Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/UA-SAOuG3F_QbbeGwM6kUtDOcjA.mft
File:                     UA-SAOuG3F_QbbeGwM6kUtDOcjA.mft (raw, json)
Hash identifier:          6juCEUUAyBe624X73tKcpmJv+OwO3qD2Bxk/HoGUZsA=
Subject key identifier:   C8:8B:76:43:08:C6:05:68:97:47:DD:9B:7B:6D:D6:25:4B:55:9C:D7
Authority key identifier: 50:0F:92:00:EB:86:DC:5F:D0:6D:B7:86:C0:CE:A4:52:D0:CE:72:30
Certificate issuer:       /CN=A913318E/serialNumber=500F9200EB86DC5FD06DB786C0CEA452D0CE7230
Certificate serial:       0132
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UA-SAOuG3F_QbbeGwM6kUtDOcjA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/UA-SAOuG3F_QbbeGwM6kUtDOcjA.mft
Manifest number:          012E
Signing time:             Mon 03 Nov 2025 04:36:39 +0000
Manifest this update:     Mon 03 Nov 2025 04:36:38 +0000
Manifest next update:     Mon 10 Nov 2025 04:36:38 +0000
Files and hashes:         1: UA-SAOuG3F_QbbeGwM6kUtDOcjA.crl (hash: zxWBSHCvv8LoagqyA7FVz9aXXno2x2D98D2XxOavk80=)
                          2: 6EAE50E8EBFA11EEA937307AC4F9AE02.roa (hash: n4jE/JU888DErTDFi7j6yPAf5IRm3HLfX3pJFCp7TIY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/UA-SAOuG3F_QbbeGwM6kUtDOcjA.crl
                          rsync://rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/UA-SAOuG3F_QbbeGwM6kUtDOcjA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UA-SAOuG3F_QbbeGwM6kUtDOcjA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 04:36:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 306 (0x132)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913318E, serialNumber=500F9200EB86DC5FD06DB786C0CEA452D0CE7230
        Validity
            Not Before: Nov  3 04:36:38 2025 GMT
            Not After : Nov 10 04:36:38 2025 GMT
        Subject: CN=69083156-d871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:76:88:89:ed:60:41:eb:b7:4d:0b:02:3a:47:
                    a9:a7:6f:91:f3:75:8c:9a:69:89:65:12:74:87:14:
                    0e:f2:08:3c:bd:3f:8b:56:1c:56:64:0d:44:fd:70:
                    1b:6a:86:dc:67:d2:9f:b1:2d:8e:5a:61:5b:4c:42:
                    bf:79:59:cb:af:fe:61:70:53:94:bc:0f:35:20:31:
                    99:a6:ec:d7:c8:a7:2b:a2:21:d9:32:97:8c:97:12:
                    db:ea:62:b1:34:ee:f0:2e:e1:f4:af:1b:0e:17:eb:
                    78:d6:6b:51:11:cb:08:19:dc:d7:ef:2b:5e:f6:39:
                    27:c9:7d:6d:05:9f:34:25:7d:f7:07:e4:68:2a:d2:
                    0f:0d:25:01:7e:69:1c:84:94:bf:31:fa:b4:ff:6e:
                    78:b7:9d:e6:6b:cd:80:c5:bd:35:ab:0c:85:06:8e:
                    cd:7e:c4:4a:55:7c:b0:90:54:eb:73:fe:9a:49:21:
                    e6:53:92:ec:8f:59:be:6a:6f:9c:f4:e3:6a:56:94:
                    a3:02:c3:35:7d:89:1b:bc:32:48:cd:93:ae:f6:a9:
                    49:e7:93:fb:6d:0f:b0:f1:1b:b3:b5:c1:b9:64:34:
                    b2:6e:93:cd:34:b8:63:25:3d:f2:32:6b:44:42:0c:
                    f9:7d:6f:34:07:fd:6e:47:c7:57:ba:6f:1c:b5:2c:
                    29:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:8B:76:43:08:C6:05:68:97:47:DD:9B:7B:6D:D6:25:4B:55:9C:D7
            X509v3 Authority Key Identifier:
                keyid:50:0F:92:00:EB:86:DC:5F:D0:6D:B7:86:C0:CE:A4:52:D0:CE:72:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/UA-SAOuG3F_QbbeGwM6kUtDOcjA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UA-SAOuG3F_QbbeGwM6kUtDOcjA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/UA-SAOuG3F_QbbeGwM6kUtDOcjA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:47:fa:50:d3:ce:cd:af:3f:0c:62:4e:7c:32:71:b6:1f:8c:
         42:d5:1f:4c:cb:42:46:64:da:e3:23:d2:41:3e:50:28:84:f2:
         75:cb:65:c4:29:2d:73:a2:ff:c1:47:9a:0a:b9:a5:46:08:46:
         f9:77:b0:46:ac:d7:f2:e5:87:4a:ab:e2:bf:d5:50:19:99:99:
         ec:65:f4:f6:61:53:6c:71:55:ea:f5:ed:08:b7:51:8f:1c:de:
         31:30:83:25:e1:d4:fa:db:9b:eb:b3:40:88:2f:fe:17:bf:a1:
         a2:6b:47:16:6d:a4:34:a7:25:bc:0f:88:26:f8:af:41:db:82:
         5b:44:bc:80:10:a9:59:28:12:c3:71:6a:aa:27:a1:aa:42:30:
         c8:79:73:38:11:e5:00:0e:b1:fe:19:41:69:61:f7:d0:9f:f0:
         dd:e1:d9:40:85:a2:f2:43:52:2e:46:50:9a:b0:8b:08:d5:91:
         09:ec:0f:16:72:b2:e2:b8:63:d7:d4:20:7b:fb:1f:3b:4c:a3:
         f6:ea:e8:bb:c7:38:d7:d9:c7:e5:99:fe:5b:52:b7:c2:c1:a1:
         de:28:6a:c6:a7:1b:91:c9:7b:0b:b4:53:2c:70:dd:61:7d:e0:
         6e:69:9e:71:84:e5:58:0d:5d:3b:1e:5a:ec:e5:03:36:08:44:
         08:bd:5c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:05:01 2025 by rpki-client