Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91164FE/B826CA8076BF11EEB14F2D72C4F9AE02/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.mft
File:                     5vCGwFxeBN2Wrg5fyQOXkaN1YP4.mft (raw, json)
Hash identifier:          597b887uzZ7oMULwQ7rc79Zm8j3E4YjcH1FXfuHPuJ4=
Subject key identifier:   99:96:BF:BC:33:B1:DA:C0:4D:45:7E:F1:D9:43:EA:59:C7:0C:43:DC
Authority key identifier: E6:F0:86:C0:5C:5E:04:DD:96:AE:0E:5F:C9:03:97:91:A3:75:60:FE
Certificate issuer:       /CN=A91164FE/serialNumber=E6F086C05C5E04DD96AE0E5FC9039791A37560FE
Certificate serial:       0175
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91164FE/B826CA8076BF11EEB14F2D72C4F9AE02/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.mft
Manifest number:          0172
Signing time:             Sun 19 Oct 2025 06:29:17 +0000
Manifest this update:     Sun 19 Oct 2025 06:29:17 +0000
Manifest next update:     Sun 26 Oct 2025 06:29:17 +0000
Files and hashes:         1: 5vCGwFxeBN2Wrg5fyQOXkaN1YP4.crl (hash: 0lPQEolqY/EJGeODC1asKbkco/v105LmoLNf63vQJmo=)
                          2: 63EC7E9476C211EE9FDED166C4F9AE02.roa (hash: VIpTaiDF//T8jK4C9n6iwAX2TMSKtXEtM34C7KtsS6o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91164FE/B826CA8076BF11EEB14F2D72C4F9AE02/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.crl
                          rsync://rpki.apnic.net/member_repository/A91164FE/B826CA8076BF11EEB14F2D72C4F9AE02/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 06:29:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 373 (0x175)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91164FE, serialNumber=E6F086C05C5E04DD96AE0E5FC9039791A37560FE
        Validity
            Not Before: Oct 19 06:29:17 2025 GMT
            Not After : Oct 26 06:29:17 2025 GMT
        Subject: CN=68f4853d-24db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9b:45:05:c3:65:ec:d1:87:3e:80:77:8b:02:
                    8c:e6:b3:25:98:bb:2f:65:79:67:b0:4a:7a:5a:9f:
                    07:0c:80:96:10:d1:df:45:fb:bb:ed:c7:70:9c:c3:
                    4e:8c:44:f4:58:2e:12:c8:21:78:be:ef:20:3b:95:
                    25:3e:e2:6e:dd:c0:39:29:96:cb:49:e7:b4:5d:db:
                    e3:f7:40:b8:a9:0e:96:4f:27:5c:0e:b7:2c:03:bb:
                    4e:08:b5:fb:8b:be:15:36:2a:e5:8c:be:99:04:9b:
                    6f:f3:ba:98:b3:3b:8e:1d:6f:a5:09:2c:05:db:b2:
                    38:e6:78:a4:18:e2:41:6d:07:68:8d:00:d2:8f:ce:
                    1c:5c:4d:47:0d:c8:ab:4b:97:45:e5:4b:5c:2f:44:
                    fa:c0:f8:55:eb:aa:b7:07:bf:96:b0:8b:a8:3c:35:
                    98:83:35:15:e9:e5:55:41:5f:d2:dd:7f:d0:e5:a4:
                    8d:0c:47:86:64:3b:76:54:db:07:e1:6e:96:c5:6f:
                    61:ef:84:f3:4c:6e:f5:a2:41:94:59:a2:f4:00:fa:
                    e6:45:ee:25:99:b1:23:77:4e:bb:b8:f8:ad:76:30:
                    6d:60:d0:18:d3:43:40:39:36:97:8d:b0:f8:4e:37:
                    c7:bc:c0:8e:e8:76:25:79:b6:84:7e:84:ca:0d:c6:
                    95:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:96:BF:BC:33:B1:DA:C0:4D:45:7E:F1:D9:43:EA:59:C7:0C:43:DC
            X509v3 Authority Key Identifier:
                keyid:E6:F0:86:C0:5C:5E:04:DD:96:AE:0E:5F:C9:03:97:91:A3:75:60:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91164FE/B826CA8076BF11EEB14F2D72C4F9AE02/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91164FE/B826CA8076BF11EEB14F2D72C4F9AE02/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:3e:a4:4c:96:45:00:6e:e2:bd:f4:c3:4a:b7:74:db:f1:41:
         77:03:38:5a:22:ae:52:de:29:70:81:93:1e:5c:c3:66:19:94:
         c9:9b:e5:d2:d9:99:7b:7c:4e:86:83:f0:9e:db:8a:13:6e:ba:
         a9:34:12:bf:70:51:ab:4f:d0:c7:f8:87:95:bb:3f:01:8c:fc:
         80:d7:82:8a:32:e7:97:e5:1c:37:73:4c:01:bb:83:17:6a:65:
         64:cf:1e:11:0f:af:d5:82:4b:b2:98:1e:8c:2d:60:d2:2c:1b:
         75:8e:30:16:c1:e1:24:e2:9e:94:80:60:9c:cd:4c:d7:b7:32:
         04:f8:89:48:d3:24:88:d8:55:84:74:3f:44:c6:90:86:0b:eb:
         b8:54:35:74:79:9b:a2:87:3f:db:06:8c:d3:fc:51:2f:c7:72:
         a3:87:5d:26:f2:2b:3e:9c:fd:39:af:4b:51:1b:8f:60:85:89:
         77:92:74:84:5f:fe:47:9f:b5:1f:2a:b1:c3:b7:5b:f7:30:8c:
         3b:39:7c:fd:27:27:c4:34:f7:dd:35:6a:7b:ca:20:ee:54:9a:
         67:f1:3d:99:83:52:83:26:c0:4b:12:c4:41:70:2f:50:7e:7e:
         38:fc:86:43:f7:bd:0f:f3:c6:7e:df:c3:9f:63:bb:b8:41:33:
         39:ec:00:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:09:34 2025 by rpki-client