Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft
File:                     THDgIDLqWcKv1UGhhw10sEDRtqI.mft (raw, json)
Hash identifier:          fGtdxeawvIUVrUYLm61dVX5SEq/sbGFrVvCZOmGNvo4=
Subject key identifier:   91:BC:4E:FB:91:18:6E:C8:18:D3:53:21:BF:00:05:15:67:34:35:9D
Authority key identifier: 4C:70:E0:20:32:EA:59:C2:AF:D5:41:A1:87:0D:74:B0:40:D1:B6:A2
Certificate issuer:       /CN=A91D615F/serialNumber=4C70E02032EA59C2AFD541A1870D74B040D1B6A2
Certificate serial:       095F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THDgIDLqWcKv1UGhhw10sEDRtqI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft
Manifest number:          0956
Signing time:             Sun 26 Oct 2025 20:44:18 +0000
Manifest this update:     Sun 26 Oct 2025 20:44:17 +0000
Manifest next update:     Sun 02 Nov 2025 20:44:17 +0000
Files and hashes:         1: THDgIDLqWcKv1UGhhw10sEDRtqI.crl (hash: Bu5Yby/8AoMPxG6+zr7pYrC5tBH/Ols6reOYcAdIQws=)
                          2: 05CABF92A64111EAB544074CC4F9AE02.roa (hash: 9fYoRLuvAE3GnGPowVCGSoqu6QzF0dUDca3PyP5zjdg=)
                          3: 193128AAD15D11EE8BD5C02BC4F9AE02.roa (hash: /+hXj2B+GgaDbKZ5BK9B4X/m6qkH66B+b+D/QNmlbQE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.crl
                          rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THDgIDLqWcKv1UGhhw10sEDRtqI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Nov 2025 20:44:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2399 (0x95f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D615F, serialNumber=4C70E02032EA59C2AFD541A1870D74B040D1B6A2
        Validity
            Not Before: Oct 26 20:44:17 2025 GMT
            Not After : Nov  2 20:44:17 2025 GMT
        Subject: CN=68fe8821-7cec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:5c:ee:85:a5:2b:00:26:0f:6f:80:94:d0:67:
                    75:24:f4:fd:c2:de:cf:b7:95:bb:dc:61:86:67:05:
                    23:37:b8:c3:96:a9:f0:e7:0b:f5:1c:e5:97:20:23:
                    67:43:7e:52:8e:0c:7f:a7:6c:2c:44:80:61:0c:4f:
                    6e:05:84:83:4f:cf:c0:2c:3d:41:51:f1:54:d3:3e:
                    f8:77:b3:2c:a3:96:24:d8:da:b6:cb:8e:0b:b9:2f:
                    af:05:2f:73:db:c2:84:69:5f:f0:60:d5:23:c3:7a:
                    b9:6d:e0:ab:69:9a:1c:2c:eb:49:f1:92:96:08:5d:
                    ea:67:73:1b:58:b7:8a:dd:19:f7:f0:16:a4:46:96:
                    96:73:2b:14:ea:13:57:54:9c:f4:cb:a7:de:a1:a9:
                    ad:54:2b:18:e9:1c:ca:6b:9c:22:76:42:66:b5:d2:
                    67:2c:dc:25:41:05:db:06:47:83:fa:64:92:c7:5c:
                    37:15:43:6a:12:35:a2:e1:d8:dc:f0:3f:83:9b:85:
                    93:b0:97:c4:23:fa:49:4d:53:2f:17:d9:35:16:e6:
                    d0:82:f0:2b:b8:36:76:2c:42:4f:34:47:4c:3f:72:
                    5e:21:0c:6b:dd:34:e6:3f:22:19:e2:f8:a7:b0:28:
                    16:95:1a:e5:23:ed:f8:dd:c1:e2:ae:ed:88:0a:04:
                    5c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:BC:4E:FB:91:18:6E:C8:18:D3:53:21:BF:00:05:15:67:34:35:9D
            X509v3 Authority Key Identifier:
                keyid:4C:70:E0:20:32:EA:59:C2:AF:D5:41:A1:87:0D:74:B0:40:D1:B6:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THDgIDLqWcKv1UGhhw10sEDRtqI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:8c:5a:5c:f0:ec:87:d1:35:c6:74:b5:69:ef:54:42:58:8c:
         e3:c3:a1:3b:07:0d:38:dc:09:7d:ae:b3:ac:47:81:5d:cd:cf:
         37:d5:3b:67:8b:91:15:bb:27:eb:bd:14:53:cc:53:fc:0a:95:
         73:96:30:56:ba:a9:0d:51:c0:5a:5b:5b:ad:5a:7f:a4:a6:0f:
         40:72:f6:61:7b:38:c2:49:ca:b9:e2:ad:d5:f7:9c:00:c3:99:
         8b:25:19:34:e4:f6:74:2f:93:6f:be:93:29:e1:64:ac:a9:d7:
         a0:ad:60:ee:48:b2:d3:f2:39:65:44:ac:5a:3d:ab:d3:27:25:
         74:01:fe:52:1c:ed:d9:e0:10:60:ca:68:6a:8b:c6:14:9c:ca:
         fb:2a:ee:9e:f8:bf:99:ab:c8:0c:fc:fd:a2:66:a3:bc:8c:c2:
         ef:76:db:f7:31:59:de:cd:11:40:d1:4f:5c:a0:b2:13:19:9f:
         a9:6b:3a:bc:49:a9:92:e5:05:a7:6e:c1:35:b0:a1:d6:0c:ba:
         d7:49:fc:0b:29:ff:db:31:20:76:e3:22:4d:1d:db:01:ce:cf:
         db:77:66:a1:e7:55:ab:a6:7e:9f:ec:85:03:d2:36:03:31:58:
         5b:b5:89:a5:17:f2:3f:2f:89:38:de:a0:c8:4e:ec:3e:92:48:
         7c:06:b6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:27:55 2025 by rpki-client