Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/Ua66I_t0WlU6XkmW3xyBc0c_F5g.mft
File:                     Ua66I_t0WlU6XkmW3xyBc0c_F5g.mft (raw, json)
Hash identifier:          YfxWs8Jq/XkymjSdbw4+H3GY0X1rTfcrzH3cJvEkjqA=
Subject key identifier:   55:C4:4D:18:DE:36:92:02:F0:C4:D9:3F:29:92:32:C1:0F:39:E9:7D
Authority key identifier: 51:AE:BA:23:FB:74:5A:55:3A:5E:49:96:DF:1C:81:73:47:3F:17:98
Certificate issuer:       /CN=A9183B33/serialNumber=51AEBA23FB745A553A5E4996DF1C8173473F1798
Certificate serial:       069D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ua66I_t0WlU6XkmW3xyBc0c_F5g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/Ua66I_t0WlU6XkmW3xyBc0c_F5g.mft
Manifest number:          0694
Signing time:             Sun 02 Nov 2025 22:23:43 +0000
Manifest this update:     Sun 02 Nov 2025 22:23:42 +0000
Manifest next update:     Sun 09 Nov 2025 22:23:42 +0000
Files and hashes:         1: Ua66I_t0WlU6XkmW3xyBc0c_F5g.crl (hash: R4p8KQgvHNqpzIB5v+zgPC+bEVzkbMSjLy40Lodlt4A=)
                          2: 59018DEE340611ED9C72786AC4F9AE02.roa (hash: rP6Pu7EfL4ZTfd4hkNZXRMND1x04kCFhfmQKKfFcDnY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/Ua66I_t0WlU6XkmW3xyBc0c_F5g.crl
                          rsync://rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/Ua66I_t0WlU6XkmW3xyBc0c_F5g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ua66I_t0WlU6XkmW3xyBc0c_F5g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 22:23:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1693 (0x69d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183B33, serialNumber=51AEBA23FB745A553A5E4996DF1C8173473F1798
        Validity
            Not Before: Nov  2 22:23:42 2025 GMT
            Not After : Nov  9 22:23:42 2025 GMT
        Subject: CN=6907d9ef-c8de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ab:0c:52:fc:59:33:47:7d:9b:9e:fc:c5:d8:
                    1a:fa:b4:86:d4:c9:08:a8:a7:2f:4a:5d:0d:be:ce:
                    c6:e7:f9:f9:54:10:b2:1f:b1:7b:4e:e7:7e:82:f2:
                    c3:bc:9f:66:13:de:ac:8b:3e:a7:1d:08:2f:9e:03:
                    74:0b:c4:aa:3a:ed:f1:c4:93:21:31:53:4d:7a:37:
                    c0:24:88:4a:45:f4:cb:d2:61:29:d7:00:b8:e4:e4:
                    6b:7c:77:f9:21:78:b1:06:d1:15:b6:be:4c:30:7d:
                    f8:80:72:d4:59:a1:d2:32:5d:a5:40:d3:8f:5c:41:
                    73:3e:98:45:f8:de:1f:78:de:ef:b3:8a:d8:00:b8:
                    25:82:7f:eb:97:fb:55:9a:ca:7b:a7:35:e3:41:4c:
                    9b:5d:90:90:ca:b3:46:9a:1f:b3:2d:6d:91:93:f3:
                    fa:90:88:f6:57:23:8e:e5:1e:c7:a3:f8:98:44:0f:
                    5d:f6:a8:3a:cf:5e:ea:e6:eb:d4:76:9f:a3:da:a0:
                    8b:65:3b:a5:1e:ef:02:a7:1f:9e:d3:da:d5:5c:02:
                    a0:e0:fe:33:08:1f:e0:6f:6a:23:da:62:f0:fe:07:
                    b9:28:00:88:15:3a:44:59:ab:48:6e:48:14:df:fa:
                    6d:95:00:43:15:ed:08:d9:b6:44:00:83:b7:78:47:
                    8a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:C4:4D:18:DE:36:92:02:F0:C4:D9:3F:29:92:32:C1:0F:39:E9:7D
            X509v3 Authority Key Identifier:
                keyid:51:AE:BA:23:FB:74:5A:55:3A:5E:49:96:DF:1C:81:73:47:3F:17:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/Ua66I_t0WlU6XkmW3xyBc0c_F5g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ua66I_t0WlU6XkmW3xyBc0c_F5g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/Ua66I_t0WlU6XkmW3xyBc0c_F5g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:ff:d2:9c:51:fc:3b:e4:57:90:25:d8:30:f9:7e:59:a5:a1:
         ae:e5:ec:88:0b:22:40:4d:36:6a:e9:c3:8b:44:be:08:a8:8d:
         d1:7a:54:6d:74:18:a1:e7:30:f3:e8:f1:dd:b3:4b:7e:4f:06:
         15:2a:98:1c:d7:5a:5a:48:22:bd:a2:0c:e7:d9:0d:d6:1a:35:
         7a:c3:85:2d:1c:ed:ca:fd:38:49:b7:04:df:f9:a4:92:7e:9a:
         b5:0f:7e:64:53:f8:c8:d4:df:84:f1:42:78:f8:84:08:17:cc:
         30:f2:27:77:18:d1:a9:6c:1e:5c:65:5b:db:3f:de:72:ef:79:
         98:df:32:f2:b6:81:04:d0:01:da:74:28:0d:62:d7:9c:75:ca:
         60:d0:49:d1:71:b3:6c:2b:65:fd:23:80:ac:e5:1c:79:4c:66:
         c7:0f:a1:84:08:ff:ac:49:f2:cb:ee:3a:31:de:b0:19:0b:86:
         da:d2:cd:9b:08:97:35:16:fd:72:7b:ed:53:aa:b3:88:86:52:
         ba:5f:ca:c1:23:55:9a:9b:6d:d7:a5:9d:96:98:55:6e:d5:9c:
         5e:4d:e6:f0:cd:c5:9b:0d:79:52:b5:12:8a:f0:61:09:c3:40:
         0f:cf:7b:89:70:21:9c:7b:fb:fc:f6:0c:4b:62:7a:bd:c0:09:
         76:9a:14:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 12:36:18 2025 by rpki-client