Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.mft
File:                     53BQiRv4knQyZQtwbyv-3ZKhEck.mft (raw, json)
Hash identifier:          bvmUzNQp05UriiGOff4mT6tlEBcM5qa2y9516Eg9gEA=
Subject key identifier:   85:FF:72:E9:48:B8:3A:93:E7:4C:99:04:C7:BF:75:DD:BE:CE:C6:24
Authority key identifier: E7:70:50:89:1B:F8:92:74:32:65:0B:70:6F:2B:FE:DD:92:A1:11:C9
Certificate issuer:       /CN=A91F8ADF/serialNumber=E77050891BF8927432650B706F2BFEDD92A111C9
Certificate serial:       01CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53BQiRv4knQyZQtwbyv-3ZKhEck.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.mft
Manifest number:          01C9
Signing time:             Sun 19 Oct 2025 05:20:58 +0000
Manifest this update:     Sun 19 Oct 2025 05:20:57 +0000
Manifest next update:     Sun 26 Oct 2025 05:20:57 +0000
Files and hashes:         1: 53BQiRv4knQyZQtwbyv-3ZKhEck.crl (hash: gZ/B+K70EdtK1kqJK4rDo2x8mxG/F7sZvXmRi/zDxUA=)
                          2: F3210638F06D11ED9055A212C4F9AE02.roa (hash: MagQfzBe5yekFsZC62iyjicRBCCYPyKf7/pA5fRZ3FI=)
                          3: F2948C58F06D11ED9055A212C4F9AE02.roa (hash: WtNf5u0VPKCbZuWxho7o4y46h8TygPH5bunfDKzrwyU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.crl
                          rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53BQiRv4knQyZQtwbyv-3ZKhEck.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 05:20:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 463 (0x1cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8ADF, serialNumber=E77050891BF8927432650B706F2BFEDD92A111C9
        Validity
            Not Before: Oct 19 05:20:57 2025 GMT
            Not After : Oct 26 05:20:57 2025 GMT
        Subject: CN=68f47539-0e56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9e:67:ea:90:3e:03:fb:b6:ee:d9:88:95:b6:
                    8b:bb:15:be:3f:a9:1d:89:ec:57:a1:98:b6:c9:bd:
                    3a:71:4b:ea:ea:5a:1b:29:06:75:71:ce:fa:86:26:
                    5a:95:5e:86:1e:18:05:02:a2:cd:b3:02:07:c4:44:
                    29:12:91:6c:f1:f2:2d:a7:1e:83:fe:2a:52:7e:79:
                    fc:a7:39:f1:11:66:3d:f6:1c:92:cd:34:15:1a:13:
                    8f:b5:d4:77:3c:1f:dc:bd:78:bd:e9:dd:ae:02:d7:
                    26:11:52:46:2d:24:ba:41:55:10:e9:ea:ce:51:be:
                    e8:47:07:24:75:1c:72:a3:c3:7a:1a:1e:54:6c:f9:
                    55:c4:f7:73:85:86:50:95:af:2a:16:86:18:c4:42:
                    b8:83:4b:16:6c:31:c5:97:92:c1:8a:03:cc:b7:c8:
                    91:d8:e8:cd:03:20:7f:a6:bd:46:52:49:1e:69:33:
                    eb:fd:78:9d:14:28:3e:e3:c7:16:a2:fd:f8:63:59:
                    ef:10:df:3f:85:84:e2:8b:af:7e:60:4a:a5:db:75:
                    27:33:49:6f:ae:ff:5d:d9:bc:9c:dc:a4:dd:94:34:
                    c9:ac:fe:b9:75:84:45:71:2c:25:f9:d7:4f:c3:1f:
                    5f:77:81:5a:9c:a8:7a:25:8f:5e:8e:a7:92:e9:d7:
                    2b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:FF:72:E9:48:B8:3A:93:E7:4C:99:04:C7:BF:75:DD:BE:CE:C6:24
            X509v3 Authority Key Identifier:
                keyid:E7:70:50:89:1B:F8:92:74:32:65:0B:70:6F:2B:FE:DD:92:A1:11:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53BQiRv4knQyZQtwbyv-3ZKhEck.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:e8:6d:68:63:b1:45:2e:84:47:ed:9f:d3:8d:72:a1:25:99:
         2e:52:a5:fb:22:5b:02:f2:4c:c2:04:11:7e:86:7e:1d:ae:9c:
         74:92:8b:96:9f:18:a6:3c:52:2a:55:36:7a:8c:75:47:a6:cd:
         e1:6b:a6:75:b2:8d:74:bb:3a:f0:7f:6a:40:95:49:a3:43:63:
         bf:38:3a:e4:0e:96:86:1d:ec:ad:8d:6b:0f:be:37:c5:4f:6d:
         6f:59:26:a9:66:99:b9:05:41:2f:d4:40:43:5d:9e:b3:30:35:
         8f:fc:23:d3:ab:1f:78:b1:65:8b:d3:7d:ed:6a:b0:ec:8c:33:
         04:7f:07:f1:22:5f:01:06:f8:8e:c1:a3:58:e2:ce:62:90:e8:
         6d:6c:9e:13:b3:2a:0a:a0:58:f3:2b:cd:76:d9:b9:cb:ac:96:
         6f:2c:2e:09:08:3c:4e:3f:b3:36:04:22:7a:83:d8:f8:ff:0f:
         fd:e6:f8:e3:06:fd:9a:9e:0f:9a:9d:1e:7d:7d:99:32:a7:5e:
         81:9b:70:28:11:62:d7:5e:d0:31:11:d2:f3:4b:ac:82:12:09:
         fd:8f:67:f4:2b:c4:8f:e1:c2:0b:1a:89:d1:b4:b2:15:76:a5:
         93:59:9c:54:49:91:11:98:b9:75:bb:b8:7a:cb:23:df:c8:e0:
         20:c6:ba:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:59:47 2025 by rpki-client