Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.mft
File:                     aj72cYLbsPbM88pBN4wBGYBq6b0.mft (raw, json)
Hash identifier:          TgobYPkP4q5AYgZiQyv7VLPlMLMexkOphLVY2TXLOfM=
Subject key identifier:   93:4A:F9:48:53:C1:61:35:AA:BC:8F:DC:72:DF:AE:23:70:CD:2D:B3
Authority key identifier: 6A:3E:F6:71:82:DB:B0:F6:CC:F3:CA:41:37:8C:01:19:80:6A:E9:BD
Certificate issuer:       /CN=A91A0A2E/serialNumber=6A3EF67182DBB0F6CCF3CA41378C0119806AE9BD
Certificate serial:       84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aj72cYLbsPbM88pBN4wBGYBq6b0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.mft
Manifest number:          81
Signing time:             Sun 19 Oct 2025 09:57:48 +0000
Manifest this update:     Sun 19 Oct 2025 09:57:48 +0000
Manifest next update:     Sun 26 Oct 2025 09:57:48 +0000
Files and hashes:         1: aj72cYLbsPbM88pBN4wBGYBq6b0.crl (hash: CFrT5OzeTrktUoLFxlGxUm45+CbXChhamEcoHQURT6E=)
                          2: FDE6938CE90C11EFB9D98326C4F9AE02.roa (hash: EQY90pkMKZS20T7XhciTL191HbTMnbpWtQHaja8QyGI=)
                          3: F449A3FCE9C811EF9972A934C4F9AE02.roa (hash: 7MwfNHRXASMEn22ZfT4zj9oG/ZQKY9GDP1pjifjdSXI=)
                          4: FD63D5BEE90C11EFB9D98326C4F9AE02.roa (hash: XHfUu+5yh0x5y1fbUjOYEtUpMyJC2J2Z1oZf8nnZcak=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.crl
                          rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aj72cYLbsPbM88pBN4wBGYBq6b0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 09:57:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 132 (0x84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0A2E, serialNumber=6A3EF67182DBB0F6CCF3CA41378C0119806AE9BD
        Validity
            Not Before: Oct 19 09:57:48 2025 GMT
            Not After : Oct 26 09:57:48 2025 GMT
        Subject: CN=68f4b61c-eebb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:32:b5:58:90:29:92:6c:44:44:2a:27:76:50:
                    29:00:92:e0:85:0e:bd:4d:0c:be:8c:65:15:44:16:
                    e6:ad:15:a0:57:cd:5c:0b:67:66:59:49:77:42:41:
                    4f:52:c3:27:a6:13:bf:76:a6:6f:7e:9c:72:a5:dd:
                    2c:0b:41:68:08:2c:5f:8a:e2:af:76:b5:8d:20:33:
                    6d:f2:b7:30:9b:b4:48:89:18:2c:ef:11:31:f9:42:
                    2c:de:f3:82:e7:43:53:ba:79:f2:2c:74:d9:41:d3:
                    17:13:7f:25:e5:57:28:96:64:52:e2:1d:7f:cc:a3:
                    46:fd:11:28:34:ec:91:f6:8b:8f:5d:77:44:c0:5a:
                    1e:84:df:aa:be:10:dd:91:81:83:71:0b:ae:b8:01:
                    36:fd:75:76:b3:15:2a:f2:6a:a5:24:38:7a:4a:7a:
                    bd:ec:31:4e:14:62:2e:a4:b8:ab:ac:d9:93:03:b7:
                    fe:86:f6:94:d0:d3:90:5f:21:3f:a3:c7:cf:7e:a0:
                    42:df:03:be:cc:9a:4f:ff:f6:55:ff:bc:7a:df:c2:
                    a9:af:b0:e1:62:29:16:c7:81:5b:b4:39:a9:1d:87:
                    d4:ec:6a:46:e7:74:d3:44:2d:26:57:76:1d:5e:da:
                    2e:36:3d:5d:a4:a1:de:2f:9f:41:f4:64:93:dd:14:
                    fb:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:4A:F9:48:53:C1:61:35:AA:BC:8F:DC:72:DF:AE:23:70:CD:2D:B3
            X509v3 Authority Key Identifier:
                keyid:6A:3E:F6:71:82:DB:B0:F6:CC:F3:CA:41:37:8C:01:19:80:6A:E9:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aj72cYLbsPbM88pBN4wBGYBq6b0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:cf:1a:98:e3:c6:e8:de:c4:d2:a2:bd:6a:09:94:41:6f:5d:
         df:ab:12:3d:ea:71:13:d5:b9:35:8f:05:1a:d7:a3:9d:d5:4a:
         1d:cb:e7:45:00:c1:0d:ac:80:50:39:36:29:64:4b:49:ab:30:
         76:da:77:01:dc:ab:09:76:4a:83:b3:19:6b:f9:cd:57:cc:e4:
         31:02:de:be:a9:df:df:53:ae:73:69:db:37:4a:d6:02:34:84:
         0d:28:b4:55:4e:8f:ab:46:78:e8:3f:37:c3:16:e4:fa:2b:ae:
         44:b0:52:cf:e8:e9:36:a3:70:fa:ea:e4:5a:9b:6b:1f:93:7d:
         2a:10:09:c7:34:f6:b8:4d:a2:e2:51:c0:de:bc:1b:b6:d4:77:
         74:86:03:8a:26:a8:54:d6:72:da:ef:3c:49:59:60:c1:16:da:
         22:45:73:c3:ea:9e:6f:61:ed:88:f6:f9:5f:2a:74:71:c9:73:
         88:c5:da:a6:eb:eb:f4:e7:3a:d5:26:c1:0e:0f:bf:78:94:3d:
         9c:0f:5f:22:92:f2:26:2c:52:b8:5c:c2:a9:39:dc:2d:91:0e:
         51:08:33:dd:cf:97:48:b1:f2:c8:75:10:dc:90:f6:1b:9d:fc:
         5a:8a:e8:e3:c4:55:30:ed:7b:1d:f3:4d:d1:13:23:90:db:68:
         7a:2e:29:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:46:03 2025 by rpki-client