Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.mft
File:                     FFSOcJSeUF-LqKU5HkZuHpnTtyc.mft (raw, json)
Hash identifier:          9560scpmKn7L0vIVWS1s3IATevdJxWNgQ+4atkn7vtQ=
Subject key identifier:   1A:71:48:88:62:BA:72:DC:33:3C:2B:0D:E1:C6:0B:FF:66:0A:71:B9
Authority key identifier: 14:54:8E:70:94:9E:50:5F:8B:A8:A5:39:1E:46:6E:1E:99:D3:B7:27
Certificate issuer:       /CN=A91193C1/serialNumber=14548E70949E505F8BA8A5391E466E1E99D3B727
Certificate serial:       0573
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFSOcJSeUF-LqKU5HkZuHpnTtyc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.mft
Manifest number:          0565
Signing time:             Sun 19 Oct 2025 01:06:25 +0000
Manifest this update:     Sun 19 Oct 2025 01:06:25 +0000
Manifest next update:     Sun 26 Oct 2025 01:06:25 +0000
Files and hashes:         1: FFSOcJSeUF-LqKU5HkZuHpnTtyc.crl (hash: fxqxpVkKrKJnkEkYVsPgfNeA50y/7yC3zsQa0iR+ByE=)
                          2: AC58009E782A11EFA7DD8F7CC4F9AE02.roa (hash: sZfCZ9XCzJg9q38s978ZoO/yQmeInU8GMq3otDrDntk=)
                          3: C8900982059611ECB2896C55C4F9AE02.roa (hash: B4anHJEaRTiTfVVaAnye8CZy9d3Hle7lj/K1p4d+P2s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.crl
                          rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFSOcJSeUF-LqKU5HkZuHpnTtyc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 01:06:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1395 (0x573)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91193C1, serialNumber=14548E70949E505F8BA8A5391E466E1E99D3B727
        Validity
            Not Before: Oct 19 01:06:25 2025 GMT
            Not After : Oct 26 01:06:25 2025 GMT
        Subject: CN=68f43991-d07b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:14:7a:59:4c:d9:48:97:b7:e2:30:2e:a5:f1:
                    0d:c6:10:ab:95:bd:59:02:66:53:c1:2b:ba:7a:a4:
                    11:74:42:cf:50:92:fd:c1:72:9c:3f:74:6c:60:d8:
                    43:8e:78:e6:4b:b0:82:e9:20:b2:c2:7e:a1:c8:41:
                    d4:58:f9:40:dc:2a:c7:d7:49:30:62:25:84:c8:0d:
                    a0:18:aa:bc:47:4f:32:70:bd:aa:59:6e:9b:ce:3b:
                    85:aa:9f:cb:2c:75:cf:05:a6:f8:31:5b:05:f0:86:
                    f0:4b:d1:1a:cf:9e:c4:ad:f4:95:e3:1f:9d:71:7b:
                    9d:13:40:9b:e2:c4:1e:ea:02:6c:2b:a0:84:77:d7:
                    64:27:cb:87:d4:cf:98:c3:5b:05:9e:34:b5:9f:bd:
                    1c:78:f0:72:7e:03:f8:a0:bd:48:41:a7:60:de:08:
                    b2:3a:b5:c6:9c:72:43:96:be:9c:d5:27:9f:56:ec:
                    c8:d1:e3:66:eb:f8:00:aa:f1:c4:c2:1e:3e:5a:42:
                    26:a4:2f:17:b4:12:0f:5c:38:98:3f:7d:30:a2:98:
                    29:cd:47:10:c4:d8:3c:dc:ed:37:db:05:3f:1d:91:
                    bf:f2:b4:26:20:ab:fa:a2:a7:84:33:aa:3e:38:d0:
                    3b:4a:ed:30:6e:db:04:93:a1:14:e8:81:8b:e6:77:
                    05:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:71:48:88:62:BA:72:DC:33:3C:2B:0D:E1:C6:0B:FF:66:0A:71:B9
            X509v3 Authority Key Identifier:
                keyid:14:54:8E:70:94:9E:50:5F:8B:A8:A5:39:1E:46:6E:1E:99:D3:B7:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFSOcJSeUF-LqKU5HkZuHpnTtyc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:2c:95:fb:0a:c3:1b:af:77:58:a4:34:b2:bb:de:26:3e:97:
         d7:c5:e0:72:18:bc:70:65:dc:3a:c5:f3:0e:e0:16:1a:be:cc:
         61:5e:3d:ef:0d:95:22:c5:33:b1:f0:4b:13:d5:22:d4:19:9b:
         1c:d7:56:f1:1d:d4:cb:52:d9:6b:22:b8:31:8e:31:72:81:16:
         00:d2:81:ad:b0:ae:57:c2:e3:3d:17:d0:d5:3f:7b:ce:7f:bf:
         98:89:09:63:c4:73:d9:fe:6e:42:d1:19:5d:b0:ef:5e:e0:21:
         11:90:47:2d:44:3e:25:9e:a4:cf:7c:2a:41:01:09:4f:5b:2b:
         9e:a8:37:70:50:6f:50:68:39:34:8a:9e:1f:90:93:cf:98:70:
         9a:e0:35:a7:c6:b3:7f:af:20:e6:49:a5:2d:cd:ef:c3:cd:78:
         18:0e:63:3f:16:fa:0a:a8:88:66:2b:40:d8:3e:ce:7f:45:d7:
         0e:10:17:99:5b:86:12:ae:c9:87:5a:46:cb:2f:f1:35:88:fa:
         cf:03:9c:29:72:e4:cd:8e:a3:7c:9d:aa:b5:ee:dc:de:8e:e5:
         66:71:73:62:31:2f:4c:66:ee:7b:72:2f:a7:7d:4b:64:a1:21:
         bd:e8:e8:fe:22:cf:bf:5e:34:e4:c4:24:bd:b7:c4:c6:e1:fe:
         29:9e:8d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:32:29 2025 by rpki-client