Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft
File:                     u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft (raw, json)
Hash identifier:          T/fs6OBCEvpddaywzSa+EMR2GV1EigCE7XfyJgEWlOM=
Subject key identifier:   E3:26:B7:EA:D9:B5:5D:C5:BF:DB:81:8C:3D:21:78:B7:B6:36:C9:48
Authority key identifier: BB:EC:21:0E:75:29:FD:39:7F:13:38:FF:AC:1D:DD:78:3C:0F:AA:32
Certificate issuer:       /CN=A91A2265/serialNumber=BBEC210E7529FD397F1338FFAC1DDD783C0FAA32
Certificate serial:       019A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft
Manifest number:          0192
Signing time:             Mon 03 Nov 2025 03:26:17 +0000
Manifest this update:     Mon 03 Nov 2025 03:26:17 +0000
Manifest next update:     Mon 10 Nov 2025 03:26:17 +0000
Files and hashes:         1: u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl (hash: PGtvJyku2QjGQ04lgFgFqBjO0nUqKnxu7tXz+Or7vmU=)
                          2: 9F5C80A8F3EB11EFBAF62455C4F9AE02.roa (hash: ocKjYHSoFFeanr7nSrSoG6NZ1NK1GEX/tAPr3f25J2Y=)
                          3: FCD162AE508511EEBA4C0E2BC4F9AE02.roa (hash: 1HOv65dUJu9o7mPWP7pn54wayqG8zRXC99rSkS0sL90=)
                          4: FD57EA90508511EEBA4C0E2BC4F9AE02.roa (hash: DDHsuGR9D/9rz8HARaoFh0MSMFheoZInmf9Cc8/ZZtU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl
                          rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 03:26:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 410 (0x19a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A2265, serialNumber=BBEC210E7529FD397F1338FFAC1DDD783C0FAA32
        Validity
            Not Before: Nov  3 03:26:17 2025 GMT
            Not After : Nov 10 03:26:17 2025 GMT
        Subject: CN=690820d9-48af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:06:50:2b:12:4b:7e:f5:29:3a:c4:25:e2:59:
                    20:69:e8:93:cc:b1:ad:2c:a1:98:72:1b:d5:be:c0:
                    9a:45:29:cc:1a:d2:09:ce:d7:9b:70:18:7b:bc:b2:
                    0d:6a:b4:37:76:31:20:b4:17:7e:ad:84:54:cb:77:
                    93:12:fb:5a:51:da:b8:6b:b4:60:0a:50:d5:fa:3e:
                    2e:e0:20:13:83:c9:25:77:a8:95:0e:ce:f5:60:8f:
                    71:8a:de:c4:26:f8:a0:37:cb:35:f1:32:92:61:60:
                    80:61:7e:13:d8:3c:f0:58:c7:f0:a9:3b:d6:55:06:
                    36:7b:d0:0a:bb:11:de:30:c1:40:92:79:0d:a2:ff:
                    5b:fb:63:28:57:0c:15:6b:50:bb:4c:40:64:c5:5f:
                    88:37:64:34:ae:8e:8b:ce:7f:06:b3:8b:19:6d:2a:
                    46:83:3a:96:10:89:6d:1c:6a:c0:a5:5c:e5:40:1e:
                    8f:99:40:10:20:ae:81:bb:8f:65:c1:21:a3:0b:c9:
                    62:26:3d:fd:98:04:ba:41:86:0a:5c:06:80:e2:85:
                    cf:dd:18:77:e4:12:1c:db:17:83:65:9e:90:59:18:
                    a8:b3:7d:5d:5f:7b:f9:e2:80:97:98:d5:95:14:f8:
                    d1:b7:da:96:fc:b6:e9:92:97:63:8c:f9:46:7b:fa:
                    87:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:26:B7:EA:D9:B5:5D:C5:BF:DB:81:8C:3D:21:78:B7:B6:36:C9:48
            X509v3 Authority Key Identifier:
                keyid:BB:EC:21:0E:75:29:FD:39:7F:13:38:FF:AC:1D:DD:78:3C:0F:AA:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:60:de:23:0d:1c:2c:ea:97:dd:38:34:97:96:89:b4:9f:ab:
         3e:94:89:e5:7e:70:77:1c:f2:a4:8f:7a:05:8a:61:40:03:3f:
         bd:87:5a:39:44:f3:be:c8:3b:1c:a8:79:74:78:07:77:c2:40:
         32:88:06:de:cc:ad:09:7b:81:b0:bb:af:de:81:13:17:b5:58:
         96:48:f3:6d:fe:9c:aa:5d:7d:1e:ca:7a:88:b7:94:85:e6:ed:
         a8:80:0c:b9:a3:39:38:54:47:fc:6c:99:9e:2e:7e:ef:be:4c:
         0b:90:51:ba:88:57:95:57:2f:d1:14:3b:c9:e0:d6:95:17:0b:
         c9:bf:75:10:c5:62:27:cc:ab:42:05:d0:db:71:8b:73:d5:3d:
         87:c8:b6:0b:b7:83:d3:ec:f0:bc:2f:3a:cf:fd:ff:87:eb:38:
         cc:12:f0:80:2c:ce:cc:c9:81:d5:87:79:36:4a:d4:d1:35:50:
         a8:a3:0a:ff:96:bc:d6:89:ba:1e:94:e7:78:b0:97:c3:c2:46:
         44:33:49:b8:e6:0a:50:79:a1:86:d8:33:1f:f0:e6:20:92:53:
         17:72:51:9f:2f:8c:7f:f9:20:50:b8:dc:e6:50:b4:4c:7d:c9:
         0e:9e:fd:27:9d:f4:20:70:85:99:f8:41:bf:33:24:b4:15:42:
         f3:ac:24:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 08:13:53 2025 by rpki-client