Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft
File:                     4OynvFsloMo3TZqDzEz5DdbPIgk.mft (raw, json)
Hash identifier:          NQAkdtJx2bjDi/e7NoauTmbnwqp8b+RqRRVwi3y+IBg=
Subject key identifier:   32:BE:A9:4E:B5:73:BF:90:FA:C8:87:0B:B3:79:72:D0:25:C8:4C:66
Authority key identifier: E0:EC:A7:BC:5B:25:A0:CA:37:4D:9A:83:CC:4C:F9:0D:D6:CF:22:09
Certificate issuer:       /CN=A91C74B5/serialNumber=E0ECA7BC5B25A0CA374D9A83CC4CF90DD6CF2209
Certificate serial:       01AE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft
Manifest number:          01A0
Signing time:             Sun 19 Oct 2025 05:53:50 +0000
Manifest this update:     Sun 19 Oct 2025 05:53:50 +0000
Manifest next update:     Sun 26 Oct 2025 05:53:50 +0000
Files and hashes:         1: 4OynvFsloMo3TZqDzEz5DdbPIgk.crl (hash: WrImLugv9pA1b3IwBymYlx7lSc4KtozEBHwRjSfbHhk=)
                          2: FBCA5E628A4E11EE8EFFA44BC4F9AE02.roa (hash: n7d+wfVovpgFh/VPuHK0Be+tZJiAokXkxVBH6z58Cdo=)
                          3: 23E0203034AF11EE90E6263DC4F9AE02.roa (hash: qRwojUTlxnLhuw/Mk800h2tw73R4wHeoNMLoVaIWLSQ=)
                          4: FE53F0DE34AA11EE85FF0735C4F9AE02.roa (hash: FSryM40tOFsx9/9SakfMh/QfDHk+qmxC9WGqNR/nxQA=)
                          5: 2343647034AF11EE90E6263DC4F9AE02.roa (hash: O7wU5uPOsDFh8TlK1r/cSTqhuO+kftwlxz4zNibCfJw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.crl
                          rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 05:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 430 (0x1ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C74B5, serialNumber=E0ECA7BC5B25A0CA374D9A83CC4CF90DD6CF2209
        Validity
            Not Before: Oct 19 05:53:50 2025 GMT
            Not After : Oct 26 05:53:50 2025 GMT
        Subject: CN=68f47cee-a08c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5d:86:9f:0a:77:ef:c0:ce:17:01:47:3f:22:
                    fa:06:74:2e:c0:dd:84:1a:6d:68:c4:29:c1:49:b7:
                    d2:4c:79:01:b9:00:7e:bc:d2:1d:ec:45:91:a6:f0:
                    87:8e:d3:3d:7e:ad:58:56:50:98:bc:75:b9:ff:3f:
                    56:65:84:74:9e:bf:49:40:b0:9e:42:5f:7a:e6:3d:
                    41:0b:13:98:d2:e7:b5:d4:7c:50:63:9f:a0:b9:34:
                    15:e7:44:66:48:b2:22:19:10:15:a8:f1:41:09:33:
                    b4:f6:bc:1b:16:f8:2c:17:03:55:87:d3:42:19:03:
                    28:cd:f2:fe:63:fb:da:1e:0d:d4:cf:06:2d:f7:17:
                    cc:d5:28:e0:bd:a8:08:01:2d:cf:13:5a:e8:62:6b:
                    10:c5:89:98:74:e2:44:a5:e8:f6:9e:8e:af:69:80:
                    0d:1f:42:80:db:3f:ee:c0:e7:c4:3b:65:7f:7f:93:
                    bf:0d:7e:c4:03:4b:84:ea:7d:73:a0:4b:d8:6e:c9:
                    57:5f:31:29:de:f4:a7:32:0b:65:a3:68:da:00:bc:
                    d5:a5:da:4c:39:18:1e:ea:0f:3a:07:e2:b9:98:74:
                    49:08:f8:0b:58:ff:08:27:21:be:5c:52:e5:2e:e8:
                    f6:f8:b7:16:e2:14:fe:70:bb:57:ce:b6:b6:86:a6:
                    18:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:BE:A9:4E:B5:73:BF:90:FA:C8:87:0B:B3:79:72:D0:25:C8:4C:66
            X509v3 Authority Key Identifier:
                keyid:E0:EC:A7:BC:5B:25:A0:CA:37:4D:9A:83:CC:4C:F9:0D:D6:CF:22:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:fc:70:97:08:80:3b:6f:fd:19:34:81:bc:f4:ba:63:bd:fe:
         ff:59:1c:92:87:ee:98:f3:03:82:0c:8a:e9:03:5a:63:9f:73:
         75:15:4a:d3:6f:7d:f0:22:5b:c9:ae:96:48:50:67:fe:cd:d7:
         0e:04:33:f0:35:76:cd:5a:6c:84:5c:fa:30:85:76:17:3b:dd:
         b3:17:7c:1c:f4:ef:c3:f2:cc:b1:67:15:7d:7b:3e:d2:59:03:
         ab:32:de:bc:16:0b:4e:e6:a0:1d:73:29:71:e8:f6:85:af:9e:
         8a:76:87:b5:af:a4:e0:03:ad:26:d4:4f:e9:ab:72:d6:42:9e:
         29:fd:f0:e7:94:7b:25:8d:4c:34:bc:b1:6d:d6:38:88:28:77:
         18:19:90:89:ca:95:8c:a9:ac:b5:ec:af:75:e3:fd:f6:9c:13:
         30:bb:de:28:d2:da:0a:2b:be:8e:82:d2:03:93:92:fd:87:b1:
         2b:17:ab:92:31:91:2a:f3:f1:77:fe:db:ac:d3:b8:9f:ae:71:
         e7:66:93:0b:a3:dd:94:41:13:ac:f6:c6:b0:04:39:38:b1:86:
         aa:37:5a:87:9a:ef:fa:ba:6f:77:50:34:65:b4:06:d0:57:21:
         06:f4:91:bf:62:b8:d5:8f:29:46:58:0a:a4:71:49:2f:18:b1:
         da:dd:eb:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:36:05 2025 by rpki-client