Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.mft
File:                     jSAgfR7bX1wtZjsKahC81AutOt4.mft (raw, json)
Hash identifier:          bZklTQWlb0g3xum5m4nPryHDvdBLpbTl9T1sbmn+kHo=
Subject key identifier:   B2:47:2E:0C:47:03:92:D9:DB:24:41:71:58:47:10:36:D6:C2:C9:0C
Authority key identifier: 8D:20:20:7D:1E:DB:5F:5C:2D:66:3B:0A:6A:10:BC:D4:0B:AD:3A:DE
Certificate issuer:       /CN=A9185D6E/serialNumber=8D20207D1EDB5F5C2D663B0A6A10BCD40BAD3ADE
Certificate serial:       043F
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jSAgfR7bX1wtZjsKahC81AutOt4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.mft
Manifest number:          042B
Signing time:             Tue 04 Nov 2025 23:10:08 +0000
Manifest this update:     Tue 04 Nov 2025 23:10:08 +0000
Manifest next update:     Tue 11 Nov 2025 23:10:08 +0000
Files and hashes:         1: jSAgfR7bX1wtZjsKahC81AutOt4.crl (hash: yNVdV/KxxkJPLvnc1hygDTVOrkSy4dJyU2jLAS6xsdI=)
                          2: AA14FB00C70811ECBAECCC78C4F9AE02.roa (hash: 6vANpzfgkdA95BOGghUjzousLRYpV7ZyXI+Ad3LxlZE=)
                          3: A97B2098C70811ECBAECCC78C4F9AE02.roa (hash: ucXZf4eu0/AY5wwnvuYXaUOhU2IDoNXJmo5ZEBv0MfQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.crl
                          rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jSAgfR7bX1wtZjsKahC81AutOt4.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 23:10:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1087 (0x43f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185D6E, serialNumber=8D20207D1EDB5F5C2D663B0A6A10BCD40BAD3ADE
        Validity
            Not Before: Nov  4 23:10:08 2025 GMT
            Not After : Nov 11 23:10:08 2025 GMT
        Subject: CN=690a87d0-9bc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9d:9b:00:75:15:a8:32:6c:b3:d6:ef:0f:04:
                    3c:31:b5:4e:59:b3:c0:76:bc:39:bf:39:ca:cb:5c:
                    d1:fb:ff:ec:9e:ac:ae:8c:50:7c:2c:0e:f6:7d:2d:
                    55:02:ab:f5:02:ea:0f:d4:3d:c3:0c:73:cb:c1:45:
                    63:fa:08:4f:1c:82:3f:97:b2:58:b1:0c:19:79:fa:
                    dd:1e:4f:1c:4f:10:e1:37:ee:36:a3:c8:8c:09:20:
                    65:0c:58:29:cc:ed:e3:f6:96:4c:1e:b9:04:13:92:
                    7b:7d:3c:28:24:ed:5f:30:b1:54:ec:ec:de:35:df:
                    35:26:9a:e2:07:78:e5:3c:52:09:f4:d1:56:81:ef:
                    bf:33:b8:da:4d:75:8a:29:0a:40:52:49:84:36:8b:
                    f3:69:75:4d:08:f4:4b:bf:c8:b5:30:9d:fe:b5:a5:
                    fe:a5:78:d4:07:b4:73:f2:7c:5b:3f:ce:4f:7b:be:
                    18:b3:de:5f:d0:72:5f:bb:de:fa:4a:25:c7:cb:b5:
                    fc:6d:32:f6:1d:65:74:77:f9:6b:5f:70:43:47:d8:
                    1a:82:54:97:d7:35:7b:43:6b:0a:e4:36:1c:19:16:
                    ae:32:52:e0:9b:68:04:3b:95:ab:31:0c:7d:98:fa:
                    19:d9:1f:d5:3c:e9:17:38:e8:78:64:5a:ee:6f:54:
                    00:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:47:2E:0C:47:03:92:D9:DB:24:41:71:58:47:10:36:D6:C2:C9:0C
            X509v3 Authority Key Identifier:
                keyid:8D:20:20:7D:1E:DB:5F:5C:2D:66:3B:0A:6A:10:BC:D4:0B:AD:3A:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jSAgfR7bX1wtZjsKahC81AutOt4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:70:0f:71:33:3a:71:f7:67:2d:e4:4e:9f:f4:e7:3f:66:86:
         f3:96:f1:38:cd:03:b0:ae:6a:31:ba:54:0c:ea:6f:a1:77:7f:
         bb:14:a7:1c:ea:49:49:af:91:da:46:e5:56:2b:fa:3b:1c:87:
         7f:b5:d6:d2:81:e1:ce:7f:fd:36:06:36:b7:2c:22:90:cc:b7:
         78:e5:e7:60:be:78:68:92:ba:1c:20:33:d7:61:d1:a8:b9:f1:
         98:51:27:5c:b3:40:a5:b0:98:da:c0:68:b9:85:52:46:ec:68:
         b4:09:13:64:53:42:91:7d:02:3b:d5:56:98:86:be:06:e7:c9:
         e3:7c:51:c7:38:c6:40:93:cf:1e:39:fa:ed:02:52:51:cc:08:
         92:6c:33:d5:cd:99:5b:55:e0:79:ad:cf:31:d3:2d:63:3a:94:
         99:70:e7:df:35:1b:44:72:0d:85:1b:51:fc:1f:f9:c8:4e:ec:
         b0:9b:4f:0f:23:40:cb:84:56:49:4b:2a:4e:4b:c8:9f:68:29:
         05:33:83:22:24:86:16:37:5e:c3:87:88:0f:1f:f3:36:08:aa:
         95:2c:7e:82:54:b4:76:fc:dc:d0:58:9d:56:96:78:f3:2a:f8:
         59:67:85:76:20:c6:a5:ca:15:6a:8b:cb:78:07:a0:f7:3f:22:
         9f:cb:eb:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:31:11 2025 by rpki-client