Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9138C14/3E4C46305BC411EC96279354C4F9AE02/uw5VA3n-ooGogaZ0ebd8hgLQExQ.mft
File:                     uw5VA3n-ooGogaZ0ebd8hgLQExQ.mft (raw, json)
Hash identifier:          buFzcVzOFouJTMtRtBVCjm+NwQbbzo0WyUmIbzJulnU=
Subject key identifier:   44:95:03:76:A6:F0:1D:87:22:B2:BC:42:42:E7:92:99:38:AA:72:A0
Authority key identifier: BB:0E:55:03:79:FE:A2:81:A8:81:A6:74:79:B7:7C:86:02:D0:13:14
Certificate issuer:       /CN=A9138C14/serialNumber=BB0E550379FEA281A881A67479B77C8602D01314
Certificate serial:       0497
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uw5VA3n-ooGogaZ0ebd8hgLQExQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9138C14/3E4C46305BC411EC96279354C4F9AE02/uw5VA3n-ooGogaZ0ebd8hgLQExQ.mft
Manifest number:          048A
Signing time:             Mon 13 Oct 2025 02:02:18 +0000
Manifest this update:     Mon 13 Oct 2025 02:02:17 +0000
Manifest next update:     Mon 20 Oct 2025 02:02:17 +0000
Files and hashes:         1: uw5VA3n-ooGogaZ0ebd8hgLQExQ.crl (hash: R7O3HM2dwfbdeULWfs4Yt3MNnNvDglnswFi1I5FEp+I=)
                          2: 4911720A694F11ECB6F9B541C4F9AE02.roa (hash: 7k8YHn/nAtUVU3VLssB80YxDHO9IxRBfL7eh5zIgJsw=)
                          3: 53E4239C99F811ECA0663D19C4F9AE02.roa (hash: Y7h+ThuR3023tbfID3tJUzdvMuVp3Y56Ae3EjEbCXpU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9138C14/3E4C46305BC411EC96279354C4F9AE02/uw5VA3n-ooGogaZ0ebd8hgLQExQ.crl
                          rsync://rpki.apnic.net/member_repository/A9138C14/3E4C46305BC411EC96279354C4F9AE02/uw5VA3n-ooGogaZ0ebd8hgLQExQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uw5VA3n-ooGogaZ0ebd8hgLQExQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Oct 2025 02:02:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1175 (0x497)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9138C14, serialNumber=BB0E550379FEA281A881A67479B77C8602D01314
        Validity
            Not Before: Oct 13 02:02:17 2025 GMT
            Not After : Oct 20 02:02:17 2025 GMT
        Subject: CN=68ec5daa-7045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:57:2e:6c:1a:60:dd:6e:47:31:6c:d9:5c:df:
                    bf:7d:d3:99:d9:be:ea:9b:07:31:75:3e:f0:41:e1:
                    44:6e:ea:b3:d5:61:c9:17:3b:3a:4f:03:54:44:1c:
                    5e:4a:a9:00:9e:cd:39:0e:7c:d6:8d:27:5b:fb:c3:
                    b1:94:78:23:26:ef:40:0e:c7:53:ae:6a:20:e4:29:
                    fe:f3:6c:2f:56:eb:6c:ef:e0:37:1e:ea:a2:94:91:
                    da:57:3e:9e:ea:87:b6:5b:08:26:9b:93:f4:69:8b:
                    96:60:c6:03:52:17:32:93:b9:e8:04:ca:d8:de:ac:
                    d6:e9:70:44:c1:14:b8:85:f1:24:ba:f0:3d:8d:4e:
                    3d:69:53:e8:7d:68:53:fc:c7:4b:f2:d5:d8:fd:8d:
                    41:93:81:c4:b8:60:94:12:7e:3b:a0:b5:bb:98:5c:
                    bb:a2:2d:8b:a2:90:29:d5:b8:07:66:03:d1:c8:b8:
                    10:c7:4f:c7:40:8e:34:b8:77:17:34:46:f3:5d:ea:
                    af:e6:a4:ed:6a:c9:d5:a9:ac:b0:29:48:77:4f:dd:
                    21:28:62:a6:84:23:48:4e:3f:cd:72:01:41:05:45:
                    62:d1:1f:42:84:93:54:7e:74:e8:16:c0:d2:de:0f:
                    5c:e5:fb:61:bd:21:c9:29:b5:8f:81:34:29:08:88:
                    fa:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:95:03:76:A6:F0:1D:87:22:B2:BC:42:42:E7:92:99:38:AA:72:A0
            X509v3 Authority Key Identifier:
                keyid:BB:0E:55:03:79:FE:A2:81:A8:81:A6:74:79:B7:7C:86:02:D0:13:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9138C14/3E4C46305BC411EC96279354C4F9AE02/uw5VA3n-ooGogaZ0ebd8hgLQExQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uw5VA3n-ooGogaZ0ebd8hgLQExQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138C14/3E4C46305BC411EC96279354C4F9AE02/uw5VA3n-ooGogaZ0ebd8hgLQExQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:c7:d0:46:42:aa:96:18:10:48:58:60:49:e9:64:7d:e8:4a:
         66:2f:b7:50:2a:a5:5e:a0:b9:74:f4:77:26:02:97:34:7d:63:
         26:80:8c:93:e4:20:20:ef:72:d2:07:fe:56:4a:11:81:24:a3:
         09:11:e6:f8:83:d3:8c:7f:41:fe:a0:0c:9d:c1:9f:82:ea:2e:
         dc:32:8d:e4:34:04:62:4c:11:fd:94:b4:5f:81:f0:89:5f:f0:
         aa:ce:ad:a7:c0:ca:ae:40:20:f2:52:dc:2f:e4:4b:39:dc:21:
         55:f3:b4:9d:e2:13:94:db:9b:77:d9:03:cb:6c:e3:d7:c1:c7:
         bf:a8:ed:88:95:aa:dd:4d:26:d7:ff:3d:d1:5f:00:ec:f4:28:
         74:a5:61:1e:7f:8b:25:1d:c3:20:e5:35:d9:81:92:1d:19:d9:
         d0:4f:f3:ca:57:4d:2a:24:ea:a9:27:b2:ac:18:41:bc:c6:8d:
         60:a3:b1:e1:f2:8d:0d:ed:4f:84:6d:bb:fa:18:c2:80:da:1d:
         ce:67:d7:a6:55:fe:ef:2c:82:94:44:0d:76:61:b1:8e:63:bb:
         2e:7e:9a:f7:3d:82:2b:7f:b3:5c:87:c6:66:00:00:ba:8a:ff:
         e1:6b:23:16:89:03:fe:d1:d6:ab:34:d4:6e:39:aa:1d:03:51:
         ce:7b:25:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 14 16:44:05 2025 by rpki-client