Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.mft
File:                     29rQCQF9kd-0ONcNG41NNIYvBo4.mft (raw, json)
Hash identifier:          b8+34YR+v877fC8+Gd8MqgLD4L0QzsYvuB/dcU5wPnE=
Subject key identifier:   7E:98:FF:53:D9:00:E6:AD:0F:30:1E:07:81:72:19:9E:D6:BC:F4:1F
Authority key identifier: DB:DA:D0:09:01:7D:91:DF:B4:38:D7:0D:1B:8D:4D:34:86:2F:06:8E
Certificate issuer:       /CN=A91F223F/serialNumber=DBDAD009017D91DFB438D70D1B8D4D34862F068E
Certificate serial:       0169
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29rQCQF9kd-0ONcNG41NNIYvBo4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.mft
Manifest number:          0165
Signing time:             Sun 19 Oct 2025 06:39:43 +0000
Manifest this update:     Sun 19 Oct 2025 06:39:42 +0000
Manifest next update:     Sun 26 Oct 2025 06:39:42 +0000
Files and hashes:         1: 29rQCQF9kd-0ONcNG41NNIYvBo4.crl (hash: iHJopHQ/eVNI9mddBqw26d+TpO5EBe6ti/hxjmF+tOI=)
                          2: 63E8E1AA8CAA11EE8B20D86EC4F9AE02.roa (hash: FS0NZn6HmMNUVE243zK4MTv8yDH9emQLgpWFOPvCnxU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.crl
                          rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29rQCQF9kd-0ONcNG41NNIYvBo4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 06:39:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 361 (0x169)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F223F, serialNumber=DBDAD009017D91DFB438D70D1B8D4D34862F068E
        Validity
            Not Before: Oct 19 06:39:42 2025 GMT
            Not After : Oct 26 06:39:42 2025 GMT
        Subject: CN=68f487ae-a6e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:82:0e:cb:08:52:29:0a:cc:d1:45:8a:9a:55:
                    89:3e:7c:f2:a1:40:ef:74:d4:04:13:5b:46:6a:c9:
                    7f:9a:37:82:e5:89:21:8c:b5:f5:a4:93:75:95:4f:
                    ad:0e:95:45:1e:5c:47:2e:c7:58:19:cb:16:1d:fc:
                    7b:af:5c:4d:7c:3f:4b:e1:12:f8:96:a0:69:19:37:
                    d8:c4:10:b2:96:5f:8d:7c:6b:51:7c:83:40:e0:dc:
                    bc:c2:ba:ab:93:e9:3e:c2:6c:af:9a:ad:1f:cb:85:
                    30:79:18:74:ed:fc:1d:4f:30:85:ea:3a:b2:cc:44:
                    73:72:3f:63:a7:0c:8f:7a:b5:ed:61:0a:b6:e1:8c:
                    ea:7e:c9:d7:6f:f6:e9:55:8f:c5:54:06:92:99:7c:
                    b1:51:2a:14:fc:85:a4:5b:71:92:dc:d2:dc:f5:12:
                    d5:ef:41:ff:93:f9:6f:c1:58:33:30:ed:32:b4:7e:
                    3e:d6:fb:9e:fc:7a:a1:7f:e5:cd:1e:5e:d7:07:fd:
                    c7:cb:d7:aa:95:26:55:bf:35:84:41:ae:7a:65:2c:
                    b5:06:6b:66:2d:f4:92:16:52:4b:e6:b9:02:54:1c:
                    26:ad:c4:07:12:42:28:1a:dd:00:c2:f3:5e:84:7d:
                    28:a5:2b:6b:a9:5e:46:f3:9c:4e:47:73:90:d7:26:
                    9d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:98:FF:53:D9:00:E6:AD:0F:30:1E:07:81:72:19:9E:D6:BC:F4:1F
            X509v3 Authority Key Identifier:
                keyid:DB:DA:D0:09:01:7D:91:DF:B4:38:D7:0D:1B:8D:4D:34:86:2F:06:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29rQCQF9kd-0ONcNG41NNIYvBo4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:72:17:e2:d0:da:77:c8:53:45:df:df:dd:44:35:f8:b2:ea:
         e9:6d:c8:77:86:3a:6d:db:55:8f:e2:1b:d5:a0:ce:af:94:65:
         aa:4e:9d:a6:72:d5:2b:0d:1e:64:15:8f:a6:ea:34:03:5d:c2:
         7e:da:7c:f8:13:4a:af:63:60:f5:60:1b:f0:22:0e:34:af:ce:
         d9:af:89:fc:80:51:ca:2a:d7:85:07:19:28:f6:b5:08:33:af:
         8a:ce:bb:99:88:ef:1b:47:9b:c4:07:69:b0:e3:f2:a9:4a:c0:
         58:dc:74:cf:1d:c6:7b:01:e7:ca:fc:a3:11:a2:4b:a9:2b:99:
         ee:06:5a:2f:7f:ce:e4:88:18:c3:3c:64:c9:4a:91:fa:da:d3:
         ff:6d:a0:bd:24:a1:69:d3:71:75:44:31:6d:57:37:18:d6:a6:
         1f:22:c1:30:b2:70:8f:3b:b3:61:2a:b1:b3:a5:66:6a:79:63:
         3d:ce:54:d0:8e:30:fe:2c:9b:fc:22:3e:dc:d7:db:ae:79:3e:
         57:23:95:ad:05:5e:da:61:c2:bb:42:58:39:28:20:c0:3a:02:
         69:6b:83:b7:94:d9:74:a1:ae:1b:71:84:0f:50:29:09:56:d4:
         0f:04:45:2a:7e:08:2f:f7:c0:d6:ed:ce:e5:93:e7:d6:3b:ba:
         96:ad:1b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:19:39 2025 by rpki-client