Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.mft
File:                     rea1d9VLWrCQBc5hO7E2SGUuams.mft (raw, json)
Hash identifier:          ThTC4hDXxdSrfTLrVnXxpE08IhwFYkOfNJ6zwjP47LE=
Subject key identifier:   1F:89:B9:CD:F9:46:C0:95:3A:8D:C4:36:BC:32:3C:BA:04:5E:C0:DF
Authority key identifier: AD:E6:B5:77:D5:4B:5A:B0:90:05:CE:61:3B:B1:36:48:65:2E:6A:6B
Certificate issuer:       /CN=A91F4553/serialNumber=ADE6B577D54B5AB09005CE613BB13648652E6A6B
Certificate serial:       05A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rea1d9VLWrCQBc5hO7E2SGUuams.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.mft
Manifest number:          059D
Signing time:             Sun 19 Oct 2025 00:51:09 +0000
Manifest this update:     Sun 19 Oct 2025 00:51:08 +0000
Manifest next update:     Sun 26 Oct 2025 00:51:08 +0000
Files and hashes:         1: rea1d9VLWrCQBc5hO7E2SGUuams.crl (hash: C7AGstfBmTUJHX7vH6iVxDzz9OjFHSSij64wseWe99U=)
                          2: A1491F7CEB7811EB9134133BC4F9AE02.roa (hash: C9U0iPB8A/9VqWcnQG5AxuP08um0L5X8KsDf++uFfPM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.crl
                          rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rea1d9VLWrCQBc5hO7E2SGUuams.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 00:51:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1442 (0x5a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4553, serialNumber=ADE6B577D54B5AB09005CE613BB13648652E6A6B
        Validity
            Not Before: Oct 19 00:51:08 2025 GMT
            Not After : Oct 26 00:51:08 2025 GMT
        Subject: CN=68f435fc-045a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:91:62:fc:83:61:7e:ef:7c:07:d8:7c:d0:60:
                    f0:e5:be:54:97:84:ae:01:88:f6:1c:ac:42:f4:2a:
                    6a:a2:15:02:35:a2:1a:9c:26:80:21:b2:72:6c:de:
                    59:13:13:1c:1d:1f:3a:70:62:3d:44:70:6a:5b:16:
                    c7:69:0b:a6:cc:1a:58:dc:a9:ed:ea:3e:07:b4:5b:
                    e9:b9:93:31:92:00:0a:c4:e7:69:05:62:a7:71:b8:
                    52:d8:be:06:73:a7:59:68:b8:80:b6:45:09:e9:e1:
                    15:4d:36:5e:ad:e9:7b:9a:bd:5f:a8:eb:02:7e:ac:
                    d8:71:3a:c3:f6:ce:d8:76:26:91:3c:3c:2d:ea:22:
                    26:17:2c:7c:4b:50:74:9d:a8:33:b0:30:fc:ff:7c:
                    dc:3c:f4:2a:35:f0:70:5a:07:68:6a:ef:f3:10:99:
                    27:60:93:ac:a7:0c:42:c0:4c:5b:e4:ab:31:71:cd:
                    45:fd:2c:fc:f5:61:74:33:96:63:ee:46:ef:90:49:
                    02:1c:43:4e:f6:d5:f4:ba:75:8d:d0:ec:37:6f:f4:
                    09:73:19:ad:48:5e:e2:5f:e2:1e:79:95:6f:87:9c:
                    ba:f0:9f:6e:3c:f3:61:6a:38:f6:a6:02:56:c2:c5:
                    89:6e:d1:7a:ad:54:80:a9:ac:95:eb:8e:de:03:38:
                    6a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:89:B9:CD:F9:46:C0:95:3A:8D:C4:36:BC:32:3C:BA:04:5E:C0:DF
            X509v3 Authority Key Identifier:
                keyid:AD:E6:B5:77:D5:4B:5A:B0:90:05:CE:61:3B:B1:36:48:65:2E:6A:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rea1d9VLWrCQBc5hO7E2SGUuams.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:34:8f:48:28:9a:32:10:6d:89:14:9c:39:7c:a9:1e:b7:8e:
         c9:a8:96:96:3f:0f:3c:40:db:7b:50:b9:b3:e9:64:74:eb:a9:
         d5:93:c4:77:81:69:b2:36:0a:c7:df:c2:12:79:bc:e6:3a:8b:
         7c:78:1e:29:8c:ad:fd:88:56:73:2d:d0:0d:46:82:fa:47:95:
         9b:60:3d:c4:45:fb:8d:9d:d4:e2:1d:ce:21:b2:56:51:7e:f7:
         d4:ec:d1:f1:d9:a1:0d:55:26:b8:89:65:da:cd:4a:2f:93:66:
         18:b4:6a:b0:9d:24:fb:77:62:0c:6d:c6:c0:d5:6f:b8:be:36:
         81:02:3a:6a:04:87:b4:bf:6e:7f:f3:5d:38:bb:2c:ab:db:ea:
         4a:a7:c7:b6:09:59:d5:4a:fc:89:39:50:18:20:c2:62:3c:d9:
         7d:98:46:41:38:c1:c8:4f:41:cf:07:fa:97:a1:25:ea:50:db:
         06:7d:3d:ff:0e:b5:06:19:9d:7b:19:6f:4b:6b:3b:ea:89:2f:
         3e:54:b3:a4:a0:00:6d:0b:08:aa:63:95:bf:53:92:02:12:5b:
         a5:dd:8b:64:1e:bd:d1:9c:e2:44:d4:7f:d2:22:38:a3:7e:79:
         3e:a1:0d:24:39:bc:ea:b5:c7:a0:4c:0e:ac:00:19:fc:ab:36:
         2f:62:71:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:21:57 2025 by rpki-client