Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft
File:                     9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft (raw, json)
Hash identifier:          AhhEMZCi5NZ74Ua3oJ4HOiA8DcuU5Uov+6JOutp9f4s=
Subject key identifier:   4C:A5:4C:59:7F:57:1F:F5:C8:6D:42:41:E1:27:C2:97:BC:6E:7A:C3
Authority key identifier: F7:34:33:3B:5B:B5:4F:BA:88:2B:23:2F:D2:53:25:2E:7E:A0:BB:C0
Certificate issuer:       /CN=A91D536E/serialNumber=F734333B5BB54FBA882B232FD253252E7EA0BBC0
Certificate serial:       078E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9zQzO1u1T7qIKyMv0lMlLn6gu8A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft
Manifest number:          0789
Signing time:             Sat 18 Oct 2025 22:49:42 +0000
Manifest this update:     Sat 18 Oct 2025 22:49:41 +0000
Manifest next update:     Sat 25 Oct 2025 22:49:41 +0000
Files and hashes:         1: 9zQzO1u1T7qIKyMv0lMlLn6gu8A.crl (hash: ZyqahWiiu0J1E4mSTrPE4xp20f/Ji4gVae+2Wr7FPEM=)
                          2: 6091D05229FC11EB861CCA7FC4F9AE02.roa (hash: oXfgRMCkFYhKUKORBUUeo77MRVn7Mx2xxFkJ1oK4WsM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.crl
                          rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9zQzO1u1T7qIKyMv0lMlLn6gu8A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 22:49:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1934 (0x78e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D536E, serialNumber=F734333B5BB54FBA882B232FD253252E7EA0BBC0
        Validity
            Not Before: Oct 18 22:49:41 2025 GMT
            Not After : Oct 25 22:49:41 2025 GMT
        Subject: CN=68f41985-b8c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4f:8f:07:ff:b8:ea:69:b4:8e:cf:09:0d:fe:
                    72:7f:f6:1e:7a:32:c0:3d:c4:08:c3:71:f2:40:38:
                    e1:74:45:4f:df:46:88:05:ea:ae:4a:7a:c4:49:b8:
                    ec:42:da:91:af:f4:8f:1f:e9:2c:d6:7a:45:22:c7:
                    84:d6:f0:75:8d:a1:d7:2f:94:2e:77:ab:80:89:2d:
                    52:5f:c7:57:84:73:32:1b:41:4a:aa:b5:28:4b:3a:
                    f2:57:0b:ac:c6:08:3c:78:b8:63:dc:9d:ae:27:19:
                    71:5a:e4:34:62:fd:5f:94:5c:3d:d4:e2:48:99:05:
                    21:d4:b3:17:b7:0c:83:55:7a:8f:d4:12:c1:1e:d3:
                    c6:2a:1e:1b:a2:03:33:41:fe:c7:89:d9:47:d0:5a:
                    38:d7:bf:79:15:29:ec:d6:26:e1:d7:68:27:e4:68:
                    8f:b4:3c:ff:d2:35:9b:e9:cd:e5:43:f5:7b:a8:4d:
                    34:e0:3c:cf:77:80:1b:1b:dd:30:28:7b:76:f1:10:
                    f7:3a:f0:93:13:00:00:f8:19:e5:c9:92:cc:86:fa:
                    74:0e:1d:36:25:8a:af:95:16:70:c2:0d:6e:78:a1:
                    53:89:da:d8:2b:d3:00:25:df:a7:bf:ba:70:32:c6:
                    90:77:5e:a2:86:10:30:64:74:c0:06:45:58:6c:a7:
                    60:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:A5:4C:59:7F:57:1F:F5:C8:6D:42:41:E1:27:C2:97:BC:6E:7A:C3
            X509v3 Authority Key Identifier:
                keyid:F7:34:33:3B:5B:B5:4F:BA:88:2B:23:2F:D2:53:25:2E:7E:A0:BB:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9zQzO1u1T7qIKyMv0lMlLn6gu8A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:61:67:0a:c1:10:4e:7d:6f:7a:cc:3a:0c:23:1f:29:1a:1a:
         b7:c0:df:67:b0:bb:21:7d:a9:e6:7d:dc:ce:69:31:c8:4c:49:
         03:6a:f7:17:5e:5a:b8:36:9e:7a:29:c4:49:2c:00:70:dd:79:
         db:0d:00:e9:45:64:d2:ef:c7:bf:36:24:08:f5:7f:07:d1:a7:
         c9:ab:9a:84:8d:ab:89:45:bf:92:63:74:b7:5b:a1:7b:53:21:
         d2:ec:72:2e:86:a4:83:6e:4f:8f:1e:d6:81:fe:49:93:93:db:
         24:20:de:79:25:ac:9c:ec:05:f3:c0:91:e2:25:6e:dc:64:a5:
         95:c2:a2:bb:82:11:f5:79:0f:4f:22:35:bf:17:02:a5:da:9f:
         d7:1c:bd:f0:16:4e:8a:2d:36:b3:cf:15:9f:e2:79:82:6b:18:
         2c:4f:a0:f3:79:7c:35:07:59:ad:25:e7:87:bf:8e:28:c9:0c:
         5f:f4:46:35:95:26:49:75:86:1d:be:36:4d:09:11:01:ca:b0:
         e3:8f:93:ca:70:10:dc:2d:12:71:5d:a5:2f:d1:4e:c8:17:a6:
         23:a1:47:da:8f:fc:1f:c8:31:1e:91:27:7e:47:96:c3:0b:8e:
         53:1f:6f:24:6e:9a:12:3b:20:61:bc:15:b4:dc:5d:13:47:80:
         71:3f:60:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:47:24 2025 by rpki-client