Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7E29/56F1C532879011EC86D0441EC4F9AE02/1f9FyAWBJcJy3wRtwLjgb6owT88.mft
File:                     1f9FyAWBJcJy3wRtwLjgb6owT88.mft (raw, json)
Hash identifier:          x94dZvZQvvBFIhm+DtdCgXlRXo/rYHMmAP4Z/YseJmY=
Subject key identifier:   65:22:D6:49:3E:4B:02:39:C9:84:E1:4D:3B:21:0F:4E:D1:60:3A:9E
Authority key identifier: D5:FF:45:C8:05:81:25:C2:72:DF:04:6D:C0:B8:E0:6F:AA:30:4F:CF
Certificate issuer:       /CN=A91A7E29/serialNumber=D5FF45C8058125C272DF046DC0B8E06FAA304FCF
Certificate serial:       0426
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1f9FyAWBJcJy3wRtwLjgb6owT88.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7E29/56F1C532879011EC86D0441EC4F9AE02/1f9FyAWBJcJy3wRtwLjgb6owT88.mft
Manifest number:          041E
Signing time:             Sun 19 Oct 2025 02:18:22 +0000
Manifest this update:     Sun 19 Oct 2025 02:18:21 +0000
Manifest next update:     Sun 26 Oct 2025 02:18:21 +0000
Files and hashes:         1: 1f9FyAWBJcJy3wRtwLjgb6owT88.crl (hash: EMrCGvXVJSp26X1ZCxiY9dnYsQW4Z25cyQ1c4GIoq+w=)
                          2: 99F51284A1E911EDAD7CE929C4F9AE02.roa (hash: DgFh0007lZzBIY6/Uazy8v7Lvih8jtP3rAyQ1LouyMA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7E29/56F1C532879011EC86D0441EC4F9AE02/1f9FyAWBJcJy3wRtwLjgb6owT88.crl
                          rsync://rpki.apnic.net/member_repository/A91A7E29/56F1C532879011EC86D0441EC4F9AE02/1f9FyAWBJcJy3wRtwLjgb6owT88.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1f9FyAWBJcJy3wRtwLjgb6owT88.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 02:18:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1062 (0x426)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7E29, serialNumber=D5FF45C8058125C272DF046DC0B8E06FAA304FCF
        Validity
            Not Before: Oct 19 02:18:21 2025 GMT
            Not After : Oct 26 02:18:21 2025 GMT
        Subject: CN=68f44a6d-81e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:8d:57:9a:60:9a:17:af:3e:06:c0:ac:78:43:
                    81:b0:1a:2d:71:83:e0:f4:fb:24:f1:8a:69:32:f5:
                    4d:bc:b5:8c:63:ee:e1:58:60:3e:a6:89:e5:c6:2d:
                    c9:b4:4a:d5:01:ec:29:99:59:57:08:45:77:31:97:
                    ba:82:ac:b3:e0:9b:74:08:da:20:73:fd:f6:ca:78:
                    68:66:cd:44:54:58:7e:e9:67:14:df:c4:f9:fe:f2:
                    c1:e5:82:a7:bd:ce:fb:91:98:d0:08:d5:30:9a:94:
                    ab:27:56:8c:bd:2f:2c:a1:30:49:95:c5:53:6e:a8:
                    e3:9a:d5:2b:a5:90:ad:ba:a0:c3:f5:df:d9:de:6e:
                    52:9d:2e:b2:47:97:43:50:b6:bd:ea:ef:ae:9f:2d:
                    67:8b:44:04:f1:ba:2a:d3:6b:f0:48:8e:92:5e:0e:
                    58:e4:e0:a0:82:a2:91:a2:b8:dd:c4:36:c9:34:ef:
                    52:31:14:9e:0c:15:27:14:6b:9e:fc:cd:cd:71:84:
                    a8:02:02:ed:6d:4c:60:23:14:77:33:73:5e:66:0e:
                    08:55:43:f3:49:fc:63:49:c0:65:88:94:e4:66:a3:
                    e9:ca:b3:45:fb:3c:a5:fe:06:47:4f:31:41:79:9e:
                    f5:16:cb:ad:cc:38:64:08:ad:42:95:4f:62:fd:37:
                    f3:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:22:D6:49:3E:4B:02:39:C9:84:E1:4D:3B:21:0F:4E:D1:60:3A:9E
            X509v3 Authority Key Identifier:
                keyid:D5:FF:45:C8:05:81:25:C2:72:DF:04:6D:C0:B8:E0:6F:AA:30:4F:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7E29/56F1C532879011EC86D0441EC4F9AE02/1f9FyAWBJcJy3wRtwLjgb6owT88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1f9FyAWBJcJy3wRtwLjgb6owT88.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7E29/56F1C532879011EC86D0441EC4F9AE02/1f9FyAWBJcJy3wRtwLjgb6owT88.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:f5:e3:59:e0:3f:9b:aa:25:9c:b4:65:99:64:49:74:82:32:
         fd:b9:38:77:46:f3:67:45:8d:17:ea:e6:9d:04:6f:01:f2:57:
         c2:54:de:31:0b:99:d1:f7:6a:7d:15:af:de:cb:48:14:b9:ad:
         61:25:b7:85:b2:17:86:54:30:70:a9:3a:9f:97:68:6b:62:03:
         1d:63:44:fc:58:c2:44:cf:f1:f5:e3:a8:e7:2b:70:58:c7:bc:
         0b:c9:c5:03:d4:7e:78:48:f9:50:6c:ed:09:17:c2:48:63:0f:
         d0:62:f7:0f:9a:39:3c:77:43:08:99:4b:b1:35:04:f6:97:8a:
         5a:77:ab:10:06:bd:26:91:5b:d8:c9:f5:d9:13:6a:5a:dc:42:
         66:16:cc:01:f8:2c:2a:8e:b2:5d:c6:ed:2b:28:62:58:11:6a:
         fb:70:4f:01:43:dd:ea:92:13:6f:3c:1e:0a:43:37:2b:a3:2e:
         46:38:a0:5b:cf:d1:9f:4a:7a:1b:48:a4:ad:31:f5:3d:c7:a0:
         4c:cd:05:2b:ce:3a:77:60:8a:77:e5:55:02:15:dc:72:b9:65:
         02:3d:60:35:ce:dd:1d:d8:d9:70:ae:07:14:62:b1:f8:ed:37:
         51:77:f6:de:88:1a:e1:8d:94:cc:00:47:9e:ef:a3:a6:a4:00:
         b4:c1:47:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:45:49 2025 by rpki-client