Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.mft
File:                     uEwjlp7XnA4xwTwUUAEuIkbT-U0.mft (raw, json)
Hash identifier:          rBnGn4atzSuezJfL96cGdhn635IXp1lz5MR9cJ4aZZk=
Subject key identifier:   35:F8:38:95:00:86:02:75:91:9E:6B:58:A3:E2:FD:64:4B:4D:9F:3F
Authority key identifier: B8:4C:23:96:9E:D7:9C:0E:31:C1:3C:14:50:01:2E:22:46:D3:F9:4D
Certificate issuer:       /CN=A911F2DF/serialNumber=B84C23969ED79C0E31C13C1450012E2246D3F94D
Certificate serial:       0116
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uEwjlp7XnA4xwTwUUAEuIkbT-U0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.mft
Manifest number:          0110
Signing time:             Wed 05 Nov 2025 05:07:41 +0000
Manifest this update:     Wed 05 Nov 2025 05:07:40 +0000
Manifest next update:     Wed 12 Nov 2025 05:07:40 +0000
Files and hashes:         1: uEwjlp7XnA4xwTwUUAEuIkbT-U0.crl (hash: cpyFRRzrlrGuOk8sHRyWGj5BqloAgOnkN7ItD+IUjjM=)
                          2: 92E390AC958E11EF87A4040BC4F9AE02.roa (hash: ziX6uRrjdN8XtvPVmk67ZGOFErPjsTpewvnUOr01Tm8=)
                          3: 7FAE29E8958E11EF9CC0DD0AC4F9AE02.roa (hash: 3kGsoUmf1FpifCPtPS1E6u6lzuQTEBurC189TVcNMdw=)
                          4: 659B37E4958E11EFAFF1870AC4F9AE02.roa (hash: XEN2blQh3Cs+gyEWpdkV0R6BegNBQ93goCybhrow5bM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.crl
                          rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uEwjlp7XnA4xwTwUUAEuIkbT-U0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 05:07:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 278 (0x116)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F2DF, serialNumber=B84C23969ED79C0E31C13C1450012E2246D3F94D
        Validity
            Not Before: Nov  5 05:07:40 2025 GMT
            Not After : Nov 12 05:07:40 2025 GMT
        Subject: CN=690adb9d-7643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ef:4b:b8:7f:3c:f4:f4:31:5b:cc:b6:66:dc:
                    cd:67:0c:5b:e5:b2:b0:32:79:f7:83:44:29:b3:01:
                    7e:1a:c9:ce:5b:12:32:39:7c:85:4f:33:ad:cb:88:
                    af:0d:4a:81:e9:a4:39:80:54:e1:f3:ec:d0:ce:86:
                    c6:99:80:45:29:87:3b:24:54:4a:05:39:0b:9c:88:
                    98:8e:1c:c6:3c:cb:b8:56:b3:30:b9:60:10:f2:9a:
                    4c:24:70:77:2b:48:de:86:38:fd:da:a3:03:af:46:
                    19:a7:70:4f:04:cf:f7:86:fb:5d:fc:91:22:96:a3:
                    9f:b4:21:db:ea:82:dd:00:31:90:f2:47:dc:94:30:
                    d5:2e:f7:c8:fc:17:b5:e3:3e:d1:7a:ba:a5:56:76:
                    c4:a8:c1:1a:76:00:12:88:a4:bd:98:ff:de:0a:d2:
                    26:b9:11:aa:90:19:b1:59:c8:96:94:1f:ad:04:18:
                    75:be:d8:70:53:04:ad:72:82:de:14:ab:f6:3e:fa:
                    02:2c:29:88:6b:c8:f1:9a:96:01:09:59:db:b8:f8:
                    32:84:5d:0d:7a:68:ad:c2:85:21:e0:6b:f3:2f:2c:
                    5a:e8:81:38:98:81:db:1b:ed:f6:20:f6:5f:6b:fa:
                    bb:ce:71:7b:1d:96:23:bb:e2:65:9c:a1:d1:aa:dd:
                    73:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:F8:38:95:00:86:02:75:91:9E:6B:58:A3:E2:FD:64:4B:4D:9F:3F
            X509v3 Authority Key Identifier:
                keyid:B8:4C:23:96:9E:D7:9C:0E:31:C1:3C:14:50:01:2E:22:46:D3:F9:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uEwjlp7XnA4xwTwUUAEuIkbT-U0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:4c:29:8c:5e:c0:d0:6c:67:74:2b:fb:ef:1c:6f:0e:4f:b8:
         05:02:d8:4c:65:08:c2:f6:3e:d6:43:2f:e7:90:dd:0e:7b:42:
         0f:32:5e:af:be:6f:ad:b0:7a:7b:f5:2c:8e:e1:0c:a4:3c:5d:
         f0:7f:99:48:62:3d:58:6c:0c:e7:b3:de:27:ff:27:ee:0d:d3:
         f0:52:db:e7:d4:fe:92:bf:fe:49:ed:94:3e:b8:41:d2:5a:4f:
         6c:bb:6c:11:34:65:b8:70:52:ec:be:5a:ae:39:ae:48:7e:90:
         e4:3f:33:d4:d7:9a:e1:9a:4a:ed:bf:d9:87:09:80:01:64:e3:
         83:2d:50:91:14:aa:78:63:8b:94:66:3c:80:e0:e8:60:0e:b1:
         0a:7d:6e:5f:13:64:fb:ef:35:0d:8e:72:82:31:dd:2a:a1:0f:
         47:54:ef:51:18:5a:d3:85:26:8f:ec:62:32:67:8a:f6:56:0b:
         ed:26:35:78:5b:4b:81:b3:44:a7:e7:8c:c7:63:64:fc:50:b3:
         80:ea:a8:04:3d:6b:0e:8e:cf:1f:00:ad:92:f0:2e:56:b1:9b:
         04:31:26:b3:31:7a:02:5e:60:5a:2a:f6:d3:04:6a:90:05:25:
         58:c1:d0:ce:27:1d:67:69:ae:62:83:d5:a2:7e:f5:5a:5a:6d:
         00:f7:12:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:31:56 2025 by rpki-client