Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft
File:                     k524p4YADCa65IN7bs2uD4q60bA.mft (raw, json)
Hash identifier:          ceF5ZWSAW4gKnAOboK+PYf1wHQrAnK1uaPJzvs6Vrvc=
Subject key identifier:   FF:DE:87:D4:1B:15:59:F9:56:8F:CA:C7:AF:2B:EB:11:3C:F9:45:1A
Authority key identifier: 93:9D:B8:A7:86:00:0C:26:BA:E4:83:7B:6E:CD:AE:0F:8A:BA:D1:B0
Certificate issuer:       /CN=A91CDEB3/serialNumber=939DB8A786000C26BAE4837B6ECDAE0F8ABAD1B0
Certificate serial:       191F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft
Manifest number:          18FF
Signing time:             Mon 20 Oct 2025 16:47:14 +0000
Manifest this update:     Mon 20 Oct 2025 16:47:13 +0000
Manifest next update:     Mon 27 Oct 2025 16:47:13 +0000
Files and hashes:         1: k524p4YADCa65IN7bs2uD4q60bA.crl (hash: 8TT1bcrd2HZyTx10jQDnygQFI6JwAsmOLkY7NWgN670=)
                          2: 5705E30EFC7A11E8BFCC760AC4F9AE02.roa (hash: oLOhMPQKsGkv3U/SksV/65t4ewatETecgN0Im/W6WBo=)
                          3: A6ACA298858911E88026B416C4F9AE02.roa (hash: KhZ44smvv0XMa3hY/4cdC4BTlTI2qU0P4EUvi2XPNs8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.crl
                          rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 16:47:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6431 (0x191f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDEB3, serialNumber=939DB8A786000C26BAE4837B6ECDAE0F8ABAD1B0
        Validity
            Not Before: Oct 20 16:47:13 2025 GMT
            Not After : Oct 27 16:47:13 2025 GMT
        Subject: CN=68f66792-b402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a3:32:73:29:fd:12:4a:00:9b:4b:dd:f2:83:
                    06:e2:97:a0:96:81:70:6b:3a:8e:b1:15:b8:5c:9b:
                    a1:dc:a4:84:22:eb:0f:b9:d8:5b:0c:48:2b:fc:3d:
                    b7:c3:6c:9b:38:39:8d:c8:74:fa:9e:5b:a6:34:7e:
                    82:3c:d4:17:45:e1:ec:d4:77:dc:ca:1c:96:f2:cf:
                    64:77:85:3d:df:33:e2:42:22:b3:3d:26:1d:d4:d6:
                    9e:f7:74:d1:e7:aa:19:27:13:65:93:10:1f:9b:72:
                    ed:1b:d0:e9:7f:94:86:ca:8a:72:b3:f6:85:f2:6a:
                    12:61:9e:60:2a:d7:fe:41:23:3d:0e:3d:2e:c9:0d:
                    0a:0f:1d:1d:b6:53:d6:b2:26:34:d6:2a:08:db:37:
                    03:e7:43:f9:e0:6f:d5:67:97:2a:e4:75:c8:5e:ac:
                    ee:97:a0:c2:cd:89:da:e8:de:43:49:d0:cb:6e:d1:
                    e3:0f:54:e8:66:dc:09:f9:49:62:81:2c:bb:e1:0f:
                    84:03:8d:0b:b7:26:17:a0:89:a7:c7:56:2c:51:8d:
                    b1:1c:e7:85:75:b5:7d:f7:a7:8b:c2:b0:b9:d5:3d:
                    f7:bd:55:28:58:f4:78:e7:c5:2d:37:27:d8:a7:85:
                    06:0a:ba:7e:91:1a:20:95:c4:02:10:47:64:e5:5e:
                    2a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:DE:87:D4:1B:15:59:F9:56:8F:CA:C7:AF:2B:EB:11:3C:F9:45:1A
            X509v3 Authority Key Identifier:
                keyid:93:9D:B8:A7:86:00:0C:26:BA:E4:83:7B:6E:CD:AE:0F:8A:BA:D1:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:89:78:9a:70:c9:fb:c4:5d:43:bd:8c:24:0b:7d:0d:70:9d:
         81:75:81:a0:a9:2a:6f:b3:4d:6b:fa:30:62:45:c2:a3:0d:71:
         0a:46:aa:ae:32:3d:9d:7a:e1:0b:0f:14:2a:46:d5:a6:1c:a9:
         49:91:bb:9e:b2:d8:31:7b:85:ca:8e:ad:af:f8:27:85:db:c7:
         ef:e1:56:76:fe:ba:ea:54:b3:82:c8:25:f8:a5:18:ab:48:5e:
         2d:b0:58:cb:fe:8b:72:78:ab:68:be:98:f9:62:d2:c8:83:3d:
         09:8a:a8:77:d5:1c:b8:56:5e:8d:86:33:fd:d6:a3:1f:49:0c:
         1c:38:a3:86:62:31:df:84:7b:aa:76:c1:84:46:99:be:1f:0b:
         aa:5a:b0:85:50:39:fe:0c:96:63:e3:9f:3d:46:2a:e0:df:74:
         48:00:2c:1e:c3:8f:8a:e1:8a:5d:75:8f:07:cf:c3:e7:35:55:
         3c:92:39:d8:17:5a:bd:e0:ca:76:18:fe:ac:39:ff:14:f6:6f:
         5e:c5:2e:67:3b:18:62:93:e9:8c:a4:17:e2:93:1e:38:9c:30:
         47:a0:51:4b:29:7e:a9:85:73:3b:04:6b:06:cc:e9:21:81:05:
         86:2f:99:cd:d7:48:6c:2d:8f:f6:79:c2:93:0a:5a:1e:8c:37:
         84:ba:f9:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:09:45 2025 by rpki-client