Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.mft
File:                     _nzI0SyMuUDQbq7bWwrUPQUDYvE.mft (raw, json)
Hash identifier:          emeSBM95DNyYmuvdcmIz5+p14D+L47qM6I1JpP/U0yE=
Subject key identifier:   53:26:67:F1:78:70:EC:4F:D4:79:DA:C0:E2:96:51:86:68:2D:8B:7B
Authority key identifier: FE:7C:C8:D1:2C:8C:B9:40:D0:6E:AE:DB:5B:0A:D4:3D:05:03:62:F1
Certificate issuer:       /CN=A91D404F/serialNumber=FE7CC8D12C8CB940D06EAEDB5B0AD43D050362F1
Certificate serial:       94
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_nzI0SyMuUDQbq7bWwrUPQUDYvE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.mft
Manifest number:          93
Signing time:             Sun 19 Oct 2025 09:40:53 +0000
Manifest this update:     Sun 19 Oct 2025 09:40:53 +0000
Manifest next update:     Sun 26 Oct 2025 09:40:53 +0000
Files and hashes:         1: _nzI0SyMuUDQbq7bWwrUPQUDYvE.crl (hash: TMTn75MYsTmuajoJept1tJR1KMnFkXkoUoCMtBka4nU=)
                          2: F943DF74CBF711EFB86EC74FC4F9AE02.roa (hash: OQsiNqk/6UEhG+WoM7b9x1Qk45e1mg8EolKiz0N5DwU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.crl
                          rsync://rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_nzI0SyMuUDQbq7bWwrUPQUDYvE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 09:40:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 148 (0x94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D404F, serialNumber=FE7CC8D12C8CB940D06EAEDB5B0AD43D050362F1
        Validity
            Not Before: Oct 19 09:40:53 2025 GMT
            Not After : Oct 26 09:40:53 2025 GMT
        Subject: CN=68f4b225-7e8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:26:3f:a7:9a:c3:d4:12:43:06:24:3b:fb:41:
                    4a:31:54:eb:b5:56:89:b4:76:48:25:07:3e:6b:42:
                    31:69:7c:2c:76:6e:1b:e1:80:3b:bb:57:f9:4e:f0:
                    1c:1a:d4:aa:c6:68:cc:7a:ab:f6:ae:29:91:39:f6:
                    f5:4e:de:fb:97:ff:23:5d:0c:f0:f4:7e:dd:c9:b9:
                    15:5f:92:bd:3a:1f:06:a5:12:fb:4d:8a:2b:ec:0e:
                    80:ea:d9:78:92:42:58:a6:e9:93:c5:43:c8:43:e8:
                    eb:23:9a:19:35:0a:47:96:80:28:b7:b6:0a:8f:d6:
                    43:cf:eb:7a:c8:4d:00:aa:16:b1:b1:df:0e:99:6c:
                    4b:95:47:27:38:d7:13:c7:00:6e:d5:60:c6:76:a6:
                    b0:fa:5e:e6:84:c5:45:78:4a:7b:5f:d7:75:3b:ae:
                    7a:b8:7f:84:1c:33:95:19:36:06:dd:55:b2:b8:18:
                    99:0e:69:0b:98:5e:6f:d5:54:7e:1c:76:ee:8f:2f:
                    6c:76:e8:82:49:e3:70:31:fc:6b:c2:89:3d:a3:97:
                    69:6f:e6:69:1b:b2:55:f1:c9:74:c4:3e:24:69:31:
                    f4:1b:1b:58:ce:e9:11:13:f6:76:c8:cf:e7:4e:b0:
                    ff:67:5c:e3:ba:b2:dd:e7:19:cf:ad:42:6d:e9:a4:
                    37:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:26:67:F1:78:70:EC:4F:D4:79:DA:C0:E2:96:51:86:68:2D:8B:7B
            X509v3 Authority Key Identifier:
                keyid:FE:7C:C8:D1:2C:8C:B9:40:D0:6E:AE:DB:5B:0A:D4:3D:05:03:62:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_nzI0SyMuUDQbq7bWwrUPQUDYvE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:7c:42:19:ca:dc:d7:21:e3:62:cb:f4:cc:d4:fa:d8:54:cb:
         91:b6:b1:93:d5:56:8c:4b:58:f4:92:4f:fd:54:46:db:45:f2:
         ec:23:be:52:10:03:cf:4b:9b:78:49:6a:cb:e4:80:35:35:bd:
         c1:fd:8a:ea:38:4e:95:e6:aa:d7:05:ce:54:3b:69:f0:ae:32:
         1f:65:13:5a:10:c9:b8:ae:5f:7a:3e:24:eb:0b:af:4d:15:25:
         b0:0e:3a:8b:e3:f2:16:88:6f:35:18:48:de:f6:1c:8b:27:60:
         61:b7:14:a5:9c:ed:66:bd:0b:5d:92:79:b7:71:9e:32:4b:51:
         c8:91:3a:e4:dc:67:3c:d5:86:93:99:ad:f8:90:01:74:33:d8:
         ca:e1:e3:75:fd:44:20:c1:39:c7:2e:d1:ba:cd:14:56:3d:8d:
         69:95:c9:af:e1:48:39:6e:10:4e:1b:c0:90:e7:67:78:97:07:
         04:17:49:3f:40:d2:fb:f5:95:7e:2d:15:b1:47:09:2c:b9:43:
         3c:ed:26:f8:ab:32:87:01:50:11:65:0d:df:31:64:df:83:6e:
         7d:d3:d2:23:86:bc:c7:f4:6e:e9:30:7c:fa:97:8c:14:11:a2:
         d2:79:2e:02:b2:52:68:53:85:df:41:23:15:f2:e8:31:c0:9c:
         b3:1d:c2:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:02:50 2025 by rpki-client