Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft
File:                     Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft (raw, json)
Hash identifier:          kq3F3LB2cstiJg29lvbrJWzY7wlWgGmmUFdFY4CEPhU=
Subject key identifier:   4A:5A:EB:FD:C8:79:39:72:AA:FE:EA:FC:E3:15:AD:11:38:4F:18:4A
Authority key identifier: 32:9D:A0:3D:B9:94:47:51:49:8A:5F:CA:53:C8:5D:AA:60:CB:9A:32
Certificate issuer:       /CN=A913C432/serialNumber=329DA03DB9944751498A5FCA53C85DAA60CB9A32
Certificate serial:       106A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft
Manifest number:          102E
Signing time:             Sun 02 Nov 2025 17:30:11 +0000
Manifest this update:     Sun 02 Nov 2025 17:30:11 +0000
Manifest next update:     Sun 09 Nov 2025 17:30:11 +0000
Files and hashes:         1: Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl (hash: 36SjM4L3JvSA/POJTWAacnXC3f+lx+jHMSoVnot8KCk=)
                          2: 8030E8628FD211F0924FE573C4F9AE02.roa (hash: uKLFwAF6OPU48tvtT2EBR+YQZKAwbAGiUD5OlNlMeM8=)
                          3: 912FB56E7E7811F08636DF33C4F9AE02.roa (hash: 0m5izQuKw0aRUU+0vXd30tEyd5boDVcm7O+m75Izs0o=)
                          4: 3AA7BC60818D11F0BBDB1314C4F9AE02.roa (hash: Y+3y48bqaUxF+K9WiQLSi+R8dX2P6kaRh5bC6H+qDqg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl
                          rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 17:30:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4202 (0x106a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C432, serialNumber=329DA03DB9944751498A5FCA53C85DAA60CB9A32
        Validity
            Not Before: Nov  2 17:30:11 2025 GMT
            Not After : Nov  9 17:30:11 2025 GMT
        Subject: CN=69079523-cc0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e2:bd:f3:78:8a:a8:29:cc:a9:cc:8c:63:49:
                    21:e5:4c:9f:e4:a4:42:54:2a:8f:63:3c:49:e5:6c:
                    77:e5:0b:61:77:aa:46:61:e2:62:a3:00:06:ea:82:
                    d9:16:0f:ec:6d:95:7d:4e:a8:92:0c:5b:b6:85:4a:
                    6b:50:36:3b:e3:e6:9c:3c:3d:e3:42:b7:c0:70:53:
                    05:7a:a2:9c:b9:a1:fa:3e:8a:58:0e:99:11:3d:13:
                    e9:0c:e5:42:6f:df:b7:34:1f:5f:3b:1f:eb:46:e5:
                    87:67:aa:4a:7c:76:bd:b5:ad:5b:bf:0a:55:db:28:
                    59:42:d0:7f:b1:f4:21:2a:ad:3f:84:f1:79:f9:20:
                    30:c9:2d:40:83:b2:28:4e:1d:4f:79:e4:15:d4:90:
                    0c:0d:ee:de:c1:19:fd:4e:94:b9:d0:a3:c0:b6:82:
                    d6:91:fb:99:6f:ac:71:31:64:09:cc:9a:31:6a:bd:
                    34:bd:bd:9f:85:66:23:b9:d9:54:dc:62:9f:c5:2a:
                    ff:8c:58:52:65:d9:68:c4:d2:46:cb:63:12:27:77:
                    18:ec:28:91:02:c9:65:b4:2d:c7:13:77:1d:fe:a9:
                    e7:95:fb:19:51:a4:62:8d:1c:60:9e:b8:9d:24:1c:
                    f6:d6:63:bc:da:47:59:3d:21:5d:e9:88:15:fe:f4:
                    9a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:5A:EB:FD:C8:79:39:72:AA:FE:EA:FC:E3:15:AD:11:38:4F:18:4A
            X509v3 Authority Key Identifier:
                keyid:32:9D:A0:3D:B9:94:47:51:49:8A:5F:CA:53:C8:5D:AA:60:CB:9A:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:cb:37:41:9d:90:b8:0c:55:93:af:43:ff:52:3e:09:3f:5e:
         a9:f9:47:0c:36:03:7c:d3:05:d9:88:6f:e0:68:7a:a8:a5:85:
         6f:a5:a2:91:c3:5c:ea:3c:c0:48:a3:e1:59:d5:10:57:a9:a5:
         56:cf:3f:97:07:09:54:f5:cf:29:f2:91:a0:cc:d4:6d:7d:a5:
         9f:8a:b4:37:f4:70:6b:ba:b1:fb:b1:41:f7:76:de:f2:4c:8a:
         c8:aa:86:b2:08:b4:d5:28:2e:0e:ca:66:5d:cb:ec:7c:9d:3a:
         2c:8c:3c:e4:6f:8a:f1:cc:e4:ef:de:6c:0e:1d:7e:f1:9c:08:
         f9:4a:28:73:c5:11:ab:fb:37:60:6d:fe:32:c7:9b:8d:33:66:
         8e:37:66:1c:14:14:b1:4b:af:50:c1:61:3c:74:47:e1:f7:55:
         6b:f3:03:02:43:a2:71:ac:d5:21:a4:8c:a6:39:9a:01:1c:09:
         49:79:48:97:1e:85:47:b0:0f:e7:10:4b:93:34:80:39:6d:93:
         2a:47:43:76:ad:6d:40:25:fa:7b:85:2d:fb:58:da:d8:4c:ac:
         5d:37:1a:9c:f9:af:fb:a0:5c:27:27:90:ff:c9:b9:17:81:18:
         a1:89:16:36:7c:61:36:f3:79:c8:a9:84:0c:a9:40:48:30:1a:
         95:e9:a4:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 16:04:39 2025 by rpki-client