Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91293F4/1F695EEC8E7F11EAA9584C67C4F9AE02/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.mft
File:                     5qVLrX0XbkRHqelPJEgDJ8G0DJ4.mft (raw, json)
Hash identifier:          wP9oa0NqS+ePRocV2WFtYNXtJ8CdA+ZmnBzKZNvZvjQ=
Subject key identifier:   78:13:99:A7:A8:FC:A3:5C:23:A4:1D:D9:7F:01:AC:C3:54:21:1F:FC
Authority key identifier: E6:A5:4B:AD:7D:17:6E:44:47:A9:E9:4F:24:48:03:27:C1:B4:0C:9E
Certificate issuer:       /CN=A91293F4/serialNumber=E6A54BAD7D176E4447A9E94F24480327C1B40C9E
Certificate serial:       09D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91293F4/1F695EEC8E7F11EAA9584C67C4F9AE02/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.mft
Manifest number:          09D0
Signing time:             Sat 18 Oct 2025 20:59:26 +0000
Manifest this update:     Sat 18 Oct 2025 20:59:26 +0000
Manifest next update:     Sat 25 Oct 2025 20:59:26 +0000
Files and hashes:         1: 5qVLrX0XbkRHqelPJEgDJ8G0DJ4.crl (hash: 9oA8O2QFFU40qkxkWtbTDWo0bC0ESMOP3+yWeo4puGA=)
                          2: 3E730FA28E8111EAB2038B6BC4F9AE02.roa (hash: xfLkI/h1XN/7CM8om6JZQHC5GByz3LQPllaxdjqu0tc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91293F4/1F695EEC8E7F11EAA9584C67C4F9AE02/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.crl
                          rsync://rpki.apnic.net/member_repository/A91293F4/1F695EEC8E7F11EAA9584C67C4F9AE02/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 20:59:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2520 (0x9d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91293F4, serialNumber=E6A54BAD7D176E4447A9E94F24480327C1B40C9E
        Validity
            Not Before: Oct 18 20:59:26 2025 GMT
            Not After : Oct 25 20:59:26 2025 GMT
        Subject: CN=68f3ffae-93c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:61:1a:73:a2:bb:72:56:19:a3:62:43:a3:98:
                    b6:7e:ab:36:7b:54:b8:dc:e2:ed:53:8d:a6:87:ff:
                    36:6f:a3:cd:e8:84:bd:86:75:6f:4a:3b:70:ae:4b:
                    95:72:a4:d8:ea:5b:d7:e9:cb:06:7f:60:fb:78:83:
                    ee:6c:b3:93:c9:92:a2:5e:58:70:d1:5a:80:b3:7f:
                    93:af:03:e2:43:4c:b8:95:61:4f:75:5d:79:42:14:
                    ad:79:7d:b3:70:a2:e4:fa:7f:49:75:1a:31:23:6a:
                    98:13:ad:3a:04:52:cc:a1:85:ea:8f:c6:e9:d4:b3:
                    ef:8e:7b:d2:47:13:5d:5a:7a:68:a7:b9:52:6b:01:
                    47:e3:38:fb:40:7c:fd:b3:46:6e:31:67:a8:c1:f9:
                    49:31:25:dd:c3:20:3c:e4:f1:31:20:4a:41:5d:25:
                    6e:8a:dc:8c:9f:0e:3a:eb:84:b0:38:c1:a1:5a:9a:
                    f6:b3:d9:78:cf:9d:9f:2d:20:f4:7b:2a:9d:37:cf:
                    5c:1f:92:3f:bd:18:eb:8b:cc:ad:ea:44:58:5b:5b:
                    af:43:a0:c7:a1:50:c6:e8:87:c9:95:bf:5e:d6:c8:
                    c6:23:fa:4d:04:e0:6f:b5:3a:84:13:32:40:94:23:
                    90:67:19:6b:8e:0e:49:35:6b:c4:9a:1d:ca:ce:cc:
                    7b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:13:99:A7:A8:FC:A3:5C:23:A4:1D:D9:7F:01:AC:C3:54:21:1F:FC
            X509v3 Authority Key Identifier:
                keyid:E6:A5:4B:AD:7D:17:6E:44:47:A9:E9:4F:24:48:03:27:C1:B4:0C:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91293F4/1F695EEC8E7F11EAA9584C67C4F9AE02/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91293F4/1F695EEC8E7F11EAA9584C67C4F9AE02/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:c1:59:99:e3:d4:60:aa:32:25:75:d7:55:ca:50:67:13:ef:
         a1:f0:74:a2:b8:f3:79:6a:3b:93:56:4c:f8:29:e9:c6:84:71:
         95:3e:ca:de:08:ff:19:ee:0c:1b:14:7f:74:71:dd:54:76:b5:
         ce:f1:2f:1f:43:04:31:2c:b2:a1:4a:c2:53:00:0c:32:85:7b:
         51:6b:d7:6e:4c:45:e2:d5:c3:27:e1:9a:09:bf:87:ee:8a:05:
         61:53:44:ed:3c:3a:1d:6f:6b:ad:d3:4e:a1:64:41:22:5a:9f:
         c1:fc:c8:35:45:88:13:a5:56:cf:bf:62:ee:37:d6:b6:0b:62:
         a8:19:d5:cb:c9:09:8c:94:1e:db:b9:eb:6f:8d:ab:45:b5:b1:
         a0:85:6d:51:5c:a8:2a:c1:b3:73:c8:e9:99:38:0a:09:6d:4d:
         bc:6b:80:a2:13:f7:30:4f:1e:2f:2b:02:3f:63:76:51:68:97:
         d2:6f:d6:1c:1a:46:9b:ea:a6:bc:d2:7f:4a:4d:c2:75:f5:4a:
         8d:fd:72:c3:52:91:97:0d:59:81:a1:40:93:a6:35:ae:97:c5:
         b6:0a:d8:5f:d7:9e:52:88:1b:c1:23:eb:04:cd:f6:6b:6d:12:
         8d:6c:95:01:75:a6:e6:dd:8b:c7:b9:af:66:20:30:19:c8:53:
         19:ae:a6:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:17:05 2025 by rpki-client