Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft
File:                     HvMMTFYEpW7LPq7n8sqX63gQUHA.mft (raw, json)
Hash identifier:          a9DjFqVlGv6FaOq3/nUVFBzzvFS3cJMNm5De2gKfIL4=
Subject key identifier:   DA:D2:8E:C4:B2:44:D7:EB:92:F3:83:30:AE:BF:E1:85:BC:8D:E9:EA
Authority key identifier: 1E:F3:0C:4C:56:04:A5:6E:CB:3E:AE:E7:F2:CA:97:EB:78:10:50:70
Certificate issuer:       /CN=A916CA31/serialNumber=1EF30C4C5604A56ECB3EAEE7F2CA97EB78105070
Certificate serial:       01B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft
Manifest number:          01A3
Signing time:             Mon 03 Nov 2025 03:26:03 +0000
Manifest this update:     Mon 03 Nov 2025 03:26:02 +0000
Manifest next update:     Mon 10 Nov 2025 03:26:02 +0000
Files and hashes:         1: HvMMTFYEpW7LPq7n8sqX63gQUHA.crl (hash: pvkgyk/jWahMFv4nWotNRr8Uft2bz3WPc6z1rDExF7c=)
                          2: F9F53948599011EEB54F7158C4F9AE02.roa (hash: l+Q4St8uGoebFhbj3cnIjNMVXPuxOtW1fo31woffMhU=)
                          3: E19EC38C532711EF9E83C841C4F9AE02.roa (hash: r6PCoelIVct+lAj2WsrBX0BoFYo/9ibJamB/UU4N0xE=)
                          4: D994A1B2500C11EE83562B60C4F9AE02.roa (hash: Iz380y9VTkSUeTgeze9iiFXSZYgaWspRNj6C26VUn2Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.crl
                          rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 03:26:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 437 (0x1b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916CA31, serialNumber=1EF30C4C5604A56ECB3EAEE7F2CA97EB78105070
        Validity
            Not Before: Nov  3 03:26:02 2025 GMT
            Not After : Nov 10 03:26:02 2025 GMT
        Subject: CN=690820ca-9793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f2:de:74:55:d2:79:6a:8f:a0:44:c8:1c:ae:
                    70:44:5c:72:c5:62:5a:f1:69:95:70:41:1b:57:44:
                    d9:e1:0c:b2:38:14:5e:e1:af:fa:a3:82:be:02:be:
                    2d:70:26:ee:e3:95:68:2f:5f:57:12:d4:4f:0a:36:
                    52:00:e2:e8:8e:f2:a4:32:64:6b:a5:64:c1:e0:f6:
                    6f:56:03:7f:9d:b4:7c:15:b5:30:fe:b2:56:a7:ea:
                    79:0a:5f:06:5a:80:32:57:b5:3b:26:a2:cb:a4:79:
                    7a:44:09:1d:62:af:06:98:e9:2f:e4:f4:7c:d3:95:
                    e7:5f:bc:2d:d0:a2:4c:92:9b:69:41:92:b5:1b:35:
                    0c:1f:71:45:eb:13:bb:42:bf:1a:d1:c9:e8:80:ae:
                    13:c0:ae:f5:74:14:0c:84:d0:fd:17:6a:85:50:e7:
                    df:b5:f1:60:55:9e:c9:15:06:00:e0:21:3f:ca:66:
                    94:ac:c4:d7:a7:7f:16:f3:e9:41:6c:d2:74:45:fd:
                    d5:ea:3c:6b:83:98:80:18:02:35:39:eb:8a:6f:bb:
                    fa:77:12:5f:2e:14:e3:dc:ea:54:69:5f:39:f9:cc:
                    78:11:fa:f9:4a:3d:7a:41:3a:3f:cc:5d:68:ed:ab:
                    30:f3:7c:ef:95:39:55:bd:3c:45:1c:63:42:a5:df:
                    47:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:D2:8E:C4:B2:44:D7:EB:92:F3:83:30:AE:BF:E1:85:BC:8D:E9:EA
            X509v3 Authority Key Identifier:
                keyid:1E:F3:0C:4C:56:04:A5:6E:CB:3E:AE:E7:F2:CA:97:EB:78:10:50:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:41:b1:2d:6c:91:1c:51:09:c1:9e:c6:cc:56:fc:07:52:f4:
         88:f1:41:ef:82:72:46:4f:26:f5:80:1b:9c:1b:45:db:fe:5e:
         66:48:64:b2:e7:c6:e9:06:dd:b3:8b:97:3e:b5:ab:06:3b:d4:
         5a:0b:fb:19:10:66:54:fd:ee:44:aa:16:9b:f3:59:e7:a3:04:
         75:51:2b:af:9a:db:30:69:7b:96:6d:f4:06:89:62:4f:33:53:
         6c:a3:39:f4:61:a9:b8:7e:0e:9c:dd:67:58:36:bd:81:0a:e9:
         a9:3c:7e:9e:e7:99:58:d1:67:b8:a5:9a:86:78:07:53:e3:35:
         ce:8e:e0:28:3e:d5:9e:f6:32:29:d1:e9:b6:c2:23:04:c1:b5:
         eb:df:1a:b3:1d:3f:c2:80:7d:ba:6c:95:57:b2:3d:53:0b:33:
         5c:a3:d1:f4:94:52:81:f9:92:7a:51:35:5e:f9:b3:04:3b:63:
         66:05:7f:c7:15:e3:c8:69:bf:98:f0:4f:81:dc:c3:d0:30:ee:
         66:a9:37:47:78:db:9c:7e:af:ed:46:ba:a5:de:19:b7:29:4b:
         60:01:38:f8:53:b7:96:4f:87:76:d1:34:e4:71:c0:85:de:8d:
         31:23:9a:57:4e:d8:62:ea:c9:dd:a3:ce:f0:9a:ee:b6:20:20:
         2b:ee:e8:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 08:11:16 2025 by rpki-client