Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft
File:                     PnOyvhMDe-dEOR06iZzdICuC920.mft (raw, json)
Hash identifier:          KamKOypi6fls/7PYTGHYWt/p5GJumSgoza9XYnZVSGI=
Subject key identifier:   F2:2B:1D:05:8C:7B:4A:C1:11:17:0D:84:BD:06:10:48:F2:63:4A:77
Authority key identifier: 3E:73:B2:BE:13:03:7B:E7:44:39:1D:3A:89:9C:DD:20:2B:82:F7:6D
Certificate issuer:       /CN=A91E5D0C/serialNumber=3E73B2BE13037BE744391D3A899CDD202B82F76D
Certificate serial:       0513
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft
Manifest number:          04FE
Signing time:             Sun 19 Oct 2025 01:31:20 +0000
Manifest this update:     Sun 19 Oct 2025 01:31:19 +0000
Manifest next update:     Sun 26 Oct 2025 01:31:19 +0000
Files and hashes:         1: PnOyvhMDe-dEOR06iZzdICuC920.crl (hash: vJf8x9XI83Ghs5VR/cOaoyDgjSrgqHWXn8wNx0bIxX0=)
                          2: EFFA034837D111EC9337B812C4F9AE02.roa (hash: GRUpCE+gVb2TzuJuLp6/bFNygGmQWG7Yo+BJcqN3ABA=)
                          3: 9C581C28B07511EF9D153813C4F9AE02.roa (hash: 2ILq0YdLX+uDk2zpnZWvB9sk0e06nVHIZcSy04DKJII=)
                          4: FE76F7D8EC4A11EFA7845862C4F9AE02.roa (hash: JmLkpvQJH0Uq9XtysKaBXjhAS8plkz/VizJFG4sBHBE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.crl
                          rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 01:31:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1299 (0x513)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5D0C, serialNumber=3E73B2BE13037BE744391D3A899CDD202B82F76D
        Validity
            Not Before: Oct 19 01:31:19 2025 GMT
            Not After : Oct 26 01:31:19 2025 GMT
        Subject: CN=68f43f67-f9be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7f:92:ad:0e:2e:4b:a4:e4:73:49:dc:9b:85:
                    e1:a7:b1:3c:da:ca:87:26:27:03:64:5d:35:e1:51:
                    21:eb:89:1b:be:17:49:b3:0a:db:5f:e6:c5:b4:d5:
                    49:2a:3c:f0:c2:11:ab:f0:72:f1:32:29:f7:03:c2:
                    a6:a3:ad:3e:85:fc:12:ca:1c:20:29:b6:45:d0:30:
                    e8:60:28:c3:c1:51:bc:08:f6:c4:21:7f:35:76:c1:
                    c8:e9:ab:e7:40:f7:ab:e9:0c:ed:a8:7c:2a:23:14:
                    eb:55:23:a0:2d:ad:e6:67:6a:c4:65:46:0d:29:76:
                    51:75:8c:52:e1:46:19:3c:12:b8:a0:25:ec:5a:b0:
                    ba:83:a9:dc:d8:a2:e7:c5:e8:87:01:28:3e:1c:9a:
                    93:3a:ae:77:8e:a8:2f:19:6b:fe:50:88:eb:11:f6:
                    1e:c2:36:c1:e9:7b:f3:d3:b4:c2:ee:00:04:fb:c6:
                    1f:8e:65:77:c5:34:8c:42:e2:19:26:b6:90:a7:f9:
                    da:03:3e:5c:a7:4d:68:12:2d:f3:3f:19:9a:00:63:
                    87:6c:0d:eb:98:1e:4d:dc:d3:82:2d:51:79:e4:e5:
                    e6:7b:87:12:43:f8:0a:4d:23:64:f2:02:9e:f1:46:
                    e7:0a:b6:bb:95:ed:be:78:28:73:5f:da:c0:41:e6:
                    36:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:2B:1D:05:8C:7B:4A:C1:11:17:0D:84:BD:06:10:48:F2:63:4A:77
            X509v3 Authority Key Identifier:
                keyid:3E:73:B2:BE:13:03:7B:E7:44:39:1D:3A:89:9C:DD:20:2B:82:F7:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:ec:fa:2c:29:29:c0:f2:61:11:db:01:3c:19:b8:14:4c:70:
         c7:63:dd:11:ef:2b:ca:a5:b9:70:56:3f:09:61:71:50:13:1f:
         32:8d:50:85:d1:41:7d:cf:f2:10:7c:d9:7e:46:63:31:3d:25:
         75:c1:f6:34:38:37:10:fc:72:f0:70:e0:8b:eb:a7:5a:ce:3a:
         8f:8d:28:1f:71:dc:22:49:f4:30:e3:2c:0b:4a:6c:28:2e:2d:
         28:10:35:ec:39:5c:3f:01:f7:f9:5c:b9:21:bb:0a:15:26:14:
         6d:38:7d:95:6d:b0:fa:ac:50:f9:b1:59:a2:f1:07:4a:4f:82:
         38:83:25:55:89:b3:89:a7:87:24:48:d2:26:e5:a2:43:7b:e3:
         c9:8f:06:03:fb:4f:1a:94:de:0a:a1:4a:2a:43:65:4f:e8:94:
         0a:e8:bb:59:79:95:2a:6f:55:59:e0:82:02:f4:15:57:42:f8:
         d5:61:b1:50:d2:95:4f:98:c1:7b:df:a0:21:0f:63:3a:73:9b:
         bc:da:93:a7:f2:ae:d0:18:83:f6:a7:d2:08:b9:d8:a9:93:6f:
         1c:c0:d5:b5:75:1a:54:35:b6:07:77:62:32:10:fd:95:98:e4:
         96:99:aa:8d:ce:b1:af:58:7d:99:d2:a5:5b:dd:cb:04:bf:a2:
         4f:86:0e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:11:22 2025 by rpki-client