Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.mft
File:                     u7bmAQQ3QyUFSIC308E15vx8yrE.mft (raw, json)
Hash identifier:          FWrQQYlV8upuFU7opyUx3hI0kL5fKNPAJ64JATIb1zQ=
Subject key identifier:   0B:3A:2A:D7:EE:2A:ED:44:DE:DB:B9:69:E5:71:CA:71:3D:D7:C6:72
Authority key identifier: BB:B6:E6:01:04:37:43:25:05:48:80:B7:D3:C1:35:E6:FC:7C:CA:B1
Certificate issuer:       /CN=A912804A/serialNumber=BBB6E60104374325054880B7D3C135E6FC7CCAB1
Certificate serial:       0240
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7bmAQQ3QyUFSIC308E15vx8yrE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.mft
Manifest number:          023B
Signing time:             Wed 05 Nov 2025 01:57:56 +0000
Manifest this update:     Wed 05 Nov 2025 01:57:55 +0000
Manifest next update:     Wed 12 Nov 2025 01:57:55 +0000
Files and hashes:         1: u7bmAQQ3QyUFSIC308E15vx8yrE.crl (hash: YK6T25vCYWHfPOISLyMV2rJSfKPOHLojOIoz32xKqPM=)
                          2: CCB0DBA8CB2911EE9CE70483C4F9AE02.roa (hash: +L4H64N18c7HC9b7a2kMN0oPwzUDs4ByILHmodSVj7c=)
                          3: 003D7FEE15E811F0841B1A7DC4F9AE02.roa (hash: NzfvN2nV9saQebWeBwyNL6bb8Qj6DnzhJ2bxOu8Ukwk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.crl
                          rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7bmAQQ3QyUFSIC308E15vx8yrE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 01:57:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 576 (0x240)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912804A, serialNumber=BBB6E60104374325054880B7D3C135E6FC7CCAB1
        Validity
            Not Before: Nov  5 01:57:55 2025 GMT
            Not After : Nov 12 01:57:55 2025 GMT
        Subject: CN=690aaf23-6e87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:cd:8d:2a:26:b1:cc:36:45:7a:6a:9e:26:57:
                    fe:dc:ae:2e:41:ed:51:bb:14:78:a8:8d:17:d0:53:
                    a5:de:d1:fd:07:56:00:58:12:01:4d:6e:1b:c3:c1:
                    76:9e:db:57:9c:b2:11:64:1c:e0:80:27:96:28:0c:
                    81:74:1a:be:75:b6:c4:ba:e8:f3:5e:68:af:c6:90:
                    40:a8:2c:2e:ce:31:f8:a7:e7:06:be:f0:a7:94:3c:
                    a1:1f:43:fb:17:6f:d3:6a:89:d5:8d:65:12:e3:aa:
                    92:61:3e:ec:88:bd:ff:b6:45:1d:35:7e:f6:0b:45:
                    15:c1:05:09:7a:ea:33:33:08:4e:69:24:0f:2b:4f:
                    03:53:87:ca:dd:45:c1:90:27:27:18:b9:9e:15:6b:
                    bb:57:f7:29:54:3f:dc:e8:23:8c:ea:24:88:5c:fd:
                    f1:0d:37:0e:bc:7e:d9:ca:74:3d:dc:07:b6:8b:70:
                    69:0e:a5:03:47:13:b5:d8:61:1a:88:cd:35:7f:64:
                    0e:5b:f2:bf:59:de:6d:08:06:9d:bd:21:6c:67:8a:
                    ec:3f:df:cb:3d:0e:3c:33:e6:5b:27:39:de:44:ef:
                    4d:83:6b:11:43:09:0d:66:07:6f:c6:f5:ba:e2:b0:
                    48:ed:6c:49:09:6a:ed:63:87:89:fa:47:c8:b8:c0:
                    cf:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:3A:2A:D7:EE:2A:ED:44:DE:DB:B9:69:E5:71:CA:71:3D:D7:C6:72
            X509v3 Authority Key Identifier:
                keyid:BB:B6:E6:01:04:37:43:25:05:48:80:B7:D3:C1:35:E6:FC:7C:CA:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7bmAQQ3QyUFSIC308E15vx8yrE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:2d:f3:8e:fe:2c:82:36:87:c0:8c:b7:2e:91:f2:01:46:6d:
         40:13:8d:ae:bb:0d:f7:04:b1:e4:e8:5a:f4:30:2c:f4:f2:a5:
         d2:33:7a:35:76:cf:17:b4:33:62:ff:b8:8d:6c:d3:13:86:47:
         b6:38:a0:d5:7a:aa:2d:08:0b:fb:b7:b5:f5:c8:02:05:9e:c9:
         e2:df:28:8d:8f:f5:6c:92:c9:80:4b:d7:51:50:71:9f:32:e4:
         ea:f1:7a:ea:ac:15:f4:00:aa:cb:88:51:52:eb:9d:70:14:52:
         80:95:ac:b0:0b:90:0a:47:e3:c8:58:04:a8:c2:be:64:59:20:
         b4:9c:db:b1:01:2d:fe:85:ce:df:3d:c8:fc:dc:e1:8f:9d:f5:
         cf:81:dc:3a:50:92:db:99:42:cc:eb:a5:9b:81:f0:09:fe:c4:
         90:fc:25:11:2f:3b:13:28:99:9f:b8:32:1e:ad:57:07:88:cd:
         59:15:4b:38:8a:34:ba:1f:5b:86:08:7b:5e:4b:0f:7b:61:a8:
         3f:17:52:33:cb:77:8e:f9:78:14:e9:ac:2f:23:43:89:aa:98:
         4a:5a:0c:88:e7:de:9e:00:b6:0f:38:94:e0:01:f2:bc:d2:66:
         1f:fd:98:23:10:c6:08:c4:a2:fd:1f:ab:cb:e8:7b:f9:5e:12:
         5d:c6:7b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:18:10 2025 by rpki-client