Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft
File:                     PuJvukvjWd6uUAeS6_940ArLdgw.mft (raw, json)
Hash identifier:          iWj2FxOG1ZAT+ig7ypjr1NoyhRd71cM35L5Gavg0Hnc=
Subject key identifier:   0A:C0:98:F1:14:F8:52:B6:A0:32:B0:DF:3F:55:31:81:FA:E0:A7:F1
Authority key identifier: 3E:E2:6F:BA:4B:E3:59:DE:AE:50:07:92:EB:FF:78:D0:0A:CB:76:0C
Certificate issuer:       /CN=A91596C4/serialNumber=3EE26FBA4BE359DEAE500792EBFF78D00ACB760C
Certificate serial:       043F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft
Manifest number:          042D
Signing time:             Wed 05 Nov 2025 00:24:47 +0000
Manifest this update:     Wed 05 Nov 2025 00:24:46 +0000
Manifest next update:     Wed 12 Nov 2025 00:24:46 +0000
Files and hashes:         1: PuJvukvjWd6uUAeS6_940ArLdgw.crl (hash: s2OI/nLUMb4MB5kCExB8ub5dQBxIjfVopPz9ddrLa+g=)
                          2: 0A4D6250833411ECBB74C786C4F9AE02.roa (hash: VgSITVgJXx7CtfsO3tS4g2hXC7FovkKg8hqJW4bz6zU=)
                          3: 0AE155E6833411ECBB74C786C4F9AE02.roa (hash: ai4gOSCyDuJnPtNA6e5xOnRpdtNaVtwBWs167birC4A=)
                          4: 09B62A48833411ECBB74C786C4F9AE02.roa (hash: ANWZ9/ZI/YnC7+gnSwxQhiQXsEsFgVbk7uY3NlPWKy8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.crl
                          rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 00:24:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1087 (0x43f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91596C4, serialNumber=3EE26FBA4BE359DEAE500792EBFF78D00ACB760C
        Validity
            Not Before: Nov  5 00:24:46 2025 GMT
            Not After : Nov 12 00:24:46 2025 GMT
        Subject: CN=690a994e-1672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5e:c0:7b:a7:6f:a6:db:eb:37:29:1c:c9:fb:
                    d1:67:ba:3b:14:67:79:46:39:3d:a3:a8:86:59:76:
                    4f:4d:ee:14:0f:5e:de:37:25:a6:f5:40:a4:8e:ea:
                    a7:f2:49:bf:8f:97:6b:cd:9b:da:b3:97:4f:24:02:
                    fd:0c:2c:ad:a1:7f:bf:da:9d:88:7b:be:d5:2d:f1:
                    26:51:fd:22:e1:eb:1e:a7:9c:38:69:70:30:9c:45:
                    cb:c1:4c:72:9b:8f:2e:a8:5b:fb:93:0e:4e:46:ae:
                    f3:c4:8d:7d:cb:40:d4:61:2b:0c:04:d6:bf:24:1c:
                    ef:13:eb:55:38:ec:a7:04:cd:ee:d3:09:bf:c1:b4:
                    6f:6d:e4:d2:d5:64:f8:36:92:e6:19:ef:c5:8e:ee:
                    d1:d1:54:48:1e:be:8b:ca:7b:fe:30:7c:a8:ed:24:
                    4d:66:b8:e6:20:85:08:13:d8:0f:21:9e:eb:b0:d2:
                    35:f9:83:2d:fa:02:e9:75:12:c1:29:38:8a:83:1a:
                    a0:c3:ed:b0:1f:05:54:0d:cc:85:7b:e8:eb:13:00:
                    7d:2b:86:ab:a5:4f:6b:67:a3:cc:7a:a5:5d:ea:b4:
                    c6:3a:72:72:c8:64:4a:86:ff:48:12:db:fc:2d:4c:
                    74:c1:6d:66:df:a6:68:b1:a2:76:c8:55:75:a4:d4:
                    c8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:C0:98:F1:14:F8:52:B6:A0:32:B0:DF:3F:55:31:81:FA:E0:A7:F1
            X509v3 Authority Key Identifier:
                keyid:3E:E2:6F:BA:4B:E3:59:DE:AE:50:07:92:EB:FF:78:D0:0A:CB:76:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:09:99:a4:0f:5e:35:fe:02:0b:5a:cc:02:a4:0c:98:3d:17:
         1e:6f:81:34:bb:20:e8:d3:c1:ac:54:c9:33:e6:72:3a:50:da:
         25:e4:f0:72:e9:e5:ad:c7:25:2e:d2:78:15:00:59:00:d4:64:
         d3:25:7c:ca:74:b8:ad:5c:07:4c:bb:b3:e2:11:a2:87:d1:84:
         d8:a0:80:60:38:eb:35:c2:aa:9f:cd:31:ab:90:19:b9:61:f9:
         3f:1f:f4:3e:2f:95:df:0e:c9:65:64:f9:a6:c5:53:d3:f1:c3:
         90:89:82:1a:5b:f2:6f:fc:fd:64:b9:26:43:df:7b:fa:d8:2a:
         43:3c:10:23:e1:a4:2d:2a:8b:f7:e0:4d:2b:da:16:85:1e:41:
         dd:98:a4:a2:90:7a:9d:ea:6e:7a:a5:9f:00:6d:42:5d:7c:4f:
         8c:f5:2a:13:bb:89:54:62:32:61:b5:bf:d3:28:db:2c:6c:2b:
         fe:42:de:7f:53:fb:b5:79:61:d2:75:af:dd:45:d7:d8:36:0d:
         63:56:f2:7c:80:f6:ff:ce:b2:2f:3c:d7:26:1b:47:d3:68:d1:
         1e:8c:2c:03:c3:cc:0f:48:16:19:69:1c:22:1b:66:60:a2:8a:
         bc:67:5a:7f:5a:57:30:c7:b3:5d:ea:52:f7:22:0c:aa:4b:b9:
         81:0b:c3:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:17:46 2025 by rpki-client