Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.mft
File:                     fToi3tGr8M05CSgLibI3bFRfbwc.mft (raw, json)
Hash identifier:          CzCzXYHAV4tCT9sr8V5wNBD+gDlXZesnKoAySCYAMIk=
Subject key identifier:   F2:5D:86:96:27:A3:DB:B4:AE:D3:67:87:69:0E:AD:5D:36:BA:9F:13
Authority key identifier: 7D:3A:22:DE:D1:AB:F0:CD:39:09:28:0B:89:B2:37:6C:54:5F:6F:07
Certificate issuer:       /CN=A91AC232/serialNumber=7D3A22DED1ABF0CD3909280B89B2376C545F6F07
Certificate serial:       071B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fToi3tGr8M05CSgLibI3bFRfbwc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.mft
Manifest number:          0714
Signing time:             Sat 18 Oct 2025 23:16:48 +0000
Manifest this update:     Sat 18 Oct 2025 23:16:48 +0000
Manifest next update:     Sat 25 Oct 2025 23:16:48 +0000
Files and hashes:         1: fToi3tGr8M05CSgLibI3bFRfbwc.crl (hash: 7U69YOB+/BLSpHa4DJ0gatxTJX7LgESFDZcSTPm1QVo=)
                          2: D93244BAF2EF11ED91F08A4FC4F9AE02.roa (hash: hUqHFifGF2RTMr5P0bZj3vJ6RCASWQ9bPokCmECeKBM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.crl
                          rsync://rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fToi3tGr8M05CSgLibI3bFRfbwc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 23:16:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1819 (0x71b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC232, serialNumber=7D3A22DED1ABF0CD3909280B89B2376C545F6F07
        Validity
            Not Before: Oct 18 23:16:48 2025 GMT
            Not After : Oct 25 23:16:48 2025 GMT
        Subject: CN=68f41fe0-f7e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fd:8f:9b:5c:f2:d5:8c:33:4b:a3:8e:ce:35:
                    5c:a3:6d:04:a4:2c:14:9d:d5:45:46:5a:9d:fe:6c:
                    3a:c0:e3:cd:c5:fd:c6:64:20:23:d3:07:64:5e:cf:
                    a6:d6:e2:2c:de:9c:73:66:df:de:d3:72:31:2b:8e:
                    5c:9c:4a:df:ea:b2:9f:a7:d3:61:70:44:8b:ab:83:
                    fe:3e:ec:7b:10:79:13:ad:31:39:06:44:23:b0:11:
                    11:cc:78:c3:12:6d:5c:5e:46:5e:11:e7:9c:2f:d8:
                    2b:dc:67:30:05:f8:85:43:04:22:c9:b6:ac:38:33:
                    c8:37:f4:5e:f4:3c:a0:e8:a7:0a:27:4a:2d:90:0b:
                    52:9d:f9:41:cb:94:25:34:0f:6b:22:4f:b8:3c:9b:
                    f7:ba:33:84:0f:d3:47:22:91:e3:dc:b3:c8:11:bd:
                    44:1f:e4:22:cd:65:a5:c0:17:ef:98:3a:a0:d3:b9:
                    92:ef:15:e7:9f:97:2c:55:69:99:45:b2:1d:6e:96:
                    4d:40:cf:e7:e7:87:07:62:c7:75:fc:03:f5:e7:6f:
                    06:78:63:64:49:1b:f2:e6:3b:e3:ff:e7:2b:a3:31:
                    01:2f:71:cf:dc:53:b2:c2:79:65:94:ab:6a:a4:31:
                    81:56:22:92:54:ab:fd:f0:03:36:09:01:54:f4:29:
                    66:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:5D:86:96:27:A3:DB:B4:AE:D3:67:87:69:0E:AD:5D:36:BA:9F:13
            X509v3 Authority Key Identifier:
                keyid:7D:3A:22:DE:D1:AB:F0:CD:39:09:28:0B:89:B2:37:6C:54:5F:6F:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fToi3tGr8M05CSgLibI3bFRfbwc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:4a:16:83:69:21:58:b5:c8:d1:88:1a:eb:25:a7:08:12:6e:
         47:24:46:67:1e:1c:7d:cc:a6:18:aa:c4:79:db:b4:27:00:ab:
         3f:f4:ca:a4:ab:be:32:26:1c:0c:fd:ef:d2:51:58:05:0b:4c:
         2d:2c:15:21:41:30:e9:4e:7f:d1:6b:7d:d6:ed:20:85:65:c7:
         25:c1:9e:8f:ff:46:17:8d:fb:4b:62:68:0d:f5:fe:27:69:c4:
         30:04:84:31:56:4e:6e:93:81:7d:06:ff:9c:04:9a:b6:41:ba:
         0b:9d:0d:a8:1b:bc:28:97:89:36:0d:c3:5d:d1:f9:da:e5:33:
         c4:14:7d:ac:4e:ad:15:05:9f:c3:2f:be:a9:48:76:d9:75:0c:
         bd:b8:93:ee:e1:6b:01:a4:6c:1e:f8:c5:5b:8a:12:0b:2d:c9:
         d6:2e:83:18:7e:19:72:98:d5:1e:a2:96:ae:9a:26:af:5c:46:
         be:4f:6e:e8:5b:6e:d5:e4:31:c2:86:e2:60:40:64:1b:d1:c2:
         c8:9d:6f:f3:94:e0:e6:b9:44:93:77:f6:73:65:69:c6:2b:da:
         6d:b7:0f:40:c7:c1:ad:b2:88:6b:89:6d:f7:6d:0f:fb:91:4f:
         b6:92:02:57:b3:12:ac:bf:01:72:a0:4d:98:4c:47:f0:77:0a:
         e2:b2:f0:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:41:09 2025 by rpki-client