Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.mft
File:                     Z187oflqnh7CsBN2YsdU2x0eAHM.mft (raw, json)
Hash identifier:          E+/u0oAjCVNOk4lOZ5nmqGHrUAuNmWDdRE1uH+axSSY=
Subject key identifier:   23:EC:98:F9:C9:9D:B0:58:6B:AC:07:AB:DE:52:6B:8D:74:73:0D:7B
Authority key identifier: 67:5F:3B:A1:F9:6A:9E:1E:C2:B0:13:76:62:C7:54:DB:1D:1E:00:73
Certificate issuer:       /CN=A91A4517/serialNumber=675F3BA1F96A9E1EC2B0137662C754DB1D1E0073
Certificate serial:       295D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z187oflqnh7CsBN2YsdU2x0eAHM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.mft
Manifest number:          293C
Signing time:             Sat 18 Oct 2025 15:48:18 +0000
Manifest this update:     Sat 18 Oct 2025 15:48:17 +0000
Manifest next update:     Sat 25 Oct 2025 15:48:17 +0000
Files and hashes:         1: Z187oflqnh7CsBN2YsdU2x0eAHM.crl (hash: WDCyxqhe6MCAqGvaXa2o+nseguz4oUzQAe6WwcTvL8w=)
                          2: F4246CDA561811E98A165872C4F9AE02.roa (hash: C/PaFQfpTy7SRBE+0XzPzL+bck/ugVag2KSCjWGbACs=)
                          3: 58292E96774111F0A079543BC4F9AE02.roa (hash: cB0aG0QBKc7lbuLj1XFyRNR3680AdznFwoFOUAcWcEg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.crl
                          rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z187oflqnh7CsBN2YsdU2x0eAHM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 15:48:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10589 (0x295d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4517, serialNumber=675F3BA1F96A9E1EC2B0137662C754DB1D1E0073
        Validity
            Not Before: Oct 18 15:48:17 2025 GMT
            Not After : Oct 25 15:48:17 2025 GMT
        Subject: CN=68f3b6c1-9e2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:75:9a:4f:3d:e0:ab:51:27:e3:87:46:9f:b1:
                    3c:e0:b5:cb:63:78:64:3e:27:ce:2b:ad:04:4c:f2:
                    3a:1a:40:99:e0:c1:4d:e0:9c:28:c0:6a:e7:cf:72:
                    cd:88:80:c8:e5:fb:87:43:09:1e:e0:99:58:8d:17:
                    71:0b:40:93:64:35:99:a9:81:c5:5d:06:8a:c4:10:
                    1e:15:29:7f:c9:aa:11:75:13:0f:22:e9:6a:d1:77:
                    63:0a:83:e0:8e:6c:7b:6b:d3:07:61:22:4d:24:8e:
                    fa:3c:d6:7b:4a:52:f9:30:68:3b:5c:9e:b3:ce:05:
                    a2:c5:d7:f7:98:86:33:99:53:5b:80:91:88:63:cd:
                    38:08:d6:a1:0f:51:fb:f5:aa:0d:42:29:1a:a4:c6:
                    65:ef:9b:24:96:88:28:2e:96:89:86:88:60:fe:96:
                    79:d3:06:42:6c:93:df:08:e8:ea:75:74:65:30:88:
                    c2:42:07:be:9c:ba:95:21:9a:8b:97:2f:7d:74:86:
                    1c:c5:9e:ab:6a:e5:71:0b:a4:2c:09:f0:69:9d:3a:
                    fa:23:ef:d5:cf:9f:65:d7:81:93:b0:34:89:d3:6b:
                    fc:1d:2a:dc:5c:cd:53:61:9d:ab:0d:8f:c7:c5:7c:
                    e2:98:a1:f3:23:28:d3:a1:21:2f:48:3a:94:1d:c8:
                    70:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:EC:98:F9:C9:9D:B0:58:6B:AC:07:AB:DE:52:6B:8D:74:73:0D:7B
            X509v3 Authority Key Identifier:
                keyid:67:5F:3B:A1:F9:6A:9E:1E:C2:B0:13:76:62:C7:54:DB:1D:1E:00:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z187oflqnh7CsBN2YsdU2x0eAHM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:8b:46:37:a7:be:ca:57:b1:4e:f8:a1:e4:3a:5b:b3:08:b2:
         8f:d7:27:96:1f:7f:e3:1d:cb:62:84:a8:fa:81:f9:14:1e:90:
         8b:e1:a0:a1:71:f8:e7:ad:47:c3:b6:2a:78:cf:6a:43:64:c0:
         b3:76:11:cd:09:59:c6:b3:e7:0f:d9:8a:04:bb:a8:fb:80:07:
         d0:04:09:65:9e:e9:3f:c5:be:92:48:6d:cf:8f:a2:3f:fa:c5:
         20:3d:79:07:40:d6:c2:af:8f:71:95:27:30:cb:91:b7:87:ad:
         87:a4:35:2e:4a:ec:47:18:32:d9:95:36:c1:97:45:a4:1f:3a:
         2d:0a:df:ca:fb:68:48:4b:90:77:d7:26:ba:88:20:27:8f:6f:
         0b:87:bb:25:9e:1e:b6:25:3c:77:ac:07:04:5d:ea:44:e7:30:
         b1:aa:19:eb:b8:1b:c6:5b:d2:ee:3f:34:e4:4b:e9:76:36:be:
         2e:85:74:cc:f7:c3:75:cc:95:97:b1:7e:b9:28:d5:80:8a:81:
         df:69:29:36:f6:bc:ba:8e:7a:49:d8:43:c5:ef:b4:96:f5:8b:
         8a:25:e1:56:62:43:95:ff:cd:f1:7a:8c:cd:c6:22:51:11:cf:
         ca:16:ec:5d:0e:7b:bf:36:12:87:bc:8b:47:61:bf:42:63:c5:
         47:63:47:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:16:32 2025 by rpki-client