Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.mft
File:                     zzsT07SYEjiVRn-_iuTtv-PJPXg.mft (raw, json)
Hash identifier:          UoKnIOfvty4/mkJi0N7du8+ssBg45ry2ZdVTDbiKlcc=
Subject key identifier:   B6:D7:2B:85:55:C0:4C:89:CD:AE:F2:00:68:BA:46:BA:89:B8:13:AB
Authority key identifier: CF:3B:13:D3:B4:98:12:38:95:46:7F:BF:8A:E4:ED:BF:E3:C9:3D:78
Certificate issuer:       /CN=A91D624F/serialNumber=CF3B13D3B498123895467FBF8AE4EDBFE3C93D78
Certificate serial:       0917
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zzsT07SYEjiVRn-_iuTtv-PJPXg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.mft
Manifest number:          0910
Signing time:             Sun 02 Nov 2025 20:14:46 +0000
Manifest this update:     Sun 02 Nov 2025 20:14:45 +0000
Manifest next update:     Sun 09 Nov 2025 20:14:45 +0000
Files and hashes:         1: zzsT07SYEjiVRn-_iuTtv-PJPXg.crl (hash: aL+GulwliZIH2LBYHXXBqxv/LYq7X/cNO5Zna1xvBvk=)
                          2: E43DC97CB46F11EA889ACA09C4F9AE02.roa (hash: D7lMNLpl3a55d9FcjuAmjfTmqkh4ktfxiUbFr9P5BYA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.crl
                          rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zzsT07SYEjiVRn-_iuTtv-PJPXg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 20:14:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2327 (0x917)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D624F, serialNumber=CF3B13D3B498123895467FBF8AE4EDBFE3C93D78
        Validity
            Not Before: Nov  2 20:14:45 2025 GMT
            Not After : Nov  9 20:14:45 2025 GMT
        Subject: CN=6907bbb6-589c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:4d:f8:aa:47:12:9c:0a:08:45:16:9d:fd:c9:
                    f4:66:9b:c4:cc:3d:3e:8f:4a:77:2d:69:f3:1a:e0:
                    87:a5:d2:fe:56:a7:f0:41:e9:55:26:93:fc:7e:80:
                    75:1f:ef:51:e2:cb:1e:6f:92:c1:23:8f:be:d0:f4:
                    f8:3b:76:9d:9b:72:15:da:8e:a3:30:6a:1e:b5:e7:
                    4b:fc:08:af:b7:1d:8a:fc:33:03:26:fc:f6:ac:df:
                    13:68:e2:0d:8c:56:35:88:ec:75:f9:7c:5b:cc:c3:
                    66:67:29:4f:c0:84:16:6f:49:ae:a7:8b:02:4f:db:
                    d8:8f:76:8a:ac:2c:b6:40:cc:cc:50:a1:b0:48:92:
                    49:c5:8f:8c:e0:d0:a0:44:85:0f:df:95:9b:3d:2f:
                    0d:b5:32:cb:4e:7e:67:34:04:90:66:b4:e3:5f:dd:
                    52:73:57:96:96:b2:65:1d:88:19:2a:91:f8:50:aa:
                    b3:ad:b2:7b:ac:15:f9:1c:b7:4f:5f:b0:37:4e:d4:
                    d8:70:01:92:26:73:b9:34:53:12:74:8e:f3:cb:a4:
                    94:99:a4:a3:35:e0:fa:65:de:43:84:3f:83:7e:9c:
                    50:81:f4:2f:5e:74:f0:70:3d:e5:15:92:de:1b:80:
                    9b:2a:a6:d0:1f:49:1a:3a:89:7a:5a:33:61:97:d3:
                    83:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:D7:2B:85:55:C0:4C:89:CD:AE:F2:00:68:BA:46:BA:89:B8:13:AB
            X509v3 Authority Key Identifier:
                keyid:CF:3B:13:D3:B4:98:12:38:95:46:7F:BF:8A:E4:ED:BF:E3:C9:3D:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zzsT07SYEjiVRn-_iuTtv-PJPXg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:03:64:41:5d:48:8a:83:8e:8e:40:7e:d9:b3:0a:7d:05:45:
         2e:7a:e4:fe:0b:9f:8a:45:3d:fc:18:58:13:63:83:94:c5:6e:
         31:c6:1b:01:a1:40:4a:d6:03:26:ff:d2:1f:4d:af:d3:33:01:
         43:1c:fa:14:91:1c:08:4f:b1:84:09:8a:64:e8:66:24:d6:8e:
         26:db:0d:d8:49:be:26:d0:d3:bf:4c:49:4f:0f:2f:b4:63:62:
         84:c0:63:e9:3f:c8:82:f7:c7:e9:4d:57:bc:b9:12:02:76:b6:
         82:74:fa:91:59:69:b6:48:57:0d:ee:bc:60:09:83:e2:cf:17:
         2a:b4:b9:4c:01:d5:ac:be:e6:d4:09:8a:02:5b:ea:8f:63:78:
         a0:64:2f:0e:4f:94:f7:cf:f4:26:65:26:d4:2b:88:70:c8:32:
         b6:a0:e3:f8:6f:a2:09:b8:57:d3:aa:76:be:0e:aa:73:b9:6e:
         d2:c5:b2:1f:13:ef:fa:63:3d:3e:67:43:8c:8f:59:1d:b6:8e:
         e7:3d:d4:c1:e9:1b:1b:05:48:d4:06:0e:4d:c9:60:3f:94:f8:
         ce:1c:a7:50:99:16:6d:8f:21:6a:81:38:3a:2c:48:55:26:1a:
         fb:e2:29:ef:1a:e9:6a:0f:a5:ce:17:11:ee:8e:bf:5f:80:1a:
         37:0f:26:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 08:30:29 2025 by rpki-client