Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131B38/2DF544547D0B11ECBA239433C4F9AE02/-lmybsZZeADDV53XBz-ktoWnwtI.mft
File:                     -lmybsZZeADDV53XBz-ktoWnwtI.mft (raw, json)
Hash identifier:          i6Xcz0mGvIxDE8qH2eggKYnyN+Tc/pH72vD1997D57Y=
Subject key identifier:   BE:EE:E5:C0:02:8B:33:04:47:8C:60:41:5C:73:1D:AD:86:34:80:C3
Authority key identifier: FA:59:B2:6E:C6:59:78:00:C3:57:9D:D7:07:3F:A4:B6:85:A7:C2:D2
Certificate issuer:       /CN=A9131B38/serialNumber=FA59B26EC6597800C3579DD7073FA4B685A7C2D2
Certificate serial:       043E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-lmybsZZeADDV53XBz-ktoWnwtI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131B38/2DF544547D0B11ECBA239433C4F9AE02/-lmybsZZeADDV53XBz-ktoWnwtI.mft
Manifest number:          0438
Signing time:             Mon 03 Nov 2025 00:13:34 +0000
Manifest this update:     Mon 03 Nov 2025 00:13:34 +0000
Manifest next update:     Mon 10 Nov 2025 00:13:34 +0000
Files and hashes:         1: -lmybsZZeADDV53XBz-ktoWnwtI.crl (hash: ViCcRbAyJNDyMVQ+j3L58F232HF4EJFmgF1NnDy05q8=)
                          2: 445C8236B69311EC9650A57CC4F9AE02.roa (hash: /iDRAphVdSgU2e36vGmGSufKHFaLvSp39p6b7uKMJro=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131B38/2DF544547D0B11ECBA239433C4F9AE02/-lmybsZZeADDV53XBz-ktoWnwtI.crl
                          rsync://rpki.apnic.net/member_repository/A9131B38/2DF544547D0B11ECBA239433C4F9AE02/-lmybsZZeADDV53XBz-ktoWnwtI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-lmybsZZeADDV53XBz-ktoWnwtI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 00:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1086 (0x43e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131B38, serialNumber=FA59B26EC6597800C3579DD7073FA4B685A7C2D2
        Validity
            Not Before: Nov  3 00:13:34 2025 GMT
            Not After : Nov 10 00:13:34 2025 GMT
        Subject: CN=6907f3ae-6ada
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:58:54:29:6e:3c:77:71:c0:20:70:47:81:67:
                    b7:08:d3:a4:1e:94:90:b2:42:60:aa:02:4d:29:8b:
                    8d:5b:5f:07:18:9d:06:26:8d:71:13:bc:f4:20:12:
                    ee:86:82:b5:35:7b:0f:d7:75:de:eb:01:2f:c1:2d:
                    c6:76:e9:43:ba:92:5f:4f:6d:4b:cb:b6:f5:ed:69:
                    f2:8a:49:0f:ba:1c:b1:08:99:2b:0c:95:49:8b:28:
                    c1:cc:ac:d4:6c:99:ec:09:4b:5b:42:b4:7e:22:d0:
                    dd:84:60:89:df:8f:86:56:11:ec:37:0a:17:00:59:
                    76:cf:d8:57:59:4d:2a:3f:db:78:01:6d:2c:9a:2b:
                    09:65:e3:43:75:14:ed:92:29:f4:7b:bf:5c:a9:bd:
                    20:c1:d7:17:de:89:42:49:55:de:84:9b:88:3e:ca:
                    29:17:b9:c4:77:5f:e5:7f:76:a8:86:6c:72:af:ac:
                    9e:b2:ff:ca:a3:99:ab:31:a8:46:a0:e5:82:ae:aa:
                    90:29:48:8b:ff:e1:e3:7e:d6:dd:b6:8c:fc:fe:e9:
                    41:e1:02:cc:84:c1:ef:0d:dd:5b:93:e3:77:0c:19:
                    e8:9a:f5:5b:8c:d9:04:10:f0:21:6f:99:93:0c:a7:
                    94:bc:d1:e0:b3:ad:63:20:11:89:1b:8b:24:00:5f:
                    10:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:EE:E5:C0:02:8B:33:04:47:8C:60:41:5C:73:1D:AD:86:34:80:C3
            X509v3 Authority Key Identifier:
                keyid:FA:59:B2:6E:C6:59:78:00:C3:57:9D:D7:07:3F:A4:B6:85:A7:C2:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131B38/2DF544547D0B11ECBA239433C4F9AE02/-lmybsZZeADDV53XBz-ktoWnwtI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-lmybsZZeADDV53XBz-ktoWnwtI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131B38/2DF544547D0B11ECBA239433C4F9AE02/-lmybsZZeADDV53XBz-ktoWnwtI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:bf:7a:54:71:d6:37:62:84:a1:b2:35:66:bf:fe:79:75:63:
         bb:eb:42:b9:32:a2:24:3a:f4:01:14:7f:bb:2f:07:6a:af:c9:
         20:a9:04:fc:6d:fd:a5:ef:9b:65:34:66:56:41:f7:04:7f:66:
         b4:dc:fc:e4:7d:44:ab:fd:dc:bb:34:56:65:46:82:c5:e8:ec:
         55:52:f4:d6:a4:d1:21:28:47:78:0b:32:f8:a0:a7:77:8b:e3:
         45:37:76:e0:59:3e:4b:a8:fc:88:99:72:43:57:26:13:3b:00:
         f9:93:0c:9d:c8:a2:ee:b8:ce:d1:e9:57:b9:3a:36:ad:20:8b:
         96:86:c3:e1:f2:00:6c:62:ec:23:ac:d4:9b:c5:cb:c4:08:6f:
         36:0c:61:37:b7:f2:9f:75:df:68:06:28:88:42:15:22:2d:e2:
         5f:5e:40:ad:e3:a1:bd:a7:00:b5:7d:cd:25:df:e7:85:4f:f1:
         5e:70:da:f4:c9:f0:8e:22:3c:13:dc:cd:64:8a:d7:2c:79:91:
         90:78:84:82:3e:16:a5:be:4b:e9:6b:25:04:eb:7b:3c:ce:74:
         e5:f4:82:14:a3:4d:92:10:47:85:a9:26:5f:13:60:53:bb:6a:
         58:f1:c8:2e:5d:15:ae:d7:6b:ce:bc:ca:85:ec:8a:68:4b:cc:
         29:79:6a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:14:42 2025 by rpki-client