Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/uPjDYm3QYWLmfiX1mpqB-uRyCiU.mft
File:                     uPjDYm3QYWLmfiX1mpqB-uRyCiU.mft (raw, json)
Hash identifier:          UgUQKFHC5WqmNaCxGhvwULK2clkQxTeOLkk2QEWo3+c=
Subject key identifier:   90:17:12:30:3F:E2:81:C9:EA:0F:99:31:18:57:EE:9E:52:D3:5E:08
Authority key identifier: B8:F8:C3:62:6D:D0:61:62:E6:7E:25:F5:9A:9A:81:FA:E4:72:0A:25
Certificate issuer:       /CN=A917068E/serialNumber=B8F8C3626DD06162E67E25F59A9A81FAE4720A25
Certificate serial:       06B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPjDYm3QYWLmfiX1mpqB-uRyCiU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/uPjDYm3QYWLmfiX1mpqB-uRyCiU.mft
Manifest number:          06AD
Signing time:             Tue 04 Nov 2025 22:20:01 +0000
Manifest this update:     Tue 04 Nov 2025 22:20:01 +0000
Manifest next update:     Tue 11 Nov 2025 22:20:01 +0000
Files and hashes:         1: uPjDYm3QYWLmfiX1mpqB-uRyCiU.crl (hash: HUs7ZoepoE2i5TsIBpb+kwH5vG6Tuwl3nGsrq/iWTLI=)
                          2: 8889F4E484A711EBB701E773C4F9AE02.roa (hash: lWZRobhtO0oFUd+vRpiCuxRaZUL791izmBtb3cII0fo=)
                          3: 7464EB1E876411EE8971C221C4F9AE02.roa (hash: zpTvJznQ+5mTsWYuBwFqmhL2aTwH3SE1aCKMAY/WGXM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/uPjDYm3QYWLmfiX1mpqB-uRyCiU.crl
                          rsync://rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/uPjDYm3QYWLmfiX1mpqB-uRyCiU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPjDYm3QYWLmfiX1mpqB-uRyCiU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 22:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1719 (0x6b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917068E, serialNumber=B8F8C3626DD06162E67E25F59A9A81FAE4720A25
        Validity
            Not Before: Nov  4 22:20:01 2025 GMT
            Not After : Nov 11 22:20:01 2025 GMT
        Subject: CN=690a7c11-0404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3d:70:08:9f:83:39:4c:08:85:19:d1:2b:12:
                    14:bc:93:75:93:70:9e:54:bb:d9:cc:b7:1a:e0:c1:
                    0b:97:3c:88:b6:79:86:26:83:b1:72:64:09:95:df:
                    90:79:10:8c:a1:d8:ba:bd:12:79:07:d3:ce:58:da:
                    cf:d5:f5:6d:8b:fa:fa:93:dd:84:68:8d:9b:f1:71:
                    d1:a4:2c:55:39:f9:37:72:ba:4a:ef:78:57:4a:f4:
                    0c:c6:17:1e:8e:40:24:7f:d6:ae:83:88:d6:61:06:
                    f4:2e:99:6c:70:9c:94:12:7b:5b:39:b8:ff:91:81:
                    6c:8f:e2:00:8d:64:58:38:35:e0:e4:f9:8b:eb:fc:
                    97:d6:4a:5a:b3:3a:a8:88:1b:c4:8c:ef:2b:f9:f1:
                    a2:85:71:e8:eb:28:8b:72:80:f8:23:3e:70:2e:3e:
                    fd:99:12:41:03:8c:af:ff:e3:b4:49:02:2a:d7:6a:
                    4e:78:a7:b8:eb:b5:1c:25:46:6e:92:ab:a1:ba:5d:
                    bb:00:c6:cd:d5:8b:ca:a1:11:56:a3:db:62:43:bc:
                    56:97:29:4a:e5:08:af:28:76:96:83:87:ef:53:da:
                    a7:9a:34:4f:ba:ad:01:68:ea:07:c9:94:0d:c0:ba:
                    65:01:05:27:dd:ad:da:5a:d4:c6:7f:f7:44:c9:4e:
                    26:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:17:12:30:3F:E2:81:C9:EA:0F:99:31:18:57:EE:9E:52:D3:5E:08
            X509v3 Authority Key Identifier:
                keyid:B8:F8:C3:62:6D:D0:61:62:E6:7E:25:F5:9A:9A:81:FA:E4:72:0A:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/uPjDYm3QYWLmfiX1mpqB-uRyCiU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPjDYm3QYWLmfiX1mpqB-uRyCiU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/uPjDYm3QYWLmfiX1mpqB-uRyCiU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:8f:fc:33:41:60:c9:fe:ef:2c:db:ed:99:b8:89:d3:dc:46:
         44:88:2e:da:21:df:94:af:d1:d4:77:ce:8d:58:5a:6f:84:1e:
         8d:57:91:7b:0b:27:5f:2f:5c:8b:00:34:8b:e6:46:92:72:86:
         57:ec:7b:7d:60:65:b5:15:c5:d3:97:83:e4:52:c6:fd:44:6a:
         09:9d:46:e5:6d:71:3f:d9:95:c7:9f:89:6e:2e:6f:57:b3:c4:
         27:69:e6:39:6d:a9:a2:b7:0b:b4:ef:ee:7a:0f:24:bf:72:a1:
         87:61:a8:24:81:f2:df:eb:fc:b7:46:02:df:3f:4c:95:59:8e:
         82:b4:fa:36:de:48:d0:02:0a:72:2f:12:e3:ff:9d:69:58:33:
         d1:91:35:05:11:6f:ad:22:fc:18:1b:99:dc:d4:64:da:47:7c:
         92:35:b2:9b:c3:b6:ca:00:49:8e:79:04:9c:63:af:05:a4:4b:
         40:bf:02:b1:aa:81:e2:4a:9c:78:b4:82:b2:63:87:5b:af:b8:
         c2:e7:25:d4:57:aa:aa:9b:f9:00:bf:28:a0:bd:68:59:32:36:
         bb:8b:00:ba:e7:d0:98:8c:26:49:99:75:ee:4c:d7:3b:4b:f6:
         34:5e:fc:f3:8f:49:c2:99:1e:b6:13:8e:be:a3:61:8e:79:98:
         fd:3c:33:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:29:30 2025 by rpki-client