Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B61E/807F9254D54E11EE8CC96530C4F9AE02/zXuGlWvtndYhW-SF8McVuSDJp3A.mft
File:                     zXuGlWvtndYhW-SF8McVuSDJp3A.mft (raw, json)
Hash identifier:          HCMhQsixtJw92Y/U56hxUD9u0pq5lz8/36OUwqmgyTM=
Subject key identifier:   93:77:94:CD:96:CD:A1:82:85:FE:BF:67:68:43:BD:C4:26:0A:09:75
Authority key identifier: CD:7B:86:95:6B:ED:9D:D6:21:5B:E4:85:F0:C7:15:B9:20:C9:A7:70
Certificate issuer:       /CN=A918B61E/serialNumber=CD7B86956BED9DD6215BE485F0C715B920C9A770
Certificate serial:       013D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zXuGlWvtndYhW-SF8McVuSDJp3A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B61E/807F9254D54E11EE8CC96530C4F9AE02/zXuGlWvtndYhW-SF8McVuSDJp3A.mft
Manifest number:          0139
Signing time:             Mon 03 Nov 2025 04:27:28 +0000
Manifest this update:     Mon 03 Nov 2025 04:27:27 +0000
Manifest next update:     Mon 10 Nov 2025 04:27:27 +0000
Files and hashes:         1: zXuGlWvtndYhW-SF8McVuSDJp3A.crl (hash: W+ABQuBokYkqjHAn7iFaOvXHIpkx3LFHQ4W510U8wUA=)
                          2: 60DF983AD54F11EE93ED1E3BC4F9AE02.roa (hash: KzdO+S8UaZA+5dqwU3YevT9OI76OGpIsZ7GNNEbB7Sc=)
                          3: 601B8CF6D54F11EE93ED1E3BC4F9AE02.roa (hash: 9rjLofEU8o84/eDpG2+v1chrVfPs+sqWqIrHcUhxjLs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B61E/807F9254D54E11EE8CC96530C4F9AE02/zXuGlWvtndYhW-SF8McVuSDJp3A.crl
                          rsync://rpki.apnic.net/member_repository/A918B61E/807F9254D54E11EE8CC96530C4F9AE02/zXuGlWvtndYhW-SF8McVuSDJp3A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zXuGlWvtndYhW-SF8McVuSDJp3A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 04:27:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 317 (0x13d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B61E, serialNumber=CD7B86956BED9DD6215BE485F0C715B920C9A770
        Validity
            Not Before: Nov  3 04:27:27 2025 GMT
            Not After : Nov 10 04:27:27 2025 GMT
        Subject: CN=69082f30-80cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fc:7d:58:47:e8:ea:d5:90:a5:b2:6e:c6:c5:
                    6d:64:3b:20:01:ce:22:a7:17:cf:86:f4:3d:6b:32:
                    d0:9d:a9:ff:99:d1:9b:19:36:0b:b9:c5:b2:6e:60:
                    30:83:a7:83:ce:b7:76:a7:2e:7e:c2:47:8f:3f:be:
                    22:ad:f1:44:16:97:a0:92:2d:2f:d8:84:6a:51:1d:
                    78:82:c7:79:ca:bd:0c:ab:b9:cb:e9:a9:6f:e2:57:
                    6a:6a:80:c0:a2:58:0a:74:59:87:19:79:6f:35:e4:
                    ee:fe:e2:a0:de:24:6a:02:0b:c7:d5:25:b2:10:b8:
                    7d:21:61:e7:cf:9c:69:b6:ed:28:59:4d:fa:a2:68:
                    a4:5d:90:71:40:d5:a8:39:22:b4:77:9e:9f:80:04:
                    e4:96:bb:a4:48:52:53:4f:01:88:18:49:28:39:57:
                    3b:dd:6c:0e:ba:51:9a:39:00:d7:fd:1f:78:22:81:
                    d7:70:b5:34:13:ee:e4:70:c9:a1:d5:67:4b:a6:65:
                    e4:0c:d7:58:b2:7f:b7:79:37:ca:43:c2:b1:79:83:
                    dd:48:02:7f:c9:63:93:30:b2:d1:17:d3:2e:c7:23:
                    74:7e:e4:74:2f:a3:72:4e:97:41:9b:90:2a:ca:80:
                    60:20:c1:e1:66:aa:5e:0b:00:31:a9:33:d2:99:f2:
                    1a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:77:94:CD:96:CD:A1:82:85:FE:BF:67:68:43:BD:C4:26:0A:09:75
            X509v3 Authority Key Identifier:
                keyid:CD:7B:86:95:6B:ED:9D:D6:21:5B:E4:85:F0:C7:15:B9:20:C9:A7:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B61E/807F9254D54E11EE8CC96530C4F9AE02/zXuGlWvtndYhW-SF8McVuSDJp3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zXuGlWvtndYhW-SF8McVuSDJp3A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B61E/807F9254D54E11EE8CC96530C4F9AE02/zXuGlWvtndYhW-SF8McVuSDJp3A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:a2:73:db:0a:86:82:10:4f:0a:ee:13:eb:f0:c8:e6:1c:60:
         6d:17:b9:ea:5c:f7:e2:22:c2:32:5f:da:a5:61:12:ad:30:84:
         42:53:fb:3d:98:32:65:9e:12:33:38:2a:65:59:f5:ff:dd:6f:
         28:2c:52:5e:aa:56:e4:83:73:41:11:20:8d:2f:c2:06:4d:9b:
         f0:e7:8d:fb:26:19:55:7e:9f:1e:31:ec:56:9c:6f:5a:89:bb:
         02:ba:99:a7:83:73:7f:d2:14:0a:d5:d1:77:1a:01:a7:00:03:
         3d:2b:ea:f7:e2:d7:4c:67:e1:de:95:77:92:ce:82:0c:ed:7e:
         c7:b2:81:4d:3f:23:70:3a:a7:10:ee:2d:f8:06:1f:86:93:a2:
         b7:a0:7e:55:6b:e1:f9:ec:41:5d:5a:8b:ee:30:22:4e:89:16:
         18:7a:4d:a1:0f:7f:a1:b5:27:fc:36:ec:a7:cc:47:b5:cc:f8:
         fd:cd:fc:6b:19:fb:bb:d2:79:e3:b2:e2:72:a8:1a:04:00:e7:
         13:53:a1:9a:4e:76:74:7c:28:b5:57:1e:23:7b:92:9a:ac:87:
         1e:04:5c:92:3a:04:cc:4a:78:84:c8:de:a8:55:53:6f:5f:31:
         99:dc:43:dc:5c:f1:36:da:85:4d:a7:23:6e:bf:05:94:98:c5:
         0f:e7:60:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:19:02 2025 by rpki-client