Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180EB5/E4EE92CE55FA11ECAAE80E41C4F9AE02/plApCrx0GfQg5AG7s6RNCBPR8Wk.mft
File:                     plApCrx0GfQg5AG7s6RNCBPR8Wk.mft (raw, json)
Hash identifier:          zXlTlDPAirZhy02N29MeuvoqaIPwZvecc00ktcsFDug=
Subject key identifier:   2A:68:DB:C1:9B:70:2C:57:39:8F:CD:0A:9C:E9:74:B4:64:F4:15:AE
Authority key identifier: A6:50:29:0A:BC:74:19:F4:20:E4:01:BB:B3:A4:4D:08:13:D1:F1:69
Certificate issuer:       /CN=A9180EB5/serialNumber=A650290ABC7419F420E401BBB3A44D0813D1F169
Certificate serial:       049F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plApCrx0GfQg5AG7s6RNCBPR8Wk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180EB5/E4EE92CE55FA11ECAAE80E41C4F9AE02/plApCrx0GfQg5AG7s6RNCBPR8Wk.mft
Manifest number:          049B
Signing time:             Wed 05 Nov 2025 00:03:49 +0000
Manifest this update:     Wed 05 Nov 2025 00:03:49 +0000
Manifest next update:     Wed 12 Nov 2025 00:03:49 +0000
Files and hashes:         1: plApCrx0GfQg5AG7s6RNCBPR8Wk.crl (hash: LfMrCoUQVWeRfUiMtpWx/L9yeauN9nHs0hZoOKwPsjE=)
                          2: C361870855FD11EC938D1744C4F9AE02.roa (hash: SB4h4zGEtxyFJYfc5GO7YkKy69kkEfQKoUL9+jluR6E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180EB5/E4EE92CE55FA11ECAAE80E41C4F9AE02/plApCrx0GfQg5AG7s6RNCBPR8Wk.crl
                          rsync://rpki.apnic.net/member_repository/A9180EB5/E4EE92CE55FA11ECAAE80E41C4F9AE02/plApCrx0GfQg5AG7s6RNCBPR8Wk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plApCrx0GfQg5AG7s6RNCBPR8Wk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 00:03:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1183 (0x49f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180EB5, serialNumber=A650290ABC7419F420E401BBB3A44D0813D1F169
        Validity
            Not Before: Nov  5 00:03:49 2025 GMT
            Not After : Nov 12 00:03:49 2025 GMT
        Subject: CN=690a9465-b623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6f:0f:ef:4e:7f:24:18:d7:4d:fe:f9:92:87:
                    27:34:9a:bf:86:46:64:63:bd:d1:96:24:99:84:4f:
                    22:2c:ce:fa:4d:9c:68:e9:74:5e:d0:0a:60:b1:8e:
                    d8:16:ef:66:d4:93:06:39:71:5c:d0:25:06:da:4e:
                    42:61:3b:b8:04:1a:c2:e8:1b:93:ea:e6:d3:47:68:
                    f8:f5:e7:af:da:a7:4f:cf:6e:12:87:58:13:9b:95:
                    4d:bd:02:aa:7c:29:80:d9:19:ae:ad:ec:22:22:0b:
                    ae:01:dd:e9:5c:ae:50:d8:32:20:9e:f8:f4:05:26:
                    0f:bb:5a:8c:71:fa:a4:7c:89:cc:b7:3b:5b:21:44:
                    5e:90:a2:5d:4d:51:d4:06:e4:e9:a5:ab:e7:5e:96:
                    9b:63:9d:44:b5:7e:31:8f:4f:fd:4b:7f:27:ee:0d:
                    80:8e:3f:57:2c:c4:08:41:7e:29:40:36:cf:47:7b:
                    18:81:6f:6a:63:a8:91:98:f7:6c:ac:94:d6:70:cb:
                    6d:42:8f:ed:fd:61:15:35:f5:ad:02:43:80:57:30:
                    1d:ee:d5:05:bb:e5:b0:3e:06:4e:1f:f3:19:ab:a2:
                    5d:1e:f4:bd:16:b1:f1:e3:8f:8c:c7:d0:ef:b2:56:
                    28:ee:a6:4e:22:73:0a:65:1f:31:1c:bf:2b:d3:41:
                    65:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:68:DB:C1:9B:70:2C:57:39:8F:CD:0A:9C:E9:74:B4:64:F4:15:AE
            X509v3 Authority Key Identifier:
                keyid:A6:50:29:0A:BC:74:19:F4:20:E4:01:BB:B3:A4:4D:08:13:D1:F1:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180EB5/E4EE92CE55FA11ECAAE80E41C4F9AE02/plApCrx0GfQg5AG7s6RNCBPR8Wk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plApCrx0GfQg5AG7s6RNCBPR8Wk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180EB5/E4EE92CE55FA11ECAAE80E41C4F9AE02/plApCrx0GfQg5AG7s6RNCBPR8Wk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:07:32:c2:3c:20:0f:93:2a:e7:a3:c9:a1:78:1e:5e:fe:dc:
         61:d3:2c:5f:1a:48:b8:17:40:76:83:53:bd:72:7f:4e:60:4d:
         d5:31:2d:c5:04:5e:47:23:cd:94:8f:7d:e5:4b:a5:ad:af:d9:
         7e:cb:ab:97:0d:f3:4f:4b:aa:93:56:d7:3f:08:ec:97:a0:68:
         b3:7b:46:d5:3e:fd:19:1f:52:62:a8:01:36:c8:4c:8c:e4:a8:
         be:e0:d0:f9:f1:40:ac:d8:ab:b6:c7:69:6b:10:65:86:93:24:
         d7:a5:64:39:d3:de:a0:ef:7e:7a:4e:f1:0a:21:d5:92:d0:84:
         ae:ba:7a:cd:16:a4:44:ad:fd:21:74:5f:8a:94:90:da:3e:2b:
         4e:1c:de:a9:f4:bf:a2:6d:39:68:3e:03:14:4b:65:0f:9f:2a:
         c6:72:49:82:3f:c3:e1:15:34:cb:56:01:90:84:45:43:49:4a:
         1d:15:2a:cd:ab:45:64:9f:ec:c2:44:9b:ad:4e:f4:af:b2:6f:
         73:aa:bb:3c:76:21:68:1d:c6:58:6f:73:bd:0f:5f:37:c7:4e:
         a7:ec:e1:2a:29:41:c1:47:66:37:53:e3:95:56:70:de:2f:cd:
         81:f8:b8:08:e4:ed:83:45:31:7c:2f:69:1a:6d:54:26:63:17:
         e4:08:b0:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:21:03 2025 by rpki-client