Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft
File:                     uu94943Hy_m3MScKqxBp9eNDPLs.mft (raw, json)
Hash identifier:          3rK4gcyP4sKcGSF9AZ1GkSWtoDzbRiKnJyyIgds0iIM=
Subject key identifier:   92:1C:A9:D6:3A:CC:70:F6:81:F0:24:C5:9C:97:CF:F4:F6:CA:10:F0
Authority key identifier: BA:EF:78:F7:8D:C7:CB:F9:B7:31:27:0A:AB:10:69:F5:E3:43:3C:BB
Certificate issuer:       /CN=A91B61A7/serialNumber=BAEF78F78DC7CBF9B731270AAB1069F5E3433CBB
Certificate serial:       F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uu94943Hy_m3MScKqxBp9eNDPLs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft
Manifest number:          EC
Signing time:             Wed 05 Nov 2025 05:35:52 +0000
Manifest this update:     Wed 05 Nov 2025 05:35:52 +0000
Manifest next update:     Wed 12 Nov 2025 05:35:52 +0000
Files and hashes:         1: uu94943Hy_m3MScKqxBp9eNDPLs.crl (hash: EueGBDXu9mMXZCeTWuR7XDbxx/fflrGBF4HYv/OHcc0=)
                          2: 0FB823502CB011F0A2157E15C4F9AE02.roa (hash: SNFqVWFy/zXpL+IO4VqM1BTZFXQSMMWQWnpzgvn2Vas=)
                          3: 286AB0F22CB011F084E4A915C4F9AE02.roa (hash: ZhBtT8PPZLIx6KpVofQIdCfnHMsDO/G3FnbenkGUmNY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.crl
                          rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uu94943Hy_m3MScKqxBp9eNDPLs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 05:35:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 244 (0xf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B61A7, serialNumber=BAEF78F78DC7CBF9B731270AAB1069F5E3433CBB
        Validity
            Not Before: Nov  5 05:35:52 2025 GMT
            Not After : Nov 12 05:35:52 2025 GMT
        Subject: CN=690ae238-b61a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:00:47:4b:bd:f0:82:e1:76:a6:b9:8a:d1:32:
                    4c:7b:9a:65:c1:4c:64:54:9f:8f:ac:2d:57:1b:5d:
                    eb:7d:a3:38:38:c1:72:15:42:9e:55:30:f9:48:ed:
                    47:06:50:04:07:6a:26:03:e0:c7:25:f3:31:b5:48:
                    fe:5a:9f:ae:c0:19:df:cc:7c:55:54:50:25:42:69:
                    55:3f:3d:51:0b:e8:fc:56:df:f7:82:fd:63:4c:1a:
                    8b:05:7c:8b:fa:fd:eb:ef:37:4a:41:d1:9d:19:37:
                    f6:1f:36:31:af:51:0e:b9:cb:7c:c0:9b:c7:25:e2:
                    a8:11:91:78:10:60:e0:63:d5:33:f4:fd:0c:1e:78:
                    c0:5d:1d:e7:c8:72:08:59:7b:83:98:8a:44:c0:ca:
                    6d:4b:21:4e:3e:66:33:af:66:8e:da:17:b1:02:ce:
                    57:ed:8d:18:f9:94:7f:6f:00:83:b4:93:2e:e2:7f:
                    11:a6:20:97:b8:96:f3:3e:49:2a:6d:f6:12:03:4d:
                    f3:21:61:d3:2f:3f:eb:68:0b:d2:ca:11:92:39:d9:
                    7b:8a:45:13:90:b1:27:d6:0d:22:6d:12:a7:e6:33:
                    f5:5b:46:b0:2c:94:8e:e3:3f:a6:ee:8b:93:1a:e5:
                    9c:80:97:24:37:be:dd:59:7a:19:00:81:c7:7b:1f:
                    52:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:1C:A9:D6:3A:CC:70:F6:81:F0:24:C5:9C:97:CF:F4:F6:CA:10:F0
            X509v3 Authority Key Identifier:
                keyid:BA:EF:78:F7:8D:C7:CB:F9:B7:31:27:0A:AB:10:69:F5:E3:43:3C:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uu94943Hy_m3MScKqxBp9eNDPLs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:d6:99:d4:89:fd:93:f1:0b:e9:bf:68:fb:8f:74:f1:c1:42:
         4b:39:7e:da:f5:96:85:5d:c8:45:50:b2:14:a4:d3:17:54:be:
         8d:91:e6:ee:30:65:61:35:64:70:50:59:7f:23:a5:49:3f:cf:
         7c:8f:df:3d:34:06:46:3a:5b:be:bb:c6:67:6f:ae:cb:ab:20:
         d0:ca:b7:d1:8e:a6:15:8a:e2:fd:41:16:98:2b:bd:bc:88:4a:
         1b:b8:cc:a2:97:2e:3b:68:3e:2c:1c:c0:5d:a1:f0:00:83:d7:
         a4:3f:d3:bb:22:56:ce:e0:23:2d:cd:8f:f5:a3:48:86:d8:a5:
         35:f2:f0:4e:96:1e:5c:3c:ee:a6:d1:fc:9b:dd:42:06:1d:1d:
         c6:6b:7b:32:5a:31:0d:29:96:04:26:c1:5a:ed:02:dd:f2:2d:
         94:e0:82:b7:24:3f:51:55:8b:c4:05:27:c3:7d:f4:0b:7b:0f:
         ee:4e:3b:d7:f9:f7:c1:5f:70:97:c1:b5:f5:75:57:03:7c:a1:
         44:25:f3:4f:f1:bd:ca:34:11:a5:53:2e:a1:57:b1:23:fc:0a:
         55:91:0a:a2:0b:49:f3:0b:55:ab:a6:6a:59:f4:a5:96:c8:0d:
         38:fe:d1:7f:13:17:b8:4a:4f:ee:ba:85:61:ff:95:4d:86:a9:
         5c:e1:9c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:33:01 2025 by rpki-client