Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113217/D72196D0215C11EEBCB5B24EC4F9AE02/uzAHjPaHeH06Wz5TTAiXFqhrE7s.mft
File:                     uzAHjPaHeH06Wz5TTAiXFqhrE7s.mft (raw, json)
Hash identifier:          pjICRJ2Zz7WFeGSVDGkMtLeAwcuoLJOLMl7/UDc45oo=
Subject key identifier:   F8:B4:49:0E:D5:4A:33:50:3B:E2:FD:54:94:F1:E3:A4:F7:CE:A2:D6
Authority key identifier: BB:30:07:8C:F6:87:78:7D:3A:5B:3E:53:4C:08:97:16:A8:6B:13:BB
Certificate issuer:       /CN=A9113217/serialNumber=BB30078CF687787D3A5B3E534C089716A86B13BB
Certificate serial:       01B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uzAHjPaHeH06Wz5TTAiXFqhrE7s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113217/D72196D0215C11EEBCB5B24EC4F9AE02/uzAHjPaHeH06Wz5TTAiXFqhrE7s.mft
Manifest number:          01B4
Signing time:             Mon 03 Nov 2025 03:07:45 +0000
Manifest this update:     Mon 03 Nov 2025 03:07:44 +0000
Manifest next update:     Mon 10 Nov 2025 03:07:44 +0000
Files and hashes:         1: uzAHjPaHeH06Wz5TTAiXFqhrE7s.crl (hash: 5RBi9IynB8uS11m+YLvmr4kwptHIKodUnrhVyYCy7es=)
                          2: 859871F2215D11EE963E9A52C4F9AE02.roa (hash: Z3peH/mE9SV9hvZtkmemszIcaOCUTsQPfGHf/GpQqto=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113217/D72196D0215C11EEBCB5B24EC4F9AE02/uzAHjPaHeH06Wz5TTAiXFqhrE7s.crl
                          rsync://rpki.apnic.net/member_repository/A9113217/D72196D0215C11EEBCB5B24EC4F9AE02/uzAHjPaHeH06Wz5TTAiXFqhrE7s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uzAHjPaHeH06Wz5TTAiXFqhrE7s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 03:07:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 440 (0x1b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113217, serialNumber=BB30078CF687787D3A5B3E534C089716A86B13BB
        Validity
            Not Before: Nov  3 03:07:44 2025 GMT
            Not After : Nov 10 03:07:44 2025 GMT
        Subject: CN=69081c80-a606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:dd:b7:da:80:50:82:f1:7b:4f:67:ba:97:41:
                    fc:19:d2:6a:f6:7c:af:74:88:e3:be:74:46:bb:52:
                    cc:97:f9:82:62:3f:a8:50:bf:0d:ef:75:19:be:90:
                    99:e4:08:f6:e6:4e:7d:7f:fd:6e:3a:c2:14:fb:6e:
                    28:ee:d0:62:66:bc:82:ec:d8:d9:ac:2a:24:ce:7f:
                    b0:d3:a7:d3:86:e1:4c:a3:b3:a2:36:95:3f:3a:71:
                    82:7c:52:24:27:4a:ed:70:a2:8c:49:f8:6e:6f:a7:
                    58:0a:30:46:3f:36:20:ba:b6:b2:ca:9c:0a:48:8d:
                    fe:aa:36:eb:c3:fc:14:cf:fd:fe:9c:0f:b9:02:55:
                    0e:16:84:60:e1:df:79:fe:2c:1a:d9:79:e6:fa:c0:
                    4c:78:d0:da:54:19:b4:92:92:8f:6d:58:b4:1a:50:
                    2c:c7:65:17:77:bb:ad:a7:fc:e4:51:5a:f3:4c:6b:
                    24:f4:45:a6:c6:a6:b1:36:46:fd:9c:f5:cd:87:02:
                    ac:0a:8e:63:83:26:fd:75:af:34:22:cb:98:fe:6f:
                    e1:fa:a3:8c:98:a2:b1:a9:7f:1f:a8:3c:3e:e5:5a:
                    9a:25:e6:b9:87:41:7e:a9:cc:9f:91:50:75:18:50:
                    6a:1d:73:4d:5a:5f:13:41:e3:38:34:29:84:61:9c:
                    d9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:B4:49:0E:D5:4A:33:50:3B:E2:FD:54:94:F1:E3:A4:F7:CE:A2:D6
            X509v3 Authority Key Identifier:
                keyid:BB:30:07:8C:F6:87:78:7D:3A:5B:3E:53:4C:08:97:16:A8:6B:13:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113217/D72196D0215C11EEBCB5B24EC4F9AE02/uzAHjPaHeH06Wz5TTAiXFqhrE7s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uzAHjPaHeH06Wz5TTAiXFqhrE7s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113217/D72196D0215C11EEBCB5B24EC4F9AE02/uzAHjPaHeH06Wz5TTAiXFqhrE7s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:83:a6:c3:f4:3a:60:b1:f0:1b:b4:bb:fe:b8:bb:b3:f5:ca:
         5e:f2:a0:b9:86:1f:10:67:72:8c:48:81:48:45:a5:87:5a:a2:
         0f:7b:08:1c:04:42:aa:a0:25:b9:ab:74:d6:fa:08:4f:61:7b:
         32:5e:2b:41:fc:de:25:53:76:1c:1b:52:3a:65:69:3b:a5:77:
         e6:e1:bd:19:0b:8d:c6:bb:38:3a:c2:75:f8:0c:a7:ab:09:a9:
         62:46:97:6d:64:e6:a3:53:19:d9:dd:6a:cf:76:d4:c3:b5:6e:
         74:ab:e2:51:fe:b0:d6:5c:83:33:4d:e8:3c:0e:a9:cb:99:3a:
         d1:09:a1:f6:31:4f:2b:4a:b6:db:40:4a:4e:12:08:a8:f8:31:
         4a:ca:9a:9d:f9:35:63:3b:e3:79:60:34:36:14:8b:90:25:9e:
         37:40:ab:a3:0b:83:7f:f6:87:3b:c8:b8:46:38:ff:0e:69:c5:
         30:0c:29:45:6c:af:85:65:82:2b:58:89:85:07:a7:2e:83:2a:
         46:37:f2:a0:ec:7b:07:01:e1:8e:81:1c:cf:04:20:a8:df:2a:
         3f:82:a0:84:58:81:75:4e:19:26:d4:6b:32:18:a9:92:20:df:
         e8:e6:66:72:bd:67:87:31:54:27:f2:4a:e9:bb:e7:43:03:20:
         02:a9:0b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:35:06 2025 by rpki-client