Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft
File:                     CyVhxLV9qB1w85cksN4scQF0n10.mft (raw, json)
Hash identifier:          tSLXeKqzCoTysN75D1XYEgJt/DdEXJJKAiAh5bzVCqA=
Subject key identifier:   1B:0E:C2:DA:69:B4:90:F2:4E:DF:51:A9:05:AC:E6:87:D8:31:10:5A
Authority key identifier: 0B:25:61:C4:B5:7D:A8:1D:70:F3:97:24:B0:DE:2C:71:01:74:9F:5D
Certificate issuer:       /CN=A91E1155/serialNumber=0B2561C4B57DA81D70F39724B0DE2C7101749F5D
Certificate serial:       0F52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CyVhxLV9qB1w85cksN4scQF0n10.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft
Manifest number:          0F45
Signing time:             Sun 02 Nov 2025 17:36:26 +0000
Manifest this update:     Sun 02 Nov 2025 17:36:25 +0000
Manifest next update:     Sun 09 Nov 2025 17:36:25 +0000
Files and hashes:         1: CyVhxLV9qB1w85cksN4scQF0n10.crl (hash: 5bgb0rOvv//EA11Rq8tIvbJkjejIqpJEbLBkHPyAP2s=)
                          2: 4B1E3E947EB411E994ED5B25C4F9AE02.roa (hash: v5g7cjNReibtump5AZbTVG2Okqg2HIeG+osQENS8uAY=)
                          3: AC8695B8A60611EE8FEB2160C4F9AE02.roa (hash: e0d6vw79IEqP0AdvR6b4v7RskAnTjUKydxlFYiex0pY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.crl
                          rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CyVhxLV9qB1w85cksN4scQF0n10.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 17:36:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3922 (0xf52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1155, serialNumber=0B2561C4B57DA81D70F39724B0DE2C7101749F5D
        Validity
            Not Before: Nov  2 17:36:25 2025 GMT
            Not After : Nov  9 17:36:25 2025 GMT
        Subject: CN=6907969a-2c25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c1:a9:f5:17:b4:83:05:76:67:f7:b5:9b:05:
                    d0:a2:9b:6b:59:7f:d7:73:c9:96:bf:9a:fc:35:cc:
                    5c:d6:17:68:a4:a9:00:fa:39:17:98:e9:2c:8a:b1:
                    01:7a:31:87:9c:f7:0b:40:35:53:d5:e1:1a:3a:c0:
                    4c:ae:b7:ff:36:53:06:f6:94:19:59:27:f4:3c:fe:
                    21:5c:70:ee:57:1d:f5:cf:41:3b:5b:02:e7:ad:06:
                    12:f5:31:54:52:e2:0d:4b:66:6d:ff:8a:4c:bf:b3:
                    cb:0a:21:5e:51:cf:98:24:16:1b:63:c1:36:53:9f:
                    c5:3a:32:85:60:4c:7d:8f:74:61:e1:18:e1:7f:90:
                    09:89:9c:a9:02:8c:54:ce:10:e9:87:f4:c3:23:13:
                    23:a8:ab:99:5d:ed:d5:49:bf:0d:dd:46:5b:25:54:
                    fa:c2:3b:da:f0:c0:c5:e6:e4:4e:72:22:a0:26:97:
                    8f:a8:61:59:7c:27:2c:57:4f:3b:ae:a0:aa:55:bd:
                    0d:dc:80:96:ab:8a:ef:36:55:ff:2f:a6:88:b8:75:
                    c4:db:56:ba:6f:5e:07:0f:1e:be:dc:fe:41:24:6b:
                    46:79:1f:3e:a7:33:c2:7e:07:df:2d:19:1a:06:14:
                    4a:84:f2:72:a8:ba:67:05:05:96:5f:47:46:f9:e2:
                    f6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:0E:C2:DA:69:B4:90:F2:4E:DF:51:A9:05:AC:E6:87:D8:31:10:5A
            X509v3 Authority Key Identifier:
                keyid:0B:25:61:C4:B5:7D:A8:1D:70:F3:97:24:B0:DE:2C:71:01:74:9F:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CyVhxLV9qB1w85cksN4scQF0n10.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:34:eb:6f:84:61:a3:a0:2d:ae:02:47:17:8f:fa:52:c3:c3:
         c7:b5:69:cf:20:c9:54:b6:b2:00:d1:a9:3f:a8:af:d4:fc:09:
         7a:22:5e:5f:29:72:13:e0:8c:b0:7a:a5:9c:b6:3e:88:16:5f:
         78:73:34:bc:99:f1:65:49:33:12:a3:19:2a:f2:27:db:87:05:
         f4:89:37:b8:7a:98:8b:2f:cd:a0:cb:ac:4e:1c:b0:b9:cf:1b:
         2c:fb:08:a4:f8:16:e0:c8:c2:b7:4b:be:1d:a5:26:be:dd:bc:
         3b:79:82:37:84:f6:7f:a5:16:a4:11:2b:ed:d7:cc:c0:f6:9a:
         6a:07:4e:b3:bb:6b:cb:e9:fb:25:7b:94:c6:e4:03:75:ea:d3:
         80:5c:06:7d:e6:74:5f:85:81:75:8f:6b:ec:1a:bd:31:56:ae:
         51:e2:c4:04:d9:54:11:6b:af:45:cc:be:81:c4:7f:31:2e:6e:
         1f:8c:de:7b:a6:05:d6:ca:8c:e0:15:2c:dd:d9:2b:b4:24:31:
         7f:04:82:2b:e6:8d:43:dc:78:fc:8a:fc:78:1e:9f:ab:46:00:
         61:0e:50:ac:40:5d:78:08:e3:56:16:c3:fd:35:0f:b3:5b:20:
         00:68:b6:55:36:28:4c:64:c5:d9:8c:45:11:7b:bd:1a:8a:87:
         df:bd:fd:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:18:30 2025 by rpki-client