Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.mft
File:                     446z9aUQfjDwynHd6nWxcNCwMlY.mft (raw, json)
Hash identifier:          tcwDJEBX6HrH+jA+sbc39VApBl9bvLNGa8Q5J1XbixY=
Subject key identifier:   80:CF:9C:77:1F:DB:12:75:A5:3C:A2:1E:A8:0F:F9:5F:A0:FB:3F:B6
Authority key identifier: E3:8E:B3:F5:A5:10:7E:30:F0:CA:71:DD:EA:75:B1:70:D0:B0:32:56
Certificate issuer:       /CN=A91A5560/serialNumber=E38EB3F5A5107E30F0CA71DDEA75B170D0B03256
Certificate serial:       0120
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/446z9aUQfjDwynHd6nWxcNCwMlY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.mft
Manifest number:          0110
Signing time:             Sun 19 Oct 2025 07:58:13 +0000
Manifest this update:     Sun 19 Oct 2025 07:58:13 +0000
Manifest next update:     Sun 26 Oct 2025 07:58:13 +0000
Files and hashes:         1: 446z9aUQfjDwynHd6nWxcNCwMlY.crl (hash: iLnmGNJpIMxNo/nXPwhpP1OwZSZMuV7NA/Q5rAJWYkA=)
                          2: 7A9A936A9AC911F0B0769F75C4F9AE02.roa (hash: Lbb9uN05DsVT0248uhhIwxXcZbkEoim+rIYz/HSIkug=)
                          3: B84D6D3AF81811EFACB5925BC4F9AE02.roa (hash: iSgwGcm13o9Rt6IYRC8gB+G1pN+vluWHVfp7WXbTVyc=)
                          4: F9ECF4A0295A11EFBECFCA7EC4F9AE02.roa (hash: DUkD4dNjUkFTokfAlqm3Uyonu5h9UsmoJuMWKvodIy4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.crl
                          rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/446z9aUQfjDwynHd6nWxcNCwMlY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 07:58:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 288 (0x120)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5560, serialNumber=E38EB3F5A5107E30F0CA71DDEA75B170D0B03256
        Validity
            Not Before: Oct 19 07:58:13 2025 GMT
            Not After : Oct 26 07:58:13 2025 GMT
        Subject: CN=68f49a15-5a9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f9:8c:0f:e8:44:a7:a7:5f:aa:ee:8e:b8:5c:
                    b5:29:c2:a8:68:03:73:f3:61:35:82:93:cd:d9:5f:
                    f4:2e:e4:e4:3c:00:5d:31:a5:cd:07:d4:e3:3a:6d:
                    dc:60:7a:a5:da:97:09:0e:67:d7:52:cb:b4:3b:f0:
                    50:ab:cb:c7:89:95:d1:db:17:95:42:59:22:f6:3d:
                    2c:81:1e:45:e9:08:19:f8:a6:3f:45:3d:89:c3:d2:
                    0d:3e:2d:4b:56:25:08:f5:a9:96:13:c6:6f:1d:49:
                    0b:5f:8d:8b:83:38:49:09:d9:5e:73:11:ba:32:11:
                    8a:4f:b8:0e:02:e6:b0:a0:ce:eb:37:25:58:ca:11:
                    d9:ae:01:6a:f3:80:6d:85:e1:43:33:d6:4a:bd:49:
                    09:b4:f9:fe:33:39:08:d9:13:22:47:85:79:65:56:
                    50:29:e5:b2:75:65:a8:64:c7:df:16:bb:7d:12:e8:
                    7f:4a:da:6a:08:1c:f3:e3:71:ad:94:51:f1:4c:ac:
                    a4:45:ad:0a:89:09:90:e8:17:5a:3b:75:c5:84:e0:
                    0e:c4:1c:1a:bc:74:2d:44:85:da:8b:d3:5e:fe:72:
                    20:8e:f2:e9:79:48:a6:f6:db:05:c3:03:f7:c9:85:
                    79:74:ce:bf:c6:86:79:10:f5:90:db:bd:e8:8a:80:
                    e9:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:CF:9C:77:1F:DB:12:75:A5:3C:A2:1E:A8:0F:F9:5F:A0:FB:3F:B6
            X509v3 Authority Key Identifier:
                keyid:E3:8E:B3:F5:A5:10:7E:30:F0:CA:71:DD:EA:75:B1:70:D0:B0:32:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/446z9aUQfjDwynHd6nWxcNCwMlY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:2f:21:e5:02:1a:9a:d4:ac:96:5e:5a:2d:51:74:54:9e:71:
         f8:82:56:29:1b:ed:86:02:a9:a3:fa:29:b9:1f:80:ce:74:43:
         b4:ae:49:b7:97:a4:df:90:99:43:74:0e:78:46:3e:2c:42:aa:
         60:e0:95:7b:4e:a9:97:2d:8a:7f:25:71:bb:a5:75:24:3c:50:
         e5:85:42:2b:5e:69:2c:72:26:6a:25:99:5a:e1:6c:4a:19:15:
         14:27:27:8a:31:15:18:92:d3:cd:2a:da:0f:90:29:92:99:a5:
         d8:43:a5:a7:9d:83:82:a3:55:3b:da:86:d6:c5:9b:5c:3f:7f:
         ce:69:c4:97:89:23:ef:27:d6:f4:e7:69:d4:4e:0e:40:2e:7a:
         92:49:07:03:50:22:cc:b5:c5:65:53:56:bb:fb:c5:79:28:66:
         bf:27:93:e8:31:42:74:b4:a0:81:db:ce:f8:70:20:8a:7c:85:
         4b:a7:a0:c6:3e:ce:e6:7a:16:d2:57:c9:1a:22:ac:06:b0:cf:
         65:b7:4b:94:f8:ae:c2:b8:c6:a8:13:30:f2:d6:be:e5:2b:81:
         a5:ef:6f:a7:34:05:f3:48:ee:b3:11:c6:47:b0:f6:ac:96:be:
         a8:1c:7e:ab:29:cd:61:b6:d3:50:0f:e6:9c:b8:92:23:c5:a3:
         88:01:fe:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:10:53 2025 by rpki-client