Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.mft
File:                     N0X7n36iweJS0pvv2GphV3YNiMA.mft (raw, json)
Hash identifier:          T0r+9QJ00faV375owo5QSI47ucag5xOTo3awbFLjegk=
Subject key identifier:   27:BC:22:8A:04:3E:52:40:3D:5C:C8:0F:8B:32:C1:E5:D7:70:FB:DD
Authority key identifier: 37:45:FB:9F:7E:A2:C1:E2:52:D2:9B:EF:D8:6A:61:57:76:0D:88:C0
Certificate issuer:       /CN=A91EEAD3/serialNumber=3745FB9F7EA2C1E252D29BEFD86A6157760D88C0
Certificate serial:       0112
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N0X7n36iweJS0pvv2GphV3YNiMA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.mft
Manifest number:          010F
Signing time:             Wed 05 Nov 2025 05:04:49 +0000
Manifest this update:     Wed 05 Nov 2025 05:04:49 +0000
Manifest next update:     Wed 12 Nov 2025 05:04:49 +0000
Files and hashes:         1: N0X7n36iweJS0pvv2GphV3YNiMA.crl (hash: cR3jee6wmqiZZcY+MQbqapn+neqzQrzzXqR4NJib5mQ=)
                          2: E989DE0C1E2E11EFB8D12A2BC4F9AE02.roa (hash: PkN1Jtt374CIHLZsHPqXl9liocYOPeAQiQHQB34mvOQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.crl
                          rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N0X7n36iweJS0pvv2GphV3YNiMA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 05:04:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 274 (0x112)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EEAD3, serialNumber=3745FB9F7EA2C1E252D29BEFD86A6157760D88C0
        Validity
            Not Before: Nov  5 05:04:49 2025 GMT
            Not After : Nov 12 05:04:49 2025 GMT
        Subject: CN=690adaf1-c510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:73:b3:25:4e:f9:0e:15:c1:e3:a9:d1:81:85:
                    54:31:c9:2b:93:e6:44:53:78:66:6f:44:42:06:29:
                    c3:fd:0e:bd:91:6b:a2:a9:de:e4:5b:42:31:2a:5f:
                    e6:77:44:39:3b:fc:8b:d0:1b:70:0c:52:3f:20:1b:
                    ba:6d:bc:fe:9b:a7:61:d1:3f:20:fb:8c:18:3d:a2:
                    f7:a5:eb:d4:c8:86:25:a7:7a:3b:76:f7:9d:66:1b:
                    74:1b:67:c6:74:c8:02:60:89:24:86:e5:bd:33:7a:
                    65:ca:89:6e:cd:4e:9b:4b:83:9a:fc:6f:a1:2f:6b:
                    72:94:27:0c:88:64:35:f2:16:fa:2b:3b:26:cf:d4:
                    7f:2a:22:2c:71:c0:cf:c2:bb:0b:9f:92:40:01:71:
                    b0:d4:2f:13:33:b4:f1:3a:42:ad:4d:d0:d3:23:a1:
                    f1:9d:55:ae:68:2e:56:82:47:19:3d:54:7b:50:8e:
                    2c:d8:89:a9:e0:14:23:33:b8:6c:b5:f6:d3:d8:18:
                    97:c4:d5:91:f8:49:37:49:24:4f:41:fa:4e:44:f9:
                    70:ce:4f:4e:68:2d:e8:57:90:cf:5a:b4:e9:78:d5:
                    00:33:1f:9d:67:f1:0d:32:9a:82:6e:f3:3e:bb:43:
                    c2:40:84:d4:2a:1d:de:8c:41:72:6c:aa:12:99:67:
                    12:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:BC:22:8A:04:3E:52:40:3D:5C:C8:0F:8B:32:C1:E5:D7:70:FB:DD
            X509v3 Authority Key Identifier:
                keyid:37:45:FB:9F:7E:A2:C1:E2:52:D2:9B:EF:D8:6A:61:57:76:0D:88:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N0X7n36iweJS0pvv2GphV3YNiMA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:56:d1:8e:bb:f8:f7:e8:4e:d5:d6:ac:ad:9d:14:8e:78:ec:
         b4:5e:f0:d8:a9:60:97:95:26:9b:64:71:35:e0:01:ac:a4:01:
         38:c8:2b:aa:1c:03:c8:7e:1f:2c:19:59:c5:cc:0f:ba:05:45:
         f8:5c:d2:53:bd:c8:5b:43:83:da:2c:83:d5:c1:62:be:f2:28:
         76:49:0e:f8:59:5c:e8:ac:d6:df:1b:36:de:90:20:4b:f4:c7:
         e1:24:89:be:1f:c9:43:20:1c:74:92:f1:80:21:15:b7:fe:35:
         de:e8:fd:cd:47:50:3a:5b:f0:05:3e:d2:ff:d2:c0:e7:5f:79:
         4d:02:ae:03:62:e6:7b:5b:1a:d6:0b:d2:f9:4f:30:ec:18:5c:
         0d:f0:05:c1:ec:a1:78:2e:eb:bb:9c:91:68:70:1c:ab:55:84:
         90:55:86:b7:86:ce:5d:94:5c:ff:4e:20:f8:c0:45:2e:71:83:
         59:4f:8b:17:56:70:54:9b:1e:e8:f1:ed:2e:81:32:33:ee:12:
         2a:1a:d8:89:82:af:40:78:52:da:2f:c3:6c:c4:a9:bd:92:1f:
         6e:e7:74:02:43:aa:0f:0c:a0:2b:65:5e:c8:80:c0:90:41:2b:
         20:4c:3d:fe:4e:38:7a:6a:c8:33:84:96:66:af:d7:29:f1:d4:
         4c:2a:e8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:26:22 2025 by rpki-client