Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.mft
File:                     x5ESx8WsNlgyIdH5RnUZbCE26r4.mft (raw, json)
Hash identifier:          fHaOgkZhoda+n0OlDJvVealWbglLj4p8MzzjctdYUhI=
Subject key identifier:   23:02:72:CB:1E:19:FB:D6:B2:93:A1:FB:D5:DF:B9:7C:74:99:A6:B1
Authority key identifier: C7:91:12:C7:C5:AC:36:58:32:21:D1:F9:46:75:19:6C:21:36:EA:BE
Certificate issuer:       /CN=A91C6BB9/serialNumber=C79112C7C5AC36583221D1F94675196C2136EABE
Certificate serial:       077F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5ESx8WsNlgyIdH5RnUZbCE26r4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.mft
Manifest number:          0773
Signing time:             Sat 18 Oct 2025 22:59:35 +0000
Manifest this update:     Sat 18 Oct 2025 22:59:34 +0000
Manifest next update:     Sat 25 Oct 2025 22:59:34 +0000
Files and hashes:         1: x5ESx8WsNlgyIdH5RnUZbCE26r4.crl (hash: XgX7DxwnPXxGIYE1RL0FXm57MykUDcSGsjAGTdYWXwg=)
                          2: 2E7B4F0CD45811EF908AFE44C4F9AE02.roa (hash: 0gWp5PyGmTihYDNzToQweag+/yXIgKytaRcZImh3PUI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.crl
                          rsync://rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5ESx8WsNlgyIdH5RnUZbCE26r4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 22:59:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1919 (0x77f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6BB9, serialNumber=C79112C7C5AC36583221D1F94675196C2136EABE
        Validity
            Not Before: Oct 18 22:59:34 2025 GMT
            Not After : Oct 25 22:59:34 2025 GMT
        Subject: CN=68f41bd6-3084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e6:40:99:27:3b:58:28:19:90:43:bc:52:6e:
                    ef:b0:ad:7e:5c:2e:9d:c0:b4:e1:8b:35:38:17:ac:
                    a2:42:4d:80:78:93:df:ad:65:10:85:8f:15:e1:c2:
                    78:9e:d7:c1:2a:c9:9f:14:d4:42:5a:5e:bd:78:82:
                    28:c0:6c:ce:f2:5e:19:a9:48:be:b2:d2:38:fc:ce:
                    a6:a0:65:e0:de:bb:71:91:fd:b0:12:65:bd:81:7a:
                    86:54:81:49:54:fa:78:98:54:e0:78:d9:ef:1d:40:
                    76:b5:bf:64:21:67:8d:aa:aa:b8:62:4d:a5:1b:e5:
                    f3:9a:00:cc:8c:34:b9:67:78:e4:03:c9:01:62:55:
                    7b:26:c2:ca:2e:97:da:c6:dc:44:a2:75:1f:52:ba:
                    2e:ae:3e:14:00:4b:ae:71:a4:e7:82:d1:74:fd:a6:
                    67:0f:f8:e3:50:d5:d8:08:93:dd:f4:ae:ed:04:19:
                    ce:f5:b3:4a:37:98:c3:95:63:98:6a:9c:77:11:41:
                    f8:e5:3c:8a:09:a0:fa:3a:63:78:18:a0:a2:f0:ff:
                    9b:e4:d2:75:24:8a:98:a9:6e:e4:49:be:fa:af:59:
                    6e:fd:7a:e4:80:9d:f8:16:e3:04:ba:1b:0c:5c:42:
                    cc:a9:e1:88:ab:5c:8c:a5:50:e9:d8:b5:ec:8f:f4:
                    6b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:02:72:CB:1E:19:FB:D6:B2:93:A1:FB:D5:DF:B9:7C:74:99:A6:B1
            X509v3 Authority Key Identifier:
                keyid:C7:91:12:C7:C5:AC:36:58:32:21:D1:F9:46:75:19:6C:21:36:EA:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5ESx8WsNlgyIdH5RnUZbCE26r4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:4f:9e:c0:71:75:30:d7:57:e7:0b:a1:fd:d8:65:1d:bf:66:
         d6:2f:52:1a:2d:09:92:01:f0:6b:37:c0:42:8e:ab:b2:86:6b:
         42:6a:6d:7f:cb:31:c4:40:d6:df:42:1b:41:a9:45:36:e0:84:
         8d:41:68:ff:e8:21:a5:6d:35:ed:fd:b1:41:a5:0b:cb:58:f8:
         5e:b4:38:23:40:ae:5e:41:14:07:d3:08:fc:95:a4:80:74:cc:
         05:05:7e:a8:f9:23:46:ea:06:82:2d:1b:8a:b4:42:17:fc:76:
         60:82:e6:2b:03:ac:ef:9f:d7:e3:7f:a6:ac:d5:17:f1:1e:a0:
         e3:3d:3b:ca:33:c7:11:75:1f:9f:80:32:67:5a:10:41:b9:96:
         14:34:e2:aa:95:da:b5:bf:28:bc:aa:e4:2b:fb:71:e3:24:74:
         3d:1b:8a:10:ce:92:ad:9e:3f:23:b5:0f:19:0b:2b:64:25:41:
         ab:b0:46:8b:c2:69:02:66:22:83:9c:ef:9e:36:dc:16:0e:22:
         b5:11:b7:22:27:fb:c4:90:14:7c:2a:94:52:d8:a1:f4:46:c6:
         a1:f8:10:68:0b:33:40:f1:7f:7c:f8:b8:2d:33:85:e1:00:bd:
         e5:d0:43:6a:5a:cc:b2:c4:64:08:c8:29:a3:0a:14:85:14:ef:
         a2:a6:5e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:47:32 2025 by rpki-client