Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.mft
File:                     esDADw_KR57kZeT39UXoyUmT1hw.mft (raw, json)
Hash identifier:          B9a+D/XnhhNoS/l1MML910ix+lz+wcJQ5V1KkRLsJDc=
Subject key identifier:   CC:DB:CE:0D:86:19:8D:74:5B:8F:D1:6E:CB:A2:B0:8A:22:C1:7F:62
Authority key identifier: 7A:C0:C0:0F:0F:CA:47:9E:E4:65:E4:F7:F5:45:E8:C9:49:93:D6:1C
Certificate issuer:       /CN=A91D1691/serialNumber=7AC0C00F0FCA479EE465E4F7F545E8C94993D61C
Certificate serial:       2493
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esDADw_KR57kZeT39UXoyUmT1hw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.mft
Manifest number:          2467
Signing time:             Sat 18 Oct 2025 16:02:40 +0000
Manifest this update:     Sat 18 Oct 2025 16:02:39 +0000
Manifest next update:     Sat 25 Oct 2025 16:02:39 +0000
Files and hashes:         1: esDADw_KR57kZeT39UXoyUmT1hw.crl (hash: 4wk4amugjbBCiy4npswK38VNKJbx8yOQlspW7Pd3fLw=)
                          2: E8976FF0928211EF8D2A551EC4F9AE02.roa (hash: KaXP6yLqLy6u16YQgUTkal+kksEzHmImjnWX4XyyF9s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.crl
                          rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esDADw_KR57kZeT39UXoyUmT1hw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 16:02:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9363 (0x2493)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1691, serialNumber=7AC0C00F0FCA479EE465E4F7F545E8C94993D61C
        Validity
            Not Before: Oct 18 16:02:39 2025 GMT
            Not After : Oct 25 16:02:39 2025 GMT
        Subject: CN=68f3ba20-95bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:92:d4:43:ca:c1:99:52:23:0f:55:30:72:7c:
                    c4:b0:b9:08:c0:0b:73:f2:4e:8f:58:8f:bc:10:07:
                    e5:af:ad:fc:2c:d5:65:9d:ad:ee:4d:e9:74:bf:43:
                    29:ba:f5:57:00:79:59:2f:1e:fc:57:63:9a:cd:8d:
                    89:9d:de:d4:fd:83:a4:16:25:3a:e8:d7:08:22:c5:
                    3f:d2:cf:fa:6d:36:e3:39:8c:ad:97:e0:a8:0c:5b:
                    36:d2:33:3c:02:52:8a:e0:26:ea:d0:43:bb:8f:63:
                    56:01:f3:e1:d3:19:97:5c:fd:ad:b2:03:64:3c:c9:
                    d1:50:cb:f0:73:98:70:ce:b6:16:ae:d0:00:49:63:
                    32:13:48:b8:46:a6:1b:1f:fa:f8:90:0b:2b:1c:9e:
                    02:de:d2:41:13:5a:fc:a1:d4:4d:dd:49:19:55:45:
                    7a:ce:14:64:d6:13:22:df:8d:bc:e5:9d:78:20:5e:
                    ed:e1:a8:29:cb:75:7b:b3:da:8e:d5:67:bb:8b:a2:
                    6d:ea:08:34:7c:15:72:f8:bc:d5:1c:37:b6:9f:5c:
                    4d:87:e2:4e:b8:6d:20:97:4f:d7:83:f6:69:3e:e8:
                    7d:73:4f:03:3e:6d:a2:63:b9:6a:98:d1:ef:7d:d5:
                    0c:d6:d0:7c:a3:85:aa:b3:1b:c6:bf:eb:d5:72:36:
                    76:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:DB:CE:0D:86:19:8D:74:5B:8F:D1:6E:CB:A2:B0:8A:22:C1:7F:62
            X509v3 Authority Key Identifier:
                keyid:7A:C0:C0:0F:0F:CA:47:9E:E4:65:E4:F7:F5:45:E8:C9:49:93:D6:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esDADw_KR57kZeT39UXoyUmT1hw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:36:06:de:5a:76:47:0f:77:48:0e:6b:14:8d:b4:34:8c:eb:
         2b:34:e4:a7:16:bc:4a:ce:62:d1:29:35:d4:45:3e:8a:bf:0e:
         d2:61:9e:36:da:52:b0:f5:51:ec:da:2e:f1:d7:af:83:ed:f9:
         7e:9b:99:9a:7f:23:70:1a:85:a6:63:1b:11:47:2e:b7:ba:29:
         cc:69:5a:ee:cb:df:a5:69:c8:70:12:1d:a6:71:1f:54:2d:fd:
         71:f0:0a:63:df:8f:3b:ec:29:2a:a7:59:d5:a7:c5:ce:03:8f:
         24:39:7d:43:32:b9:fb:d1:6f:f3:25:cb:2e:ca:8e:5b:6e:01:
         d0:96:0e:60:35:6b:c3:a8:e0:b4:11:c3:77:2a:95:88:13:dd:
         88:32:d0:56:34:92:d1:a2:f2:43:da:40:e2:3a:2e:4b:00:98:
         49:c6:4e:e2:76:f7:e8:a5:3c:d9:9c:76:7f:f2:af:a6:73:36:
         7f:d5:cc:a6:a1:29:0f:db:99:5c:b9:17:8c:51:02:da:63:3f:
         4d:70:11:0e:4f:6f:32:e7:6c:55:43:78:ae:d5:f3:38:31:f5:
         30:2d:79:1a:bc:60:a1:92:1c:b8:11:9d:2b:a1:ed:e1:69:2a:
         b7:6b:99:33:8a:ee:a6:96:aa:23:6f:5d:23:26:18:aa:19:cb:
         06:5b:7d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:46:49 2025 by rpki-client