Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.mft
File:                     uXgEM1AwWT1tlle8RdvRFLEpHSg.mft (raw, json)
Hash identifier:          k9u/tIrFIblIHQtp/uG1SmgVVtXGQM1KW3EAamOKIwI=
Subject key identifier:   82:8F:1D:C0:20:E9:74:2D:EA:1D:6E:E4:7B:BD:BA:24:2A:30:FA:1C
Authority key identifier: B9:78:04:33:50:30:59:3D:6D:96:57:BC:45:DB:D1:14:B1:29:1D:28
Certificate issuer:       /CN=A91E9310/serialNumber=B97804335030593D6D9657BC45DBD114B1291D28
Certificate serial:       04AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXgEM1AwWT1tlle8RdvRFLEpHSg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.mft
Manifest number:          04A5
Signing time:             Wed 05 Nov 2025 00:03:42 +0000
Manifest this update:     Wed 05 Nov 2025 00:03:42 +0000
Manifest next update:     Wed 12 Nov 2025 00:03:42 +0000
Files and hashes:         1: uXgEM1AwWT1tlle8RdvRFLEpHSg.crl (hash: GnLbA8Sdx4nI7aHubX4WzEZAu8i1yTipPrrxnGicelk=)
                          2: 785EB284773D11F0AB969921C4F9AE02.roa (hash: 8Zp/aagGSHH88DTb+DNr1X++0HtBH9A2tNVSmLSIRBM=)
                          3: E985185E773D11F0B023A932C4F9AE02.roa (hash: mISRfVX+s35IuBCQPh+4h139jbl1K2kLytqStI4mDZA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.crl
                          rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXgEM1AwWT1tlle8RdvRFLEpHSg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 00:03:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1197 (0x4ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9310, serialNumber=B97804335030593D6D9657BC45DBD114B1291D28
        Validity
            Not Before: Nov  5 00:03:42 2025 GMT
            Not After : Nov 12 00:03:42 2025 GMT
        Subject: CN=690a945e-cbca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6c:52:14:f1:c1:fd:8c:f5:b3:e9:9c:82:f7:
                    80:bd:81:60:12:26:4e:46:93:33:6f:ac:e6:6c:b4:
                    dd:7a:36:51:be:80:81:bd:6a:5a:6e:06:d4:5f:69:
                    9b:d3:af:43:7a:31:9f:3d:ef:53:ed:cf:ab:ab:6a:
                    fd:d8:4f:94:50:7d:95:93:5d:1b:61:43:ba:1a:78:
                    23:19:29:7c:a1:42:fe:6c:ee:25:28:7b:c3:ce:e2:
                    ce:50:03:40:d3:fa:93:47:e9:1d:89:64:f6:35:86:
                    2d:06:4f:69:c4:65:b2:b7:e7:3c:b7:8e:f9:a6:15:
                    d1:9b:40:1e:f3:b0:b7:15:2a:d3:f2:7f:34:ca:eb:
                    7c:79:9f:8c:0e:97:cb:d5:90:78:ae:a6:08:26:69:
                    32:9f:2c:7f:bc:3b:3c:f8:8a:af:2a:66:10:78:f0:
                    aa:0e:f8:97:19:a9:2a:09:9d:a6:66:ed:cf:c0:c0:
                    6e:a6:ff:03:7a:88:58:92:f0:83:cc:31:db:7f:26:
                    0e:42:7d:97:7f:fb:16:05:3f:ac:f7:94:72:19:d9:
                    7a:59:5a:d6:00:cf:c1:c8:60:af:90:3c:70:d5:08:
                    cf:72:dc:6d:94:99:f2:44:a6:c9:b9:18:00:54:c3:
                    7d:d1:1b:a4:09:46:2b:66:e2:d0:d0:5b:24:60:ea:
                    16:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:8F:1D:C0:20:E9:74:2D:EA:1D:6E:E4:7B:BD:BA:24:2A:30:FA:1C
            X509v3 Authority Key Identifier:
                keyid:B9:78:04:33:50:30:59:3D:6D:96:57:BC:45:DB:D1:14:B1:29:1D:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXgEM1AwWT1tlle8RdvRFLEpHSg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:72:eb:e6:b3:08:6d:7b:63:5c:45:fd:f0:75:48:ce:e0:42:
         ad:35:18:f2:b2:c8:e3:f0:ed:b4:43:60:ab:1d:31:e4:66:94:
         62:94:22:95:c2:61:4f:35:15:f0:03:ab:33:df:93:7c:c8:2d:
         94:de:e3:1f:90:a9:a9:d0:85:c6:a5:41:ce:13:41:8d:51:24:
         e3:00:d8:27:ae:b6:43:74:7d:03:38:46:77:c2:85:ea:1b:d6:
         ce:df:6b:12:14:85:45:76:80:f5:b7:d6:02:68:32:73:b3:97:
         df:d5:3f:98:4a:6c:6f:72:b2:9c:b6:5c:ca:78:3d:e4:6a:e1:
         ec:69:85:04:36:22:db:e6:1d:61:c8:8c:94:d1:e4:bf:9d:98:
         b7:a6:36:fb:70:e8:b6:4b:bb:1a:1b:04:16:ef:a5:af:7b:77:
         af:4d:55:3f:9c:68:67:42:cd:04:cf:32:6e:ff:3b:71:b0:20:
         df:8e:8b:55:f8:c8:8f:b0:f5:43:d6:e7:ad:99:74:4b:92:8f:
         32:7f:1b:31:c4:e8:89:d0:1e:49:bb:f9:7c:9b:b5:87:e3:f0:
         04:e2:a0:91:c1:bf:6d:24:97:71:f9:4e:ad:df:fe:dc:ea:cb:
         f5:02:2d:a2:78:37:a8:04:eb:d9:a9:2e:87:c2:16:ab:50:ef:
         a7:88:fd:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:50:37 2025 by rpki-client