Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft
File:                     uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft (raw, json)
Hash identifier:          G3kZuM6xq5l/70CbKPoXV+t9QwSvCJRR+/iScGqK6Fg=
Subject key identifier:   5C:8C:90:32:64:80:DA:96:9F:06:F2:85:D1:47:2E:D8:6D:2A:56:46
Authority key identifier: B8:8B:D5:D5:B9:B8:64:6D:8E:43:E6:4C:12:7B:84:81:A4:18:C6:36
Certificate issuer:       /CN=A915825D/serialNumber=B88BD5D5B9B8646D8E43E64C127B8481A418C636
Certificate serial:       C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft
Manifest number:          BC
Signing time:             Wed 05 Nov 2025 06:15:15 +0000
Manifest this update:     Wed 05 Nov 2025 06:15:14 +0000
Manifest next update:     Wed 12 Nov 2025 06:15:14 +0000
Files and hashes:         1: uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.crl (hash: GXPGxyHTWS6hRq7gVNVzC6I6F/U0UylsOBrzpgOWvK0=)
                          2: B035E67615D311F09BAD2971C4F9AE02.roa (hash: m6K1ejQzgZZN/JIHhR+mHfBRgRA0KhwEs/admphjKvc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.crl
                          rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 06:15:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 192 (0xc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915825D, serialNumber=B88BD5D5B9B8646D8E43E64C127B8481A418C636
        Validity
            Not Before: Nov  5 06:15:14 2025 GMT
            Not After : Nov 12 06:15:14 2025 GMT
        Subject: CN=690aeb72-4c56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d4:0f:59:05:8f:24:d0:5e:33:7a:cb:55:aa:
                    f7:c4:3c:ee:66:c6:dc:da:a4:1a:c7:ec:68:19:35:
                    af:30:63:8c:da:e7:81:07:31:a6:e7:77:2a:bf:62:
                    cd:f9:e4:95:c7:75:9b:ce:01:d1:c0:ba:4d:7d:0b:
                    32:f7:9d:ae:13:cd:ec:6a:40:b7:41:2c:72:ed:af:
                    4f:be:d6:c6:42:49:5a:2f:69:a0:bf:1a:43:bd:83:
                    a2:93:53:b9:28:b4:02:f2:cb:fa:90:6e:08:d1:13:
                    f6:e6:0b:18:75:e4:8e:1d:89:bd:eb:75:df:3a:90:
                    3f:9c:e8:55:13:88:52:70:da:ed:e7:a1:2b:27:d2:
                    7d:29:74:05:cb:bc:6b:16:62:d0:b3:3a:7d:ab:b7:
                    96:2c:c9:78:ae:46:4e:1e:0d:05:8e:c1:8f:7c:9b:
                    7b:83:72:82:10:ce:89:dc:af:6c:0b:b9:13:1d:5d:
                    fc:d8:93:9e:bd:31:8a:b0:00:9e:0b:b5:0d:c5:73:
                    06:c4:92:4b:be:6c:10:c1:a9:d6:aa:bd:94:d2:27:
                    23:40:3d:72:98:34:58:ab:a9:1b:85:29:44:d2:34:
                    52:e7:2a:a7:c0:a5:fa:12:da:69:06:9c:a5:20:53:
                    7b:ff:b0:4f:00:89:19:00:91:81:19:42:9b:59:86:
                    ba:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:8C:90:32:64:80:DA:96:9F:06:F2:85:D1:47:2E:D8:6D:2A:56:46
            X509v3 Authority Key Identifier:
                keyid:B8:8B:D5:D5:B9:B8:64:6D:8E:43:E6:4C:12:7B:84:81:A4:18:C6:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:7d:ba:80:ef:67:90:c1:00:41:11:3a:c4:31:51:61:44:1c:
         14:66:53:9a:44:92:c3:42:86:97:19:60:dc:97:ee:be:7f:c6:
         ad:ca:49:8b:4e:7e:cd:7b:25:5b:8a:27:16:ff:2e:08:67:b6:
         a0:b5:a9:4d:44:28:59:fc:d8:e6:50:6c:d6:4f:54:8a:bf:da:
         0d:93:44:b7:4a:ae:34:0f:4c:42:85:42:e8:33:d1:e6:f5:80:
         6c:02:a6:c5:73:be:53:a8:95:f1:e7:61:00:90:fa:4d:5d:82:
         33:c6:76:31:34:fc:8b:0f:b5:0f:ab:b2:0b:f9:e1:38:58:3b:
         41:07:d1:bd:4f:48:cd:8f:a5:68:d9:dc:38:af:aa:3c:4b:c3:
         55:18:6b:ab:03:2e:c6:95:e8:11:65:ac:6f:f1:39:5d:20:8e:
         9e:92:f0:30:98:cf:d1:ad:99:55:e6:3b:e7:9e:8e:10:f3:a5:
         a9:aa:30:19:c7:0c:5a:9f:7b:6d:33:06:db:30:cf:f9:2c:97:
         ec:6c:79:e7:6e:87:2a:23:94:74:f9:d8:be:c6:74:07:5c:88:
         e8:49:5f:96:ab:2e:8b:c8:cc:6a:40:ac:75:1d:cf:3b:4f:cc:
         ba:c1:f9:83:b4:25:f7:22:b1:d6:f6:82:8f:3f:84:98:c2:f5:
         a1:50:38:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:07:41 2025 by rpki-client