Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft
File:                     CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft (raw, json)
Hash identifier:          OXGGeJ7UuI2u08zKUfURjLpKVP/M+05oSlhcSzpWHCk=
Subject key identifier:   C5:57:B1:FE:6E:D9:79:BE:FD:90:BC:DC:C7:81:99:14:AA:2C:D5:19
Authority key identifier: 09:97:14:A7:0E:6F:40:12:89:10:82:09:D6:A7:F4:85:9F:98:00:CC
Certificate issuer:       /CN=A91A5098/serialNumber=099714A70E6F401289108209D6A7F4859F9800CC
Certificate serial:       1DD1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft
Manifest number:          1DB8
Signing time:             Sat 18 Oct 2025 16:25:44 +0000
Manifest this update:     Sat 18 Oct 2025 16:25:44 +0000
Manifest next update:     Sat 25 Oct 2025 16:25:44 +0000
Files and hashes:         1: CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.crl (hash: d9P8SUczQT8VtvNNttnb1aORdXKi5gIG4kjdAB6926g=)
                          2: 945DB376E34711EE87868164C4F9AE02.roa (hash: jKYWlk4C7kYul3yO/WtiSzFFPrzY/sFxwRTKtBHcm64=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.crl
                          rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 16:25:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7633 (0x1dd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5098, serialNumber=099714A70E6F401289108209D6A7F4859F9800CC
        Validity
            Not Before: Oct 18 16:25:44 2025 GMT
            Not After : Oct 25 16:25:44 2025 GMT
        Subject: CN=68f3bf88-c435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5e:7f:56:6b:ab:bb:d9:97:e9:10:d0:a7:46:
                    9b:fc:92:02:f9:16:f6:91:24:bb:f1:36:81:23:03:
                    e8:38:56:8e:21:1d:db:86:89:39:20:03:4d:9f:58:
                    db:84:9e:5b:7f:bf:b0:9f:47:e8:2f:60:e3:2d:78:
                    1a:98:a7:7a:a5:7e:43:65:5e:53:d8:e0:8f:66:a9:
                    5b:a8:a3:9f:52:3b:06:92:14:10:49:ac:e6:d0:ab:
                    e5:69:3c:5d:6c:7e:b1:5d:f7:7d:e5:6a:b7:d8:d2:
                    2c:12:71:fa:63:db:e4:0c:95:23:5c:4f:d5:34:53:
                    2d:da:84:df:58:17:21:8c:2b:84:63:de:2f:38:72:
                    fd:0f:a7:52:6c:78:e5:af:dd:87:f7:0e:2e:56:7d:
                    af:14:ce:44:1b:78:e2:0b:e9:4d:e4:70:62:c8:a8:
                    98:b3:86:20:b3:d7:da:b7:eb:d8:49:2d:e1:a0:a1:
                    27:59:9b:ca:e0:bb:ef:2a:b2:a3:15:b6:cf:48:e6:
                    59:d2:cf:ea:fe:08:40:8d:f9:e2:d3:97:23:f7:4b:
                    d9:a7:ac:74:41:f9:d7:e8:b7:4f:19:17:99:86:5c:
                    47:ae:fe:f0:4d:4c:43:62:8a:6a:2c:6e:c9:73:f4:
                    7e:11:b2:3a:8d:fb:25:f7:84:23:05:26:be:46:97:
                    9a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:57:B1:FE:6E:D9:79:BE:FD:90:BC:DC:C7:81:99:14:AA:2C:D5:19
            X509v3 Authority Key Identifier:
                keyid:09:97:14:A7:0E:6F:40:12:89:10:82:09:D6:A7:F4:85:9F:98:00:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:54:6a:3b:c9:32:2c:8c:88:4a:9d:dd:5a:0a:a9:0a:f0:fe:
         78:75:63:df:46:e8:5f:46:0f:f6:2a:10:9f:72:30:d8:2a:ab:
         30:ce:c8:fe:78:67:b5:33:ca:86:ac:cb:13:20:5e:0e:52:7f:
         c6:53:f3:9a:ba:92:f3:9b:26:2a:5e:39:90:f3:2d:5e:3c:d9:
         d9:b2:b1:75:4a:19:aa:29:09:a1:83:be:c3:d2:55:20:97:ea:
         b2:42:cf:fc:12:b2:06:a8:ce:ee:d6:7e:6b:90:24:06:5e:b7:
         cc:c8:00:a5:7b:05:b5:f3:8e:72:c6:b7:51:fe:fd:5e:da:c2:
         ff:4c:20:62:37:4c:70:86:67:e3:12:da:3e:a8:85:4c:66:05:
         08:32:fc:1d:71:a4:72:5f:b3:0e:6f:52:3e:2f:a0:43:86:5b:
         b9:46:3c:09:04:98:eb:ca:4a:6e:b1:06:fb:8b:78:c0:7a:f5:
         94:b9:ba:b7:8c:2e:70:c1:f2:a6:03:bb:44:70:05:14:89:3e:
         d0:dd:b7:df:81:a0:89:2f:c6:58:aa:92:72:7d:f4:10:df:2e:
         8f:2d:ed:f4:9c:89:dc:8e:dd:8c:82:f5:f8:65:76:cf:d4:58:
         a1:a0:aa:46:ec:ff:f4:8d:79:69:37:b6:48:e0:68:da:0a:bc:
         63:03:5d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:46:33 2025 by rpki-client