Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.mft
File:                     nE_-Zd6jUjPTnocCI4VlV03tRm4.mft (raw, json)
Hash identifier:          9rQ+cEt0JO7A4870s128XU/vmsVEF+PLA8DQB/Yd3eo=
Subject key identifier:   52:44:58:84:64:B3:2B:77:C8:E9:D1:BA:E8:CA:B1:73:F6:1F:94:9E
Authority key identifier: 9C:4F:FE:65:DE:A3:52:33:D3:9E:87:02:23:85:65:57:4D:ED:46:6E
Certificate issuer:       /CN=A91CAA4E/serialNumber=9C4FFE65DEA35233D39E8702238565574DED466E
Certificate serial:       0774
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nE_-Zd6jUjPTnocCI4VlV03tRm4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.mft
Manifest number:          1ADB
Signing time:             Sat 18 Oct 2025 17:28:33 +0000
Manifest this update:     Sat 18 Oct 2025 17:28:32 +0000
Manifest next update:     Sat 25 Oct 2025 17:28:32 +0000
Files and hashes:         1: nE_-Zd6jUjPTnocCI4VlV03tRm4.crl (hash: 2OYOV5aZ4MZg/37RTOix91Y5Z/U1CiqAZi7b1Kv7jMo=)
                          2: ED4F22B083F211F0BF43E721C4F9AE02.roa (hash: pCKJS8T7xeLtb+JHDjAwjH092du2jwCh5YUQFYtRJWw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.crl
                          rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nE_-Zd6jUjPTnocCI4VlV03tRm4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 17:28:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1908 (0x774)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CAA4E, serialNumber=9C4FFE65DEA35233D39E8702238565574DED466E
        Validity
            Not Before: Oct 18 17:28:32 2025 GMT
            Not After : Oct 25 17:28:32 2025 GMT
        Subject: CN=68f3ce40-ee10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:48:e9:f1:87:d9:a1:cd:86:40:bf:07:6b:d8:
                    b9:e8:47:0c:ad:cb:55:48:06:8e:ea:f9:96:51:79:
                    a9:03:6f:7b:2c:a6:02:9c:de:eb:c2:07:a2:e3:e1:
                    ab:59:9a:96:54:e3:fe:0f:48:56:c9:1c:d9:26:ce:
                    bf:ed:93:48:e4:f8:61:e0:8e:d6:cc:af:ff:9d:02:
                    26:f7:a1:e5:d9:14:71:96:37:5c:27:07:36:f4:04:
                    4c:c4:05:88:35:b3:a9:41:40:4b:3a:05:ef:22:70:
                    01:9f:79:98:e2:3e:19:3f:77:9b:2b:bb:4a:c7:d7:
                    67:70:20:92:9a:78:ef:51:f6:23:b8:ab:d4:17:50:
                    17:be:e3:ea:bc:07:03:3e:c7:b9:6b:1a:cf:a2:6a:
                    62:5f:97:6e:7d:e0:16:b1:af:93:6e:f0:bc:af:58:
                    37:23:af:5d:cb:28:b3:97:a4:8a:54:ba:68:43:58:
                    dd:20:96:6e:28:be:dd:2e:a5:85:24:ab:7f:39:27:
                    b6:8a:65:4f:b5:83:3c:09:68:14:76:71:7a:e7:85:
                    66:5a:b1:ec:a0:12:ec:7d:90:c2:33:00:20:a2:63:
                    01:6f:eb:b5:42:87:85:6b:6e:ad:26:37:59:34:b8:
                    af:a8:b2:93:59:06:87:25:af:22:95:ce:c3:71:20:
                    06:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:44:58:84:64:B3:2B:77:C8:E9:D1:BA:E8:CA:B1:73:F6:1F:94:9E
            X509v3 Authority Key Identifier:
                keyid:9C:4F:FE:65:DE:A3:52:33:D3:9E:87:02:23:85:65:57:4D:ED:46:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nE_-Zd6jUjPTnocCI4VlV03tRm4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:0a:e2:77:f2:23:48:79:f8:f2:a4:09:99:47:a4:89:33:a2:
         94:b4:dc:2f:f0:11:64:7e:89:cb:59:40:a9:be:50:31:fa:93:
         64:38:b1:45:86:0c:46:d1:95:2f:98:7f:52:9e:33:8f:e9:90:
         31:f0:4f:da:92:52:c0:53:86:0c:8c:23:0f:5e:69:dc:ef:e1:
         55:3f:95:4b:fb:02:65:e8:09:bc:ac:7b:59:ad:f4:54:a6:3c:
         65:4a:51:d8:de:6b:0c:7e:cb:d7:ff:50:89:82:32:c0:81:7f:
         c3:1a:fc:8e:55:ac:0a:11:3e:fb:6d:a0:29:df:51:99:f6:cb:
         5c:db:4c:42:9e:a8:78:cd:d7:bf:a5:78:5d:da:a4:29:93:86:
         1f:06:4d:af:8e:3e:f3:24:5c:d7:e2:4e:c6:04:92:dc:bb:c3:
         e2:2c:a4:f8:f9:fc:de:f4:62:ce:9d:04:22:96:89:10:da:33:
         60:bd:d2:b4:95:d2:ee:cc:b3:c3:d2:b7:f5:13:da:47:c6:0e:
         d9:85:74:87:92:9c:1c:6f:95:54:79:5b:5a:de:88:19:8f:73:
         a9:c2:8d:c4:82:08:ec:1e:d2:be:f7:a2:2a:3b:67:83:19:99:
         54:0c:ed:fd:d3:8f:87:97:8c:18:2f:53:c2:0b:fe:bd:13:f3:
         a3:20:2c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:32:42 2025 by rpki-client