Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft
File:                     pgmpTmohAbr5XIwvVc7EF5Jb788.mft (raw, json)
Hash identifier:          uBdUOZXUlnvz9foextwNP2XIUV92dY7xUnoD8yXYDFg=
Subject key identifier:   29:5A:57:AB:EF:65:A7:08:2F:E9:A3:03:41:F1:1C:50:68:45:79:77
Authority key identifier: A6:09:A9:4E:6A:21:01:BA:F9:5C:8C:2F:55:CE:C4:17:92:5B:EF:CF
Certificate issuer:       /CN=A9122010/serialNumber=A609A94E6A2101BAF95C8C2F55CEC417925BEFCF
Certificate serial:       013E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgmpTmohAbr5XIwvVc7EF5Jb788.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft
Manifest number:          013A
Signing time:             Mon 03 Nov 2025 04:27:14 +0000
Manifest this update:     Mon 03 Nov 2025 04:27:13 +0000
Manifest next update:     Mon 10 Nov 2025 04:27:13 +0000
Files and hashes:         1: pgmpTmohAbr5XIwvVc7EF5Jb788.crl (hash: SSnmRuEeaqOIc7p45cpvPdSiSCb3ZVkRw8eGBrrAHGg=)
                          2: EF260118D54211EEA18A7234C4F9AE02.roa (hash: xjhn9qUtE7xRbdf4fFZHDUa2ZArgvxrc59opJoY9If0=)
                          3: 2FA91770D61A11EE9BDDD627C4F9AE02.roa (hash: Y2k2zpzO5L2UX1/syfcTHwfwkADI2HQTu1qn6JdDuuE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.crl
                          rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgmpTmohAbr5XIwvVc7EF5Jb788.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 04:27:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 318 (0x13e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122010, serialNumber=A609A94E6A2101BAF95C8C2F55CEC417925BEFCF
        Validity
            Not Before: Nov  3 04:27:13 2025 GMT
            Not After : Nov 10 04:27:13 2025 GMT
        Subject: CN=69082f22-a8a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:77:9a:65:f2:89:05:ff:85:85:ba:c4:cd:8f:
                    37:ba:f8:60:38:82:3a:10:b0:1d:40:44:04:92:99:
                    f0:8d:d2:5b:00:33:11:0e:3f:d1:00:7f:bc:cc:67:
                    e1:41:ad:bd:e2:d1:62:ee:7a:79:f2:58:2c:44:3f:
                    3b:77:4f:3b:9d:08:91:e3:97:8b:7e:d1:b6:1b:ab:
                    ef:42:4d:84:bc:b7:f7:c3:28:ec:2d:e8:ec:2a:0c:
                    54:88:e4:a3:72:38:b0:58:83:80:87:37:7d:7a:c5:
                    b1:e3:2e:03:cd:af:f7:e9:68:dc:ee:7e:cf:8a:cf:
                    7f:da:58:5a:83:d2:43:7f:0a:cf:b8:7f:18:36:ab:
                    4f:c6:6e:d8:af:52:75:1b:08:68:ef:ae:30:e2:43:
                    79:d9:e6:a3:e7:6a:52:59:e4:c7:14:fb:e6:7f:98:
                    64:3d:3f:86:90:77:c1:92:0a:f6:d6:41:11:c8:e0:
                    40:11:e1:d4:63:f7:2d:55:45:9f:ea:28:ae:9c:fb:
                    a5:c3:c0:b5:14:15:4c:e0:4e:6c:d2:e3:b9:1d:1b:
                    1e:75:2b:ad:43:8f:45:aa:7d:57:4e:ea:4a:4a:d8:
                    25:03:29:71:ad:bd:d4:9f:fb:54:7c:9d:e3:d2:62:
                    e0:72:c5:40:bd:35:8b:b9:f4:e7:ac:65:7e:c9:cb:
                    23:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:5A:57:AB:EF:65:A7:08:2F:E9:A3:03:41:F1:1C:50:68:45:79:77
            X509v3 Authority Key Identifier:
                keyid:A6:09:A9:4E:6A:21:01:BA:F9:5C:8C:2F:55:CE:C4:17:92:5B:EF:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgmpTmohAbr5XIwvVc7EF5Jb788.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:94:a6:e1:1f:b8:5f:23:65:01:4b:d3:c4:a1:0c:86:15:a7:
         04:4d:f0:29:6e:1c:d6:98:e4:16:e9:32:6f:5a:4d:36:5e:e6:
         cb:2b:ec:62:72:c8:22:e4:72:ad:af:39:1c:69:6c:75:8d:4c:
         b6:8b:68:f4:8f:2d:72:43:48:cf:a7:32:1c:d6:52:44:33:70:
         db:84:12:6a:a1:04:73:61:d0:5a:e8:74:31:6f:75:3f:83:cf:
         5c:fa:5e:60:be:49:db:92:c1:7b:ec:f7:03:8a:46:71:10:c0:
         45:d4:31:be:66:f8:36:53:dc:d7:a8:8a:e3:a6:71:fe:cd:80:
         34:7d:14:b9:f5:92:d6:ce:fd:07:95:4b:d2:4a:71:bd:b1:ea:
         9f:6e:1d:81:d4:98:01:83:b2:ce:f5:ad:7f:8a:24:10:f3:b9:
         ad:5e:17:b4:fe:ce:4b:35:51:bb:93:77:c3:95:75:e0:67:38:
         12:89:06:33:6a:33:92:40:8e:ce:93:7b:09:07:90:5b:95:26:
         db:09:88:65:0d:8f:88:1c:0c:ee:30:7f:44:d1:56:10:09:1a:
         0b:08:1e:bf:a3:74:12:4d:b6:94:f2:d1:76:fb:57:03:ed:2f:
         b4:5d:b4:1d:52:57:cc:b3:cd:d3:c5:b9:ac:6f:db:f2:79:dd:
         ec:40:18:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:59:43 2025 by rpki-client