Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0FF9/DD6A765080CE11EB93501868C4F9AE02/7v0-hq90-Ug0ZAFrk0_D7xTILUY.mft
File:                     7v0-hq90-Ug0ZAFrk0_D7xTILUY.mft (raw, json)
Hash identifier:          X3dFpNlwsotczJs8aCL3QIl9rCjuvPxK5+/8AvjAb5w=
Subject key identifier:   08:57:78:A4:DC:57:D7:D6:69:11:F6:53:0E:A7:32:60:57:3C:E5:9C
Authority key identifier: EE:FD:3E:86:AF:74:F9:48:34:64:01:6B:93:4F:C3:EF:14:C8:2D:46
Certificate issuer:       /CN=A91C0FF9/serialNumber=EEFD3E86AF74F9483464016B934FC3EF14C82D46
Certificate serial:       06B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7v0-hq90-Ug0ZAFrk0_D7xTILUY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0FF9/DD6A765080CE11EB93501868C4F9AE02/7v0-hq90-Ug0ZAFrk0_D7xTILUY.mft
Manifest number:          06AE
Signing time:             Sat 18 Oct 2025 23:41:58 +0000
Manifest this update:     Sat 18 Oct 2025 23:41:57 +0000
Manifest next update:     Sat 25 Oct 2025 23:41:57 +0000
Files and hashes:         1: 7v0-hq90-Ug0ZAFrk0_D7xTILUY.crl (hash: rlgyZp0OVRsvxYargRL3GJy3j6ZUEYQVIOopVh7nW2w=)
                          2: 98536A8A8D1811EBA3DEC15BC4F9AE02.roa (hash: GZC1H6bkYz3KSM38VOTZVhfdcChKVhr9TmELY8NJ80g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0FF9/DD6A765080CE11EB93501868C4F9AE02/7v0-hq90-Ug0ZAFrk0_D7xTILUY.crl
                          rsync://rpki.apnic.net/member_repository/A91C0FF9/DD6A765080CE11EB93501868C4F9AE02/7v0-hq90-Ug0ZAFrk0_D7xTILUY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7v0-hq90-Ug0ZAFrk0_D7xTILUY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 23:41:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1716 (0x6b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0FF9, serialNumber=EEFD3E86AF74F9483464016B934FC3EF14C82D46
        Validity
            Not Before: Oct 18 23:41:57 2025 GMT
            Not After : Oct 25 23:41:57 2025 GMT
        Subject: CN=68f425c5-285f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f1:d9:11:73:ab:c3:6b:ec:d3:03:7c:92:96:
                    15:fc:60:90:c2:db:db:08:39:58:1c:33:29:48:da:
                    5e:06:2a:21:f7:76:3b:f2:d8:3d:09:57:cc:a0:1e:
                    2d:be:50:5e:8b:86:c0:4a:b2:8b:3f:16:d6:fa:ee:
                    6f:13:b1:1d:fc:2c:b2:01:87:6a:13:68:86:96:a0:
                    69:4a:af:64:48:7d:c1:b3:85:b9:76:81:06:f7:ba:
                    81:bf:5b:9d:9f:38:a8:0e:03:a5:d0:14:5a:42:d5:
                    f0:8d:7e:96:de:4d:9a:37:95:f9:4e:e4:86:14:04:
                    ee:79:89:33:ef:1a:9f:da:c7:d5:e0:1d:fe:5e:dd:
                    1b:fa:0a:63:a8:2c:74:06:f2:66:7c:e0:db:96:c6:
                    30:db:e8:e0:f4:7e:fe:f1:d8:16:b8:2e:23:6d:0b:
                    9e:7a:b2:2b:d3:c4:93:a6:91:93:4e:f7:b0:89:12:
                    8e:ab:56:53:bf:7d:02:a8:03:11:05:d6:2d:34:fa:
                    c4:bc:33:ae:41:ce:2e:a8:75:53:32:54:a9:23:bc:
                    63:bd:e1:00:60:76:30:46:ab:2d:f3:32:e0:7e:53:
                    80:64:a2:bf:cf:3e:43:f9:94:d8:ea:43:49:c8:0c:
                    e7:00:e7:b1:d0:be:cf:eb:a2:df:d8:47:92:fa:8d:
                    0b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:57:78:A4:DC:57:D7:D6:69:11:F6:53:0E:A7:32:60:57:3C:E5:9C
            X509v3 Authority Key Identifier:
                keyid:EE:FD:3E:86:AF:74:F9:48:34:64:01:6B:93:4F:C3:EF:14:C8:2D:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0FF9/DD6A765080CE11EB93501868C4F9AE02/7v0-hq90-Ug0ZAFrk0_D7xTILUY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7v0-hq90-Ug0ZAFrk0_D7xTILUY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0FF9/DD6A765080CE11EB93501868C4F9AE02/7v0-hq90-Ug0ZAFrk0_D7xTILUY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:36:28:1e:94:b2:ea:8f:aa:40:10:7d:38:10:8d:da:dc:8c:
         4d:27:14:c2:48:2e:d8:53:6c:37:8a:4b:3f:14:8d:58:04:c7:
         b5:c8:4e:78:26:f6:40:83:98:53:36:68:e8:76:21:be:73:bb:
         5c:05:b8:45:51:7b:25:76:09:db:93:4d:78:33:55:63:dc:1b:
         05:bb:04:5c:4d:06:74:4f:f6:fe:d4:0b:5d:e6:c5:84:fb:c7:
         d7:de:e6:61:d3:d9:b8:09:70:a1:ff:18:dd:8c:6a:d2:dd:93:
         e5:20:cb:29:9b:5c:6a:68:92:67:e6:ca:79:68:7b:31:e0:ed:
         75:50:43:78:cf:56:35:c9:5e:f8:01:68:3c:f4:5d:7c:33:6f:
         fd:f4:8d:4a:66:05:9e:3d:0f:14:52:c0:38:a8:c5:61:d4:64:
         19:ce:67:1c:19:21:fc:7e:fc:33:0a:57:15:a4:8d:19:af:a1:
         2a:c4:d6:bf:4a:cb:0b:e1:88:8d:6d:3e:7a:03:0b:1e:05:36:
         03:d8:e3:81:23:6c:82:e2:d3:3b:b9:c7:d5:f7:ec:d2:b0:8b:
         42:aa:25:a0:b3:f2:46:96:31:7b:80:8f:23:1d:36:76:18:b2:
         c9:1e:27:79:17:bb:3f:4d:6d:cb:ba:3a:12:e9:0f:0c:e5:93:
         44:11:95:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:44:46 2025 by rpki-client