Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft
File:                     7ZIUoK3iNSkzeSFihbucXj4PXW8.mft (raw, json)
Hash identifier:          40Jr7hZfa5+5+vNnZitHjEwsuHGyCcvunWVPI6RTvow=
Subject key identifier:   71:4B:5D:F6:A4:DF:AF:64:75:E5:DF:5A:82:1C:D1:C3:EA:6F:0A:48
Authority key identifier: ED:92:14:A0:AD:E2:35:29:33:79:21:62:85:BB:9C:5E:3E:0F:5D:6F
Certificate issuer:       /CN=A9183587/serialNumber=ED9214A0ADE235293379216285BB9C5E3E0F5D6F
Certificate serial:       0389
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZIUoK3iNSkzeSFihbucXj4PXW8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft
Manifest number:          0381
Signing time:             Wed 05 Nov 2025 00:55:59 +0000
Manifest this update:     Wed 05 Nov 2025 00:55:59 +0000
Manifest next update:     Wed 12 Nov 2025 00:55:59 +0000
Files and hashes:         1: 7ZIUoK3iNSkzeSFihbucXj4PXW8.crl (hash: dERrgZdonYOpwFIqGUnjjQYH56lptU5gCp+usWryrnw=)
                          2: E9CDE63CD56811EFB4A0C533C4F9AE02.roa (hash: 5H3doinpQy2aJUR8V/Iyn/j6ZGC3RyvpumpsTRmuHeE=)
                          3: 632E90B0C6C811ECA5A9AB33C4F9AE02.roa (hash: lc1pPdhpDyedJmN9wKoMqneYMH913sVIQlr9uEAlmPc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.crl
                          rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZIUoK3iNSkzeSFihbucXj4PXW8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 00:55:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 905 (0x389)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183587, serialNumber=ED9214A0ADE235293379216285BB9C5E3E0F5D6F
        Validity
            Not Before: Nov  5 00:55:59 2025 GMT
            Not After : Nov 12 00:55:59 2025 GMT
        Subject: CN=690aa09f-331b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:30:7b:17:eb:43:d7:b1:e6:79:81:e3:ce:12:
                    8d:16:e7:23:45:5e:b9:28:62:3b:31:fe:ab:b1:31:
                    80:64:23:1d:18:3b:1b:a0:56:21:ef:3b:10:27:b4:
                    21:72:ac:16:9f:97:c4:c4:8a:d5:72:77:6a:64:4f:
                    a9:ce:d5:7a:20:83:21:95:da:3b:44:e4:54:99:89:
                    3f:19:75:87:8b:f3:ee:0b:b5:59:7a:f3:e2:c5:23:
                    28:dd:5d:af:b5:ed:42:30:8b:cb:81:a0:1f:91:22:
                    5f:fb:96:72:cc:81:1d:59:38:8c:63:81:ae:39:e8:
                    fc:88:ff:26:55:92:c4:46:75:9b:ca:70:d1:46:92:
                    b3:3c:18:3f:00:4a:43:50:33:bb:c6:4a:9c:53:fe:
                    81:af:03:0e:59:fa:3d:d8:e2:dd:54:87:61:73:9a:
                    85:f8:34:98:9e:b1:ae:9f:68:61:b5:81:40:2d:e5:
                    36:d6:ab:75:29:ee:87:08:f2:7e:c4:07:74:85:fd:
                    43:3e:9f:4f:f6:a7:e7:9f:66:7f:86:58:6d:78:85:
                    52:72:90:25:b2:39:3f:1b:de:87:50:3f:cd:21:6d:
                    40:95:a2:53:ef:88:47:aa:c3:dc:62:d5:99:16:78:
                    3e:47:24:e1:02:de:8d:03:52:14:97:c3:63:1e:ad:
                    84:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:4B:5D:F6:A4:DF:AF:64:75:E5:DF:5A:82:1C:D1:C3:EA:6F:0A:48
            X509v3 Authority Key Identifier:
                keyid:ED:92:14:A0:AD:E2:35:29:33:79:21:62:85:BB:9C:5E:3E:0F:5D:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZIUoK3iNSkzeSFihbucXj4PXW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:95:c2:f5:31:43:61:9d:c7:97:1f:5c:d8:9b:c4:42:3d:0e:
         10:70:82:ac:82:e9:c3:aa:5e:85:70:c8:14:69:5f:c5:d8:7f:
         18:bf:1e:45:5f:d4:ac:70:c4:36:5a:e7:f2:54:a9:70:fd:17:
         ab:ee:b2:e5:5f:a1:da:26:4e:be:45:8e:b1:17:b1:2d:19:bd:
         4f:15:6f:05:70:e6:9c:7f:0d:fc:0f:65:27:74:c2:4c:39:0a:
         7e:d4:12:c0:05:d5:b4:3d:97:a9:4d:44:d8:10:2d:4f:88:26:
         5a:66:48:9b:13:40:4f:c8:8f:ae:e6:bd:37:17:43:6a:1b:0e:
         34:22:05:01:62:d0:80:59:9e:ef:10:76:f9:9a:db:f8:76:23:
         60:05:ce:b0:e4:24:ff:43:11:07:ef:d2:dd:f0:f2:b4:17:ed:
         08:01:49:d6:4b:ed:3d:3b:9d:45:5b:de:bb:e9:67:c2:b8:00:
         61:4d:e6:63:e0:4a:fa:fb:27:7f:c4:04:6a:e4:59:d8:aa:dc:
         eb:a3:fd:e5:2b:4a:aa:cb:e3:01:e9:cb:2b:c4:91:09:bd:bd:
         23:5c:be:5b:d1:da:c0:15:26:d4:5f:b4:91:ea:88:de:e5:ab:
         47:c2:73:2b:1e:fd:e0:f4:f4:f4:71:0d:c0:7a:88:32:c2:d5:
         18:00:a8:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:04:03 2025 by rpki-client