Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft
File:                     votHM7Guikc2t-kTJzPWVAkePSs.mft (raw, json)
Hash identifier:          SDo/yxkVrj/XK+ojnVhD79aNV/MSZ4a26AMrOaOMXGA=
Subject key identifier:   E5:23:2E:5A:7D:C4:B0:57:C3:2A:13:89:F5:F2:D9:6F:B9:46:E1:B6
Authority key identifier: BE:8B:47:33:B1:AE:8A:47:36:B7:E9:13:27:33:D6:54:09:1E:3D:2B
Certificate issuer:       /CN=A91B23D9/serialNumber=BE8B4733B1AE8A4736B7E9132733D654091E3D2B
Certificate serial:       97
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/votHM7Guikc2t-kTJzPWVAkePSs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft
Manifest number:          95
Signing time:             Sun 19 Oct 2025 09:38:55 +0000
Manifest this update:     Sun 19 Oct 2025 09:38:55 +0000
Manifest next update:     Sun 26 Oct 2025 09:38:55 +0000
Files and hashes:         1: votHM7Guikc2t-kTJzPWVAkePSs.crl (hash: PpSiuZwCMjSbRH0DG/6VimzIN8dkoN6eoHOZUHLJHTs=)
                          2: A3815188C9D211EFB961F44DC4F9AE02.roa (hash: q3EE6bhQvO1jqMvzi5TnaMDMrsSHuVeWmQU0kCxzZeQ=)
                          3: 63817B3AC9D211EFBC6F934DC4F9AE02.roa (hash: +20O4NUWPTxqKeXepVeDCO/g+GXNSbJwYfdmkDR6B2Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.crl
                          rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/votHM7Guikc2t-kTJzPWVAkePSs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 09:38:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 151 (0x97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B23D9, serialNumber=BE8B4733B1AE8A4736B7E9132733D654091E3D2B
        Validity
            Not Before: Oct 19 09:38:55 2025 GMT
            Not After : Oct 26 09:38:55 2025 GMT
        Subject: CN=68f4b1af-03a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:cd:67:97:e1:42:85:c8:2b:40:7a:75:57:7a:
                    d9:7b:0e:12:23:f0:25:b2:ae:f0:18:f5:3b:33:b4:
                    d6:f0:bc:85:4c:90:a0:12:be:93:3a:f8:9e:19:27:
                    bc:3c:2d:d1:13:dc:42:44:a0:77:d1:10:6b:2d:bf:
                    6d:1e:a2:55:b7:51:39:04:03:2d:15:4f:17:e5:f1:
                    6e:21:4c:8a:40:93:9e:0a:b0:89:27:86:c7:22:6f:
                    1f:6b:ad:17:3d:6f:20:e6:ab:83:7a:74:b9:53:3f:
                    0e:6a:be:54:d8:22:19:37:9c:25:91:51:5f:62:e9:
                    fa:6f:1a:bf:19:dc:60:f4:61:9e:22:4d:25:6b:08:
                    d6:62:07:46:07:c9:c0:a7:c8:c3:1b:71:91:29:ee:
                    4d:27:92:8c:dd:88:6b:b3:5b:d8:15:e7:c2:63:27:
                    01:05:3c:44:8a:6b:66:af:68:0b:fd:bc:6e:80:15:
                    d8:83:a4:5d:0e:9f:89:95:61:a3:74:ac:74:e5:13:
                    cc:44:26:4b:6d:7b:44:a9:6a:4a:7d:85:f9:4a:5a:
                    bb:21:f5:7a:a3:ee:9c:96:be:73:1e:cf:ad:36:57:
                    c3:68:ac:c6:8c:8c:61:dc:60:70:76:89:84:52:cb:
                    0a:d3:50:be:79:53:c7:ea:bd:ec:7b:30:c1:da:eb:
                    ec:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:23:2E:5A:7D:C4:B0:57:C3:2A:13:89:F5:F2:D9:6F:B9:46:E1:B6
            X509v3 Authority Key Identifier:
                keyid:BE:8B:47:33:B1:AE:8A:47:36:B7:E9:13:27:33:D6:54:09:1E:3D:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/votHM7Guikc2t-kTJzPWVAkePSs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:57:5d:6d:67:55:b3:35:cf:e5:f3:f3:32:70:a0:bf:c5:f2:
         db:0c:ca:fd:8b:26:e2:60:db:0d:f0:9f:35:b4:35:11:8b:a4:
         12:5e:10:8d:2b:8c:0d:63:67:9a:41:34:72:6d:b7:26:90:53:
         4a:3c:e9:cd:32:4f:53:f1:16:24:84:20:bf:2c:f3:76:1e:37:
         c9:84:75:f6:06:24:d1:dc:88:58:de:b3:d1:2b:42:9b:f1:13:
         0b:d2:f6:99:0d:74:3a:6a:d0:5e:91:f1:ce:fe:85:c9:3f:6a:
         85:fc:b3:c9:40:3b:0e:50:96:0f:17:47:44:1c:76:2e:23:77:
         9f:d9:20:30:32:1f:44:cc:52:25:81:f1:d7:64:cd:42:c8:65:
         82:44:9e:99:88:ca:7e:bb:f9:f6:14:91:c7:73:ef:59:37:da:
         4d:43:99:41:2d:b9:f9:8f:3f:c2:87:b5:b0:14:47:8c:1d:cf:
         a1:76:8c:54:5a:25:bb:bb:b5:f6:ad:9b:73:af:18:52:3f:0b:
         20:5c:90:e5:3b:5f:8d:5b:c4:2f:1f:c4:c2:84:61:af:25:80:
         60:f7:35:fc:95:46:e5:61:e4:fc:4e:21:ec:fe:61:e6:43:9d:
         95:98:ca:d3:be:65:1e:7d:3f:c1:53:a6:cd:2b:cd:0e:e4:6a:
         a9:23:9c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:49:41 2025 by rpki-client