Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.mft
File:                     T8Rg8J-QqobK9GfCha149DEnILA.mft (raw, json)
Hash identifier:          9YRerzFq+QQ4fMeswqFRfGttjRJlB/YlD6t4LZq31zU=
Subject key identifier:   AC:C4:62:63:D5:8D:B0:C0:FF:62:CB:A0:1C:AC:03:7A:A3:62:01:5D
Authority key identifier: 4F:C4:60:F0:9F:90:AA:86:CA:F4:67:C2:85:AD:78:F4:31:27:20:B0
Certificate issuer:       /CN=A91EDD99/serialNumber=4FC460F09F90AA86CAF467C285AD78F4312720B0
Certificate serial:       0119
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T8Rg8J-QqobK9GfCha149DEnILA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.mft
Manifest number:          0114
Signing time:             Mon 03 Nov 2025 04:54:31 +0000
Manifest this update:     Mon 03 Nov 2025 04:54:31 +0000
Manifest next update:     Mon 10 Nov 2025 04:54:31 +0000
Files and hashes:         1: T8Rg8J-QqobK9GfCha149DEnILA.crl (hash: xs0wMu7GqRfr+XdHfd/Y4/ihsMVXp627F9Bfaf/WGas=)
                          2: F394D822271911EF86EB1C09C4F9AE02.roa (hash: Qh8PjLgGSm0UikgzIoT2yOicsZXmat+tWnCt5geWY08=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.crl
                          rsync://rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T8Rg8J-QqobK9GfCha149DEnILA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 04:54:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 281 (0x119)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDD99, serialNumber=4FC460F09F90AA86CAF467C285AD78F4312720B0
        Validity
            Not Before: Nov  3 04:54:31 2025 GMT
            Not After : Nov 10 04:54:31 2025 GMT
        Subject: CN=69083587-5857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:85:70:fe:c5:cf:ea:9a:8b:53:d1:6f:e9:f4:
                    2a:10:7f:58:05:26:8f:bb:8a:23:63:b8:02:7c:b9:
                    38:bf:43:42:7b:33:e5:57:49:77:05:32:20:ea:00:
                    fb:ce:2a:34:03:c5:8d:dc:e0:73:e3:35:11:df:62:
                    32:68:dc:10:4d:a5:34:d4:01:18:54:0c:50:d9:28:
                    1c:c3:c6:30:0d:d2:31:54:b2:d1:79:9e:6d:51:17:
                    ee:d9:65:88:97:b6:96:ff:32:94:61:44:d7:f5:de:
                    9f:8e:01:7e:2a:67:e7:f0:67:38:c7:8f:fa:15:4f:
                    01:71:4d:04:26:e9:d2:1b:b4:e5:5c:44:15:14:00:
                    f8:73:6e:ab:df:bc:c1:e4:3d:24:df:ec:58:52:96:
                    c5:00:12:69:f3:a7:2e:7c:ad:b3:05:20:9b:f6:d9:
                    1c:87:6e:44:3d:0a:78:fe:b3:6b:65:20:b3:e1:90:
                    1e:a6:d1:2c:73:a6:ec:5f:32:97:6c:1e:41:85:48:
                    4d:25:87:1b:ee:aa:d2:52:f2:51:78:b3:3a:d0:2d:
                    fc:2d:f9:00:86:20:69:b3:e6:72:16:2e:d4:cd:53:
                    1c:19:73:5e:4d:7d:fe:57:ba:d5:b2:36:39:c2:56:
                    df:6d:38:84:43:e8:08:d1:b0:b8:dc:24:90:02:b0:
                    91:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:C4:62:63:D5:8D:B0:C0:FF:62:CB:A0:1C:AC:03:7A:A3:62:01:5D
            X509v3 Authority Key Identifier:
                keyid:4F:C4:60:F0:9F:90:AA:86:CA:F4:67:C2:85:AD:78:F4:31:27:20:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T8Rg8J-QqobK9GfCha149DEnILA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:ef:77:c5:c0:d5:29:56:19:c6:1f:55:30:15:49:be:60:5a:
         66:38:52:44:a8:1d:84:8a:10:12:db:6f:00:8f:3e:21:80:6f:
         24:60:8d:58:70:08:7d:2a:12:b3:4a:c8:ac:88:72:00:e0:1a:
         25:55:bc:b4:6e:08:03:aa:fa:47:f2:62:53:12:19:cc:7a:87:
         58:0a:0b:f7:61:bc:34:fc:44:e9:c5:68:09:ac:5a:e7:88:46:
         85:f4:52:c0:99:96:b2:45:c0:f8:20:d9:1b:03:93:12:9c:0e:
         28:05:7b:4e:71:5d:e4:1f:e7:30:4a:7f:18:19:2a:29:82:68:
         6a:b0:84:b6:fe:a0:e8:62:f1:a3:86:3d:cb:23:4e:26:90:5c:
         79:01:f6:1e:77:98:3f:45:75:e3:f8:42:7c:d5:84:0f:b6:9f:
         5b:41:53:46:58:42:ed:c0:98:82:2a:17:16:62:a0:ec:ef:60:
         e4:18:04:2b:64:44:d0:90:7e:32:1b:dd:9b:2b:0d:af:c1:e7:
         bb:80:45:39:90:20:3b:9c:66:b5:ab:32:75:e5:06:0b:5e:66:
         a8:f7:05:71:3e:46:56:53:1e:50:e3:23:be:2d:c7:91:50:05:
         18:16:1e:02:d3:08:25:c3:69:bc:dc:b2:51:b6:c5:bd:9a:6a:
         dd:71:fe:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:18:28 2025 by rpki-client