:5f:94:5d:ca:97:cd:54:a5:70:e0:4e:
                    92:e9:94:5f:d5:41:70:68:a7:f9:8c:45:35:19:52:
                    ed:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:07:49:A3:C1:1F:53:87:85:84:9A:8F:96:B3:DE:FE:95:DD:27:AC
            X509v3 Authority Key Identifier:
                keyid:D6:F0:67:24:D0:96:87:07:ED:1D:FA:FD:BB:22:58:02:B3:DA:A1:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vBnJNCWhwftHfr9uyJYArPaoZQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:0f:ba:16:e2:ba:86:92:04:c9:b7:4a:00:b5:a9:e9:33:8a:
         12:50:93:a3:b5:6b:18:4f:58:6b:95:53:32:f5:d9:df:8b:37:
         d5:48:18:1f:f9:0c:6e:62:79:df:26:a0:a2:ac:02:bf:3f:e7:
         c4:3d:af:53:13:a7:bc:e3:b0:c6:04:13:c0:74:1a:bf:44:bc:
         28:32:ff:e6:94:5f:a7:fa:ac:1e:f0:15:87:63:1a:21:b9:06:
         fe:94:6f:8d:93:6e:14:9a:7a:86:6b:6a:96:11:59:9e:2f:75:
         10:86:16:03:38:ed:f3:f5:b8:7d:fc:69:c8:80:04:b6:6b:e6:
         25:21:1e:52:03:89:70:ea:17:54:bb:d5:d7:34:5d:6f:18:76:
         d8:47:7a:18:ef:ab:dc:54:e4:a7:34:7e:dd:61:0a:45:f9:28:
         c5:4d:29:05:ad:40:12:bf:b0:4c:cd:a5:b5:e6:10:25:f7:70:
         3f:af:d8:71:98:1b:b2:3a:4c:40:06:1c:20:20:42:3e:51:14:
         81:89:c1:64:25:65:27:1d:8f:9b:77:ef:a8:38:ca:f0:a6:08:
         d1:ee:ef:52:3f:d5:7a:f2:f1:4d:3d:11:69:22:65:a2:3c:d8:
         c4:ca:c1:74:c1:33:05:95:d5:6c:de:9d:d8:3d:fb:ed:d2:bc:
         13:48:2a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 00:33:39 2025 by rpki-client