Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D483A/0701B34A12D211EB9292D63FC4F9AE02/7c3wYKYQK_rQbrqNaDHShI0dvec.mft
File:                     7c3wYKYQK_rQbrqNaDHShI0dvec.mft (raw, json)
Hash identifier:          UZAPqnTac5/+1mx8wJYEbu9cqsMQ9ej5MsBnkE2Q1Ao=
Subject key identifier:   FD:AC:BB:77:A8:FD:BA:40:BC:14:DA:79:C7:9C:48:17:87:B3:66:1C
Authority key identifier: ED:CD:F0:60:A6:10:2B:FA:D0:6E:BA:8D:68:31:D2:84:8D:1D:BD:E7
Certificate issuer:       /CN=A91D483A/serialNumber=EDCDF060A6102BFAD06EBA8D6831D2848D1DBDE7
Certificate serial:       07DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7c3wYKYQK_rQbrqNaDHShI0dvec.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D483A/0701B34A12D211EB9292D63FC4F9AE02/7c3wYKYQK_rQbrqNaDHShI0dvec.mft
Manifest number:          07D1
Signing time:             Sun 02 Nov 2025 21:12:39 +0000
Manifest this update:     Sun 02 Nov 2025 21:12:38 +0000
Manifest next update:     Sun 09 Nov 2025 21:12:38 +0000
Files and hashes:         1: 7c3wYKYQK_rQbrqNaDHShI0dvec.crl (hash: yx1yZTsVBzvvxh90asbMLHq1Bvj5jK+/122oPmIC8uU=)
                          2: 03ADBBC4194B11EB8C73474DC4F9AE02.roa (hash: 9lbHf1cHckf8dUxoW20HZsn96REnlD7CWohZQ19csPA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D483A/0701B34A12D211EB9292D63FC4F9AE02/7c3wYKYQK_rQbrqNaDHShI0dvec.crl
                          rsync://rpki.apnic.net/member_repository/A91D483A/0701B34A12D211EB9292D63FC4F9AE02/7c3wYKYQK_rQbrqNaDHShI0dvec.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7c3wYKYQK_rQbrqNaDHShI0dvec.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 21:12:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2010 (0x7da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D483A, serialNumber=EDCDF060A6102BFAD06EBA8D6831D2848D1DBDE7
        Validity
            Not Before: Nov  2 21:12:38 2025 GMT
            Not After : Nov  9 21:12:38 2025 GMT
        Subject: CN=6907c947-562a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:9f:50:eb:fe:15:1d:7c:cf:10:2b:be:60:d4:
                    9a:1e:d7:07:ed:f1:09:50:80:9a:7d:62:36:3e:57:
                    b2:75:36:7e:41:c9:f2:f0:d1:dc:cb:c9:db:45:86:
                    8e:80:39:f0:8a:8f:47:9a:b1:d1:2d:40:bc:c7:e7:
                    51:81:c4:b8:63:5f:a8:64:71:a1:ae:8a:b9:5f:0a:
                    03:64:db:2a:ee:f5:73:c3:b3:93:f4:27:47:18:8e:
                    91:39:27:7a:36:3a:95:20:cc:8d:63:24:31:cb:8d:
                    d7:24:72:38:66:04:61:6a:d6:50:d3:fd:7c:0d:50:
                    9b:57:8f:cf:c1:9f:48:3e:80:f7:47:76:c6:39:5d:
                    a7:05:10:1f:53:2d:f2:7a:8f:cd:d1:77:9e:61:69:
                    aa:3d:61:2e:02:44:5f:ac:70:a1:b1:6f:10:ea:41:
                    7a:9b:74:90:9b:26:ea:3c:3e:19:1f:6d:da:c7:15:
                    9e:33:95:09:d6:67:5d:97:c8:50:43:5b:b4:06:7c:
                    a3:1c:61:ad:ce:dd:76:90:f6:ac:8c:09:08:c6:44:
                    f5:f2:25:77:69:d4:89:9d:a4:91:c1:88:a9:b3:86:
                    97:1e:df:70:ab:dd:7b:02:26:4e:aa:ba:a7:51:2a:
                    ce:f3:c3:ef:7b:9c:c2:aa:5f:7d:28:74:8a:eb:2f:
                    d1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:AC:BB:77:A8:FD:BA:40:BC:14:DA:79:C7:9C:48:17:87:B3:66:1C
            X509v3 Authority Key Identifier:
                keyid:ED:CD:F0:60:A6:10:2B:FA:D0:6E:BA:8D:68:31:D2:84:8D:1D:BD:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D483A/0701B34A12D211EB9292D63FC4F9AE02/7c3wYKYQK_rQbrqNaDHShI0dvec.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7c3wYKYQK_rQbrqNaDHShI0dvec.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D483A/0701B34A12D211EB9292D63FC4F9AE02/7c3wYKYQK_rQbrqNaDHShI0dvec.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:da:68:e6:f7:71:3f:30:cb:fd:0d:0d:84:54:a8:58:cc:2e:
         a6:de:0c:07:f5:44:c9:b0:16:f3:92:8f:9e:8f:60:aa:8d:f2:
         07:0b:7f:a3:0d:4f:b3:42:81:a5:49:f1:9f:b6:1f:8d:c1:bf:
         ee:b7:10:39:d0:1c:33:e0:d1:3e:e5:5e:b9:7a:73:44:55:3e:
         4b:22:45:c9:2d:98:c8:06:3d:dc:56:c7:f0:a5:84:b5:23:06:
         b1:00:aa:fd:c5:34:8c:da:b3:e2:aa:ec:0a:5e:cd:91:c6:0c:
         11:ee:84:c1:7a:3a:80:91:74:01:5b:b0:67:a0:e9:bf:59:a4:
         a9:cc:bb:57:bd:e8:af:f7:05:14:98:3a:a2:7e:87:10:49:ce:
         dc:c3:ff:42:71:a4:45:9a:68:8e:b2:22:4b:e1:6f:40:83:04:
         b8:ea:50:64:f8:c6:a5:3b:b5:38:04:06:e7:cf:d0:16:a3:a4:
         10:65:60:32:29:3a:82:02:e6:4f:c3:f8:b2:fc:dc:96:1c:23:
         04:d6:71:37:f6:79:cb:49:a6:85:a9:29:1c:bb:25:98:b1:e7:
         99:37:c2:0c:d8:f2:a9:24:b0:fa:a3:7f:db:d8:c2:67:5a:ce:
         e0:40:a4:92:1d:a8:79:f5:e2:86:36:8e:21:0a:c8:71:cf:2f:
         27:2a:29:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:07:01 2025 by rpki-client