Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91717C0/018EBE58F31A11EABC00CC5CC4F9AE02/91FDq1voML6TvNd20zKw_Vt4fjs.mft
File:                     91FDq1voML6TvNd20zKw_Vt4fjs.mft (raw, json)
Hash identifier:          +P+IEY1kL/rW7OMMg95bxxNv1a1NE/xRCVu02YrAk7M=
Subject key identifier:   F5:BD:45:FE:5A:EE:90:34:65:22:A6:43:00:F4:C8:94:C1:20:10:6A
Authority key identifier: F7:51:43:AB:5B:E8:30:BE:93:BC:D7:76:D3:32:B0:FD:5B:78:7E:3B
Certificate issuer:       /CN=A91717C0/serialNumber=F75143AB5BE830BE93BCD776D332B0FD5B787E3B
Certificate serial:       081F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91FDq1voML6TvNd20zKw_Vt4fjs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91717C0/018EBE58F31A11EABC00CC5CC4F9AE02/91FDq1voML6TvNd20zKw_Vt4fjs.mft
Manifest number:          0818
Signing time:             Sat 18 Oct 2025 22:06:14 +0000
Manifest this update:     Sat 18 Oct 2025 22:06:13 +0000
Manifest next update:     Sat 25 Oct 2025 22:06:13 +0000
Files and hashes:         1: 91FDq1voML6TvNd20zKw_Vt4fjs.crl (hash: a89aQKGxCIP1d2VluoMHLkCKJ+XOLnzVU376kfE5RpQ=)
                          2: 94BF06A8F31D11EA8D62F57EC4F9AE02.roa (hash: QmpltAdf0nLFZT8gwBfGo76407/WjBUywxAPLq9iwsw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91717C0/018EBE58F31A11EABC00CC5CC4F9AE02/91FDq1voML6TvNd20zKw_Vt4fjs.crl
                          rsync://rpki.apnic.net/member_repository/A91717C0/018EBE58F31A11EABC00CC5CC4F9AE02/91FDq1voML6TvNd20zKw_Vt4fjs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91FDq1voML6TvNd20zKw_Vt4fjs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 22:06:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2079 (0x81f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91717C0, serialNumber=F75143AB5BE830BE93BCD776D332B0FD5B787E3B
        Validity
            Not Before: Oct 18 22:06:13 2025 GMT
            Not After : Oct 25 22:06:13 2025 GMT
        Subject: CN=68f40f56-3b85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4d:3b:d0:36:7e:37:2d:58:ce:ab:10:ae:7a:
                    d8:1c:49:13:3b:a8:a7:83:fa:7a:a8:64:60:2f:d2:
                    6d:15:77:49:cb:6d:a4:70:0f:be:d3:86:47:21:53:
                    80:78:57:2a:4f:ee:26:8b:24:47:32:3d:4e:97:26:
                    f3:37:60:ec:af:65:78:1f:70:82:8e:13:a0:ef:65:
                    d5:21:5b:a0:7f:8c:de:75:1b:b6:c2:31:d0:9a:b6:
                    02:32:1d:07:cc:e9:cd:34:10:1e:a2:37:93:03:f5:
                    5c:30:4d:f0:52:69:45:22:c1:5e:bf:2f:ed:f4:6c:
                    08:9a:ef:b0:43:f5:30:44:0d:f8:5a:a5:09:d5:3a:
                    07:23:74:0e:41:02:3a:e7:90:5a:71:13:09:d5:30:
                    26:6f:61:2c:f6:9c:b0:80:6a:5e:0b:ca:88:b5:fa:
                    2b:97:f1:ec:64:79:c2:ea:4e:36:dd:cb:2a:ca:da:
                    2f:65:df:4b:75:ae:46:e5:68:9a:5e:16:78:dd:45:
                    b9:04:4e:70:8b:35:eb:b1:0f:91:c8:6d:ae:f1:d6:
                    2a:33:a4:fc:c6:ed:13:2b:c8:d7:3f:b3:64:2e:94:
                    21:ac:e4:ef:4c:4d:6f:80:79:7f:94:1f:92:d3:a0:
                    83:b3:b0:4a:7e:b1:c7:49:dc:66:f9:f8:59:1d:89:
                    48:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:BD:45:FE:5A:EE:90:34:65:22:A6:43:00:F4:C8:94:C1:20:10:6A
            X509v3 Authority Key Identifier:
                keyid:F7:51:43:AB:5B:E8:30:BE:93:BC:D7:76:D3:32:B0:FD:5B:78:7E:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91717C0/018EBE58F31A11EABC00CC5CC4F9AE02/91FDq1voML6TvNd20zKw_Vt4fjs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91FDq1voML6TvNd20zKw_Vt4fjs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91717C0/018EBE58F31A11EABC00CC5CC4F9AE02/91FDq1voML6TvNd20zKw_Vt4fjs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:d7:e2:94:4e:de:7f:79:cb:ca:c1:8e:02:1b:63:df:25:a7:
         8f:26:65:dc:87:a5:22:09:a3:a5:16:32:68:e4:62:07:07:40:
         6e:a1:91:7c:a9:25:93:3b:4a:2a:cb:2c:3a:01:34:ca:b9:69:
         29:a0:d7:44:c6:60:a8:48:74:4f:99:30:a8:2d:fa:3c:7b:be:
         28:1e:22:5b:26:9a:84:aa:91:d6:db:18:4b:8f:22:26:96:c3:
         0c:ac:62:2d:b8:80:c0:10:ed:77:a6:f8:a3:4c:bc:86:fd:3f:
         2b:82:a3:fc:6c:01:41:de:b2:86:ef:83:5c:bf:da:0e:20:15:
         6c:16:83:a1:ed:e1:70:59:be:f9:03:d5:93:65:a4:7f:f4:b7:
         2e:61:35:5c:65:6f:fe:ef:f0:35:fc:e5:c3:a7:b2:8e:89:41:
         56:ba:8d:9b:65:eb:6a:e6:5c:a8:c6:f9:f6:ae:d0:09:91:ba:
         ab:58:40:64:9a:a0:15:e7:41:bf:1a:12:05:e1:0f:b0:0e:82:
         fb:01:6d:68:78:19:27:3f:53:65:19:60:3c:ae:9f:b7:b9:43:
         b4:39:b7:90:64:03:54:9b:be:f7:9c:36:94:da:b4:35:c6:42:
         23:eb:ff:5d:3c:ac:6f:42:be:0e:ee:4a:c2:79:02:5f:54:35:
         d4:21:85:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:33:58 2025 by rpki-client