Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/4-uVS0RyHkEarwk4MQzBA-pMi7Q.mft
File:                     4-uVS0RyHkEarwk4MQzBA-pMi7Q.mft (raw, json)
Hash identifier:          shzirDquUoiIUp5Z23pBwI4PXK6AdK6WUI68u9tJvlg=
Subject key identifier:   55:6A:86:15:54:B2:92:BE:B5:5B:75:24:01:ED:6E:AC:28:63:BA:B9
Authority key identifier: E3:EB:95:4B:44:72:1E:41:1A:AF:09:38:31:0C:C1:03:EA:4C:8B:B4
Certificate issuer:       /CN=A9112DEF/serialNumber=E3EB954B44721E411AAF0938310CC103EA4C8BB4
Certificate serial:       03D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-uVS0RyHkEarwk4MQzBA-pMi7Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/4-uVS0RyHkEarwk4MQzBA-pMi7Q.mft
Manifest number:          03BC
Signing time:             Wed 29 Oct 2025 00:29:52 +0000
Manifest this update:     Wed 29 Oct 2025 00:29:52 +0000
Manifest next update:     Wed 05 Nov 2025 00:29:52 +0000
Files and hashes:         1: 4-uVS0RyHkEarwk4MQzBA-pMi7Q.crl (hash: duCIrje+nBqsiWlYXJA0z3s9UMr3C5PJ9UybVHn9/b4=)
                          2: 9D5E76267A5B11EFAB107D22C4F9AE02.roa (hash: 9HTI4YsG+MVKk2SPKB83AXiFVagV7EoMAnUgolUkaKs=)
                          3: AF8F74D07A5B11EFAD45A522C4F9AE02.roa (hash: oZf6EaGqkiYgycEdcpRUWL54DKGgCS87nNNS1RZh6OA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/4-uVS0RyHkEarwk4MQzBA-pMi7Q.crl
                          rsync://rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/4-uVS0RyHkEarwk4MQzBA-pMi7Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-uVS0RyHkEarwk4MQzBA-pMi7Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Nov 2025 00:29:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 978 (0x3d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112DEF, serialNumber=E3EB954B44721E411AAF0938310CC103EA4C8BB4
        Validity
            Not Before: Oct 29 00:29:52 2025 GMT
            Not After : Nov  5 00:29:52 2025 GMT
        Subject: CN=69016000-dcee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:09:0a:d4:3f:e2:aa:82:05:c9:c4:06:60:43:
                    f0:10:09:22:99:b9:06:cf:1d:d6:93:c6:cb:6c:d7:
                    10:37:d6:d0:c4:cd:a7:19:2a:7c:58:79:fc:52:41:
                    84:29:c4:21:6c:e8:5c:57:39:2c:bf:36:53:86:71:
                    9b:9f:d1:50:04:60:c4:c2:91:0a:f9:45:29:34:b2:
                    12:57:7e:0f:a5:4f:c0:de:b9:a1:ec:7e:90:32:10:
                    30:2e:1b:5c:28:7f:ad:e0:20:9c:fc:41:d9:4e:ae:
                    3c:a2:27:f9:fd:13:f6:63:d8:09:02:cf:34:d6:fd:
                    c2:fd:c6:18:ef:5d:1d:43:1e:a6:27:83:6a:f9:d6:
                    23:04:d7:7c:69:d8:fa:3f:53:37:04:b8:1d:f3:11:
                    12:27:41:7b:3a:66:2a:64:c5:da:74:4f:f8:09:40:
                    d9:d8:3c:a7:32:11:0a:3f:48:f6:91:de:3f:c8:ba:
                    69:61:39:9a:5d:94:20:4f:ce:85:68:0b:6b:ed:cd:
                    88:b2:a8:1e:d6:5b:e3:25:49:46:e8:f1:7c:31:fe:
                    fc:32:ca:53:c1:fa:e9:9e:5e:d8:85:14:02:7e:d2:
                    55:c2:ab:c5:6c:49:7c:e1:cd:1c:bf:85:45:90:9b:
                    14:77:e0:fd:2d:4b:13:f3:45:18:d3:c5:8e:83:fc:
                    60:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:6A:86:15:54:B2:92:BE:B5:5B:75:24:01:ED:6E:AC:28:63:BA:B9
            X509v3 Authority Key Identifier:
                keyid:E3:EB:95:4B:44:72:1E:41:1A:AF:09:38:31:0C:C1:03:EA:4C:8B:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/4-uVS0RyHkEarwk4MQzBA-pMi7Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-uVS0RyHkEarwk4MQzBA-pMi7Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/4-uVS0RyHkEarwk4MQzBA-pMi7Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:bf:f9:fc:40:1c:20:b7:31:b0:3a:d8:8c:08:30:62:ad:5e:
         9d:10:a7:62:3c:0c:f6:87:16:10:8a:dc:88:29:d3:0a:53:fe:
         d3:cb:97:9b:35:a1:cd:0f:e8:00:43:f3:d6:e2:08:74:bf:e3:
         8d:50:82:60:69:fc:b0:2e:90:a1:42:d3:5e:1c:53:12:c2:38:
         cd:cc:f1:94:13:89:f1:9c:4d:76:f9:8a:70:0e:69:58:cc:90:
         6b:5c:13:00:d3:6b:83:7d:ea:1a:e1:c8:fc:54:44:37:75:f4:
         89:ae:f1:48:21:40:16:08:56:ab:5b:d7:48:f9:7b:1e:34:c3:
         85:cd:c0:0e:be:ec:79:35:61:1c:bb:ed:8f:bf:18:50:78:ce:
         9d:f0:d4:5b:33:a2:cf:22:b2:f5:a5:eb:10:83:6c:77:f4:a7:
         d2:17:08:fa:f4:56:ea:39:fb:5f:c5:25:e6:c1:6c:dc:06:38:
         43:13:c3:65:74:e5:d4:3e:5e:bc:08:5a:ec:d6:79:99:c9:72:
         45:1b:e9:26:cb:14:1d:7b:95:10:78:6b:40:dd:ce:b6:97:95:
         c2:ce:49:e6:7c:17:15:0d:22:07:d6:54:8f:dd:9a:22:50:49:
         b9:44:94:13:94:d4:34:cf:47:2f:b6:20:e7:87:fd:33:fa:d5:
         98:c6:f8:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 22:10:30 2025 by rpki-client