Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E520F/41CCBC6EA81911EFB9BDED71C4F9AE02/sb1NsCH1THJj88NTX4g2hJui5g4.mft
File:                     sb1NsCH1THJj88NTX4g2hJui5g4.mft (raw, json)
Hash identifier:          7D2jQqx/qFnGp349Z6rA/+4bGFRbedjmr0uogEJ+P+0=
Subject key identifier:   80:47:F5:FF:9C:86:7E:5F:01:74:DD:92:48:9C:64:09:B4:A3:01:84
Authority key identifier: B1:BD:4D:B0:21:F5:4C:72:63:F3:C3:53:5F:88:36:84:9B:A2:E6:0E
Certificate issuer:       /CN=A91E520F/serialNumber=B1BD4DB021F54C7263F3C3535F8836849BA2E60E
Certificate serial:       AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sb1NsCH1THJj88NTX4g2hJui5g4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E520F/41CCBC6EA81911EFB9BDED71C4F9AE02/sb1NsCH1THJj88NTX4g2hJui5g4.mft
Manifest number:          AC
Signing time:             Sun 19 Oct 2025 09:21:36 +0000
Manifest this update:     Sun 19 Oct 2025 09:21:35 +0000
Manifest next update:     Sun 26 Oct 2025 09:21:35 +0000
Files and hashes:         1: sb1NsCH1THJj88NTX4g2hJui5g4.crl (hash: Wzxgzmy5UxybAgP/k+IeyX3Zi9mvuM7y0mtJI8Y3v4E=)
                          2: A30B17FAA81911EF862F3A56C4F9AE02.roa (hash: 6sFK3IOISiUObcshTaAhJEDmqO5j9CtjdCqW8qlBcT4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E520F/41CCBC6EA81911EFB9BDED71C4F9AE02/sb1NsCH1THJj88NTX4g2hJui5g4.crl
                          rsync://rpki.apnic.net/member_repository/A91E520F/41CCBC6EA81911EFB9BDED71C4F9AE02/sb1NsCH1THJj88NTX4g2hJui5g4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sb1NsCH1THJj88NTX4g2hJui5g4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 09:21:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 174 (0xae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E520F, serialNumber=B1BD4DB021F54C7263F3C3535F8836849BA2E60E
        Validity
            Not Before: Oct 19 09:21:35 2025 GMT
            Not After : Oct 26 09:21:35 2025 GMT
        Subject: CN=68f4ad9f-26c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:24:17:69:7a:c5:eb:f2:ce:3b:b7:94:b2:74:
                    6c:0b:04:85:36:f8:e7:3e:c7:72:c9:7d:09:e1:d8:
                    70:cd:d2:28:83:b3:eb:fc:0b:a0:0a:e3:13:cf:67:
                    cb:9b:31:51:80:69:d1:87:3d:79:59:18:c2:de:b8:
                    1c:96:bc:c4:6e:b5:6e:f1:26:b1:20:08:7c:d7:e1:
                    84:11:70:c8:e8:a9:6c:e7:7c:29:04:9e:f6:4c:aa:
                    62:9d:fa:21:ff:ce:10:cd:92:c8:cc:67:8f:c9:4b:
                    8a:fd:d5:9f:9b:d3:d7:93:59:90:fd:af:d8:6e:aa:
                    ac:7c:2e:a7:e7:e9:7d:bb:73:d0:7c:0c:27:7f:c2:
                    16:e7:0e:66:30:20:e3:cd:3b:56:0f:46:94:d1:82:
                    59:7f:26:fa:6f:04:66:36:cb:82:ef:34:77:7a:49:
                    3e:37:bd:69:56:61:12:a2:cb:62:db:98:d4:60:55:
                    e9:ee:22:ae:2f:83:9e:6b:42:3e:70:92:a8:95:bb:
                    64:62:2f:3b:71:38:22:a2:4d:b9:e3:cb:cd:43:1c:
                    9b:bf:8c:da:f3:c5:32:06:d2:a2:fb:48:2f:be:d4:
                    01:b5:e8:b0:1d:be:3a:cc:44:fe:3d:1f:ae:4b:d1:
                    5c:e7:0b:44:b7:5d:73:8d:ea:f1:18:26:23:cc:26:
                    55:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:47:F5:FF:9C:86:7E:5F:01:74:DD:92:48:9C:64:09:B4:A3:01:84
            X509v3 Authority Key Identifier:
                keyid:B1:BD:4D:B0:21:F5:4C:72:63:F3:C3:53:5F:88:36:84:9B:A2:E6:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E520F/41CCBC6EA81911EFB9BDED71C4F9AE02/sb1NsCH1THJj88NTX4g2hJui5g4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sb1NsCH1THJj88NTX4g2hJui5g4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E520F/41CCBC6EA81911EFB9BDED71C4F9AE02/sb1NsCH1THJj88NTX4g2hJui5g4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:7b:87:28:ef:48:22:12:96:7a:f0:bd:e9:37:85:a2:23:c5:
         f6:06:1e:3b:6b:d2:5c:48:55:59:78:83:a9:cb:5a:89:e3:77:
         a9:c8:a4:46:1c:76:cb:43:7b:50:38:c6:8b:e8:f3:1a:9b:97:
         0a:c4:9b:71:4a:36:57:b9:88:7d:b3:97:2a:1e:eb:67:e8:33:
         58:32:5c:dc:ec:e7:cc:c6:3e:6b:ce:e1:97:56:93:07:cd:0d:
         7c:84:37:cb:26:1a:20:a5:1b:a3:61:9c:f9:93:e6:17:a7:b7:
         df:4f:28:9f:86:b0:a3:50:52:da:29:da:da:14:23:2a:22:47:
         79:44:12:74:03:d2:26:7c:a1:42:1f:32:d8:06:c3:87:d6:bf:
         fe:8a:c7:27:fa:9b:f2:7a:e1:15:9c:4c:d2:4f:c1:ff:81:ea:
         8c:4c:62:ce:e4:8a:0d:5e:d3:7d:c7:54:7d:05:d8:2b:72:19:
         f6:1b:21:19:7f:55:5f:b7:b2:bc:5e:ba:ca:71:88:a7:59:d1:
         cc:99:ff:38:34:28:b6:82:8c:3f:ec:6d:36:9f:53:44:eb:9f:
         4e:2d:71:c5:98:0c:ba:a5:16:c3:cb:8d:96:ac:84:c3:59:32:
         9f:44:f9:22:2f:fa:83:bb:5d:74:20:ee:01:9f:2b:91:9a:86:
         11:52:29:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:43:09 2025 by rpki-client