Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B5C2/779D04A0364111EB8499D219C4F9AE02/Hu0mPwQo2E4_vlF1PRbUs9Ynl8Q.mft
File:                     Hu0mPwQo2E4_vlF1PRbUs9Ynl8Q.mft (raw, json)
Hash identifier:          eoA8AUlEZlTP+TDKxR9JgHQhjXQ5xJSaclyjjj1krqY=
Subject key identifier:   73:A2:56:92:77:5F:DE:F5:4E:96:2B:82:0F:A8:C4:EE:D7:7E:E2:F0
Authority key identifier: 1E:ED:26:3F:04:28:D8:4E:3F:BE:51:75:3D:16:D4:B3:D6:27:97:C4
Certificate issuer:       /CN=A913B5C2/serialNumber=1EED263F0428D84E3FBE51753D16D4B3D62797C4
Certificate serial:       0795
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hu0mPwQo2E4_vlF1PRbUs9Ynl8Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B5C2/779D04A0364111EB8499D219C4F9AE02/Hu0mPwQo2E4_vlF1PRbUs9Ynl8Q.mft
Manifest number:          0783
Signing time:             Tue 04 Nov 2025 21:40:57 +0000
Manifest this update:     Tue 04 Nov 2025 21:40:56 +0000
Manifest next update:     Tue 11 Nov 2025 21:40:56 +0000
Files and hashes:         1: Hu0mPwQo2E4_vlF1PRbUs9Ynl8Q.crl (hash: +IzkmdEPMRuOfHnYh8Q9fOvmCuM9j5U5M8Z6bNTuwdo=)
                          2: 5010A55A8C6411EE9E586967C4F9AE02.roa (hash: 4WaxcSOypw5MR8KdXAghCvA+v2O7hVTdBBBYUHYD0cA=)
                          3: F704E032765811EE8C17A621C4F9AE02.roa (hash: CnCwLn7lDIG3FNQW26Y0bfxtI9n4x8PAcrUkdqYQEww=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B5C2/779D04A0364111EB8499D219C4F9AE02/Hu0mPwQo2E4_vlF1PRbUs9Ynl8Q.crl
                          rsync://rpki.apnic.net/member_repository/A913B5C2/779D04A0364111EB8499D219C4F9AE02/Hu0mPwQo2E4_vlF1PRbUs9Ynl8Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hu0mPwQo2E4_vlF1PRbUs9Ynl8Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 21:40:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1941 (0x795)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B5C2, serialNumber=1EED263F0428D84E3FBE51753D16D4B3D62797C4
        Validity
            Not Before: Nov  4 21:40:56 2025 GMT
            Not After : Nov 11 21:40:56 2025 GMT
        Subject: CN=690a72e9-fc7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8a:64:a2:94:80:b0:08:4a:b9:d0:c2:a0:2a:
                    3e:ef:25:e1:88:d9:02:7f:17:cc:4f:28:e5:03:c0:
                    51:97:2a:99:ed:32:5e:b0:b7:e3:ed:04:d8:77:95:
                    5f:db:b9:ab:84:0c:28:93:0e:d0:93:cd:b3:b4:bf:
                    ea:b8:dd:04:0f:0d:55:a5:e0:99:05:7c:6d:1d:c6:
                    70:85:bc:76:04:30:fd:ba:fb:2e:a5:61:4e:ba:3f:
                    e6:e4:4c:ae:26:c4:0a:07:2e:b8:b6:c6:a5:e1:68:
                    ff:42:f9:9b:9d:86:f2:a1:5c:e7:55:26:b4:c2:d6:
                    69:dc:59:7c:84:93:c4:21:af:33:ef:54:79:6b:4c:
                    ff:c6:e3:1c:05:ad:0f:c0:e5:ef:8a:fc:a4:3f:15:
                    46:d7:9e:58:1b:89:0e:ed:a6:76:0b:8e:69:24:55:
                    9b:5f:6d:a4:2d:f5:bf:ee:4b:9c:d1:63:1e:63:7f:
                    a9:ae:a0:a5:07:2c:c9:22:38:d4:e4:c0:e1:7a:0a:
                    de:62:d9:f8:51:04:e2:8c:65:3b:2e:ab:eb:8e:26:
                    1f:74:36:2d:7a:ae:83:7c:c3:cd:60:20:82:6d:cb:
                    0c:c8:ba:5c:60:85:9a:61:e1:29:e1:e2:ab:37:e6:
                    c1:2c:35:0b:af:bb:aa:3f:72:11:51:a9:16:f8:37:
                    8e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:A2:56:92:77:5F:DE:F5:4E:96:2B:82:0F:A8:C4:EE:D7:7E:E2:F0
            X509v3 Authority Key Identifier:
                keyid:1E:ED:26:3F:04:28:D8:4E:3F:BE:51:75:3D:16:D4:B3:D6:27:97:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B5C2/779D04A0364111EB8499D219C4F9AE02/Hu0mPwQo2E4_vlF1PRbUs9Ynl8Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hu0mPwQo2E4_vlF1PRbUs9Ynl8Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B5C2/779D04A0364111EB8499D219C4F9AE02/Hu0mPwQo2E4_vlF1PRbUs9Ynl8Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:15:70:0c:59:ca:5a:90:88:5c:e8:42:ce:ff:d1:c5:37:7a:
         e6:55:9a:e7:aa:0b:68:33:df:a4:a3:b1:23:33:e1:49:63:70:
         5f:6d:d9:b2:bd:2c:ca:45:5f:92:be:fd:f0:8f:e6:d8:16:c9:
         32:7c:29:68:25:d9:43:02:f0:88:e3:cc:47:22:09:9c:5e:f0:
         85:ff:d5:40:a1:fb:42:c5:ec:be:4f:cc:a6:9e:75:b2:8a:bf:
         7d:c1:ac:b9:75:cc:df:15:5b:d8:d5:fd:e1:02:6b:67:19:79:
         09:9d:05:0c:23:45:ba:4a:32:66:db:0f:3b:14:77:c2:c8:dd:
         9a:1d:dd:af:44:6e:6a:45:1d:3c:36:20:d6:30:9a:c2:d4:05:
         18:eb:75:34:35:bb:48:6a:4c:d4:d3:2e:d3:da:0c:c6:16:fd:
         40:1f:01:0b:de:59:dd:80:06:54:6a:62:e7:04:f5:b5:63:fe:
         45:86:c1:ce:51:9f:4c:f1:06:ca:82:90:39:10:d4:48:c8:3e:
         d3:b5:ac:46:a5:b7:03:73:b1:94:10:f2:9d:4d:fd:87:c8:8d:
         0e:2b:3b:08:f0:5c:5d:39:ae:51:8b:f4:00:21:1f:7c:cc:bf:
         65:61:f2:ef:81:28:b9:97:00:9a:d1:d6:ec:df:0e:4d:23:74:
         6a:f2:a9:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:45:27 2025 by rpki-client