Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.mft
File:                     lGqi80z6-eS9bjRboJqd6bnC0U0.mft (raw, json)
Hash identifier:          PxX2CciEvsnoUrltd7x26BhDdcVldVWFiqOfaSNfGqw=
Subject key identifier:   1D:72:AB:F0:EF:69:4C:F1:F9:44:6D:92:C8:86:0F:D8:4D:0E:64:4F
Authority key identifier: 94:6A:A2:F3:4C:FA:F9:E4:BD:6E:34:5B:A0:9A:9D:E9:B9:C2:D1:4D
Certificate issuer:       /CN=A91CAA69/serialNumber=946AA2F34CFAF9E4BD6E345BA09A9DE9B9C2D14D
Certificate serial:       0EA5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lGqi80z6-eS9bjRboJqd6bnC0U0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.mft
Manifest number:          0E94
Signing time:             Sat 18 Oct 2025 18:19:58 +0000
Manifest this update:     Sat 18 Oct 2025 18:19:57 +0000
Manifest next update:     Sat 25 Oct 2025 18:19:57 +0000
Files and hashes:         1: lGqi80z6-eS9bjRboJqd6bnC0U0.crl (hash: 8UWuoxORLwvDA7STaOctjn+CKYaAcjamANpGFFNaQHs=)
                          2: 1FAB60EE9EB111E99ED10D84C4F9AE02.roa (hash: J9DgdD9cL2JfNJGX2KpEbeL9xCo98zH1CjpWmw6WEyg=)
                          3: DECBB040985611ECBE7ED328C4F9AE02.roa (hash: fVjIBFUgnQxd9qxxnDI3HntLIaXeeQgbbHy+hbpb2zg=)
                          4: DF5D49F6985611ECBE7ED328C4F9AE02.roa (hash: oySlLPz0K/UmHCqFTFPFIY5DaigueFo/oV/JPUia/uU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.crl
                          rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lGqi80z6-eS9bjRboJqd6bnC0U0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 18:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3749 (0xea5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CAA69, serialNumber=946AA2F34CFAF9E4BD6E345BA09A9DE9B9C2D14D
        Validity
            Not Before: Oct 18 18:19:57 2025 GMT
            Not After : Oct 25 18:19:57 2025 GMT
        Subject: CN=68f3da4d-629c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c4:54:cd:7e:df:59:28:69:02:73:d5:9b:6d:
                    70:99:26:14:ff:c3:37:6e:0a:53:8b:e4:d4:a1:32:
                    53:e1:93:5e:8a:58:7c:21:24:df:d6:18:c0:26:0a:
                    70:c4:88:fa:f0:ce:44:15:13:2c:1a:1b:0f:48:32:
                    bd:a4:a2:6a:54:b0:35:89:01:da:e5:65:ee:67:df:
                    01:8c:dc:1f:06:b0:d0:d9:d9:e8:bf:14:f6:82:8f:
                    3e:f8:8c:d0:12:d1:54:8d:ee:9b:46:02:a4:cd:2d:
                    c9:a3:b3:c6:63:b0:6b:46:e1:c5:69:1a:87:b7:6c:
                    fc:1d:73:40:fa:b1:07:33:84:9c:2f:89:b9:b8:96:
                    02:23:9d:2e:0f:a5:dd:be:28:21:b9:af:63:9c:0e:
                    db:b3:33:f1:36:c9:58:a2:8a:aa:24:60:0e:be:bc:
                    41:b3:4d:0d:e8:2c:4f:0b:85:64:0c:73:49:d0:b5:
                    3f:af:bd:d5:9c:62:b6:e2:6b:09:77:34:48:3d:43:
                    7a:6b:7c:c9:7d:5a:86:0e:81:0f:72:b8:23:0d:3d:
                    e5:8c:69:f5:37:f9:06:91:0a:4d:c1:56:18:a4:0a:
                    f4:cb:74:b7:44:47:61:aa:a0:51:4e:f6:aa:bc:c7:
                    af:9f:cc:43:f1:d6:1a:ba:fe:94:57:b4:25:62:4d:
                    13:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:72:AB:F0:EF:69:4C:F1:F9:44:6D:92:C8:86:0F:D8:4D:0E:64:4F
            X509v3 Authority Key Identifier:
                keyid:94:6A:A2:F3:4C:FA:F9:E4:BD:6E:34:5B:A0:9A:9D:E9:B9:C2:D1:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lGqi80z6-eS9bjRboJqd6bnC0U0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:52:ca:3a:c9:63:68:72:3c:16:b4:7f:8b:5e:aa:94:11:0f:
         40:46:2f:2d:00:41:d1:68:8e:2e:48:88:62:9d:d7:8a:ce:0f:
         58:4b:8a:39:bc:96:06:56:0e:b2:bf:b4:ec:4b:e1:99:94:57:
         b8:f9:1a:cf:a6:23:de:f0:89:a5:3f:59:e6:a9:09:6d:60:38:
         6f:ef:7d:53:8c:20:5a:be:ba:35:94:b5:c7:a7:ab:5d:be:8b:
         54:49:ca:1b:cd:af:f4:70:c9:32:d4:9b:b7:dd:7e:4f:40:7b:
         ac:a8:0e:c8:3a:7a:1f:96:ea:ca:b4:da:2f:08:2d:53:76:c1:
         fc:cf:61:d9:80:27:b9:02:82:f3:3f:c6:60:af:9b:dc:b7:3d:
         b0:18:83:1a:21:1f:0d:26:d5:5f:b0:63:0e:e3:22:30:66:95:
         a8:c3:3a:1a:a7:d0:e1:b8:40:2e:39:52:ff:5a:06:95:5f:db:
         5c:95:45:15:90:2d:a8:1c:b6:26:8c:c2:68:c3:fb:e6:8c:3c:
         c0:a4:d6:59:9b:05:d6:ba:b1:3a:dd:6a:37:6e:33:9d:e6:f7:
         8f:eb:23:f3:97:f0:e2:ce:56:cd:4b:7d:ff:0b:0d:a9:bf:18:
         44:6f:fe:6d:c5:f2:0d:e2:5b:b6:8f:fd:c1:cc:ec:24:70:f4:
         51:d2:d5:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:46:27 2025 by rpki-client