Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/CNuBW3MQ2H7vr81SzyYc0Vgp95A.mft
File:                     CNuBW3MQ2H7vr81SzyYc0Vgp95A.mft (raw, json)
Hash identifier:          E2GFB5rlwCx/5iB2tFstnmRKYv8Zw3ytRqrM65Nw87k=
Subject key identifier:   00:A1:1D:D2:19:9E:2E:8E:A1:43:E4:71:64:3F:11:27:67:BE:1B:16
Authority key identifier: 08:DB:81:5B:73:10:D8:7E:EF:AF:CD:52:CF:26:1C:D1:58:29:F7:90
Certificate issuer:       /CN=A913F600/serialNumber=08DB815B7310D87EEFAFCD52CF261CD15829F790
Certificate serial:       11C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNuBW3MQ2H7vr81SzyYc0Vgp95A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/CNuBW3MQ2H7vr81SzyYc0Vgp95A.mft
Manifest number:          11B0
Signing time:             Sun 02 Nov 2025 17:13:51 +0000
Manifest this update:     Sun 02 Nov 2025 17:13:50 +0000
Manifest next update:     Sun 09 Nov 2025 17:13:50 +0000
Files and hashes:         1: CNuBW3MQ2H7vr81SzyYc0Vgp95A.crl (hash: giu1rzfxz2S+Ca97x+TaDVHeY0d5hr8hLv25x1RSiWk=)
                          2: A18ED49C9A0D11EC92AD8580C4F9AE02.roa (hash: qJKad/+ZiMDaDiVaiAw8w9uuhueQYfaURJcRIR4BlLQ=)
                          3: 03960D4AFF6411EFB94AD726C4F9AE02.roa (hash: Dd+h++CV6wNZJ7QO0n2rdW4OE3i2iMOeGWoydYTSCjs=)
                          4: 86B7624062FE11EEB277647CC4F9AE02.roa (hash: +KT0Egyqjjf85ES0SDoa2VeTo6qX07zVXJ1wUoWuy48=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/CNuBW3MQ2H7vr81SzyYc0Vgp95A.crl
                          rsync://rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/CNuBW3MQ2H7vr81SzyYc0Vgp95A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNuBW3MQ2H7vr81SzyYc0Vgp95A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 17:13:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4548 (0x11c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F600, serialNumber=08DB815B7310D87EEFAFCD52CF261CD15829F790
        Validity
            Not Before: Nov  2 17:13:50 2025 GMT
            Not After : Nov  9 17:13:50 2025 GMT
        Subject: CN=6907914f-069b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:6d:c7:76:c1:4e:da:f9:c9:92:b2:c6:61:bf:
                    36:73:88:3e:11:46:3e:4c:df:16:73:96:56:44:0c:
                    67:13:2b:8d:c2:99:5d:8a:e6:db:0e:6a:1e:da:10:
                    08:0b:6b:42:5c:15:50:2a:bd:3a:b0:ff:f8:eb:9f:
                    81:25:76:1c:a5:13:3d:b1:59:79:39:16:34:9b:2d:
                    36:6c:27:9c:a6:90:0e:7c:57:75:3c:4e:7d:67:95:
                    f6:94:2a:55:f0:06:6b:97:9c:40:dd:18:81:c2:92:
                    c3:28:40:6a:0d:0d:1d:35:07:ee:1c:69:21:55:d6:
                    72:f0:d6:df:50:1b:a6:56:39:04:dc:21:e7:16:e2:
                    f3:a5:db:99:36:ec:2a:96:5b:a4:f0:eb:68:a1:74:
                    da:d4:3f:2d:25:d5:f8:6c:e4:a5:59:b3:fc:42:5d:
                    c9:cf:1b:d9:6f:42:3c:c4:ea:56:5e:c8:e4:35:18:
                    00:ab:0f:76:eb:29:ab:a7:4c:4b:2c:5f:ce:7e:ad:
                    07:fd:ee:e4:6e:54:65:ab:64:ac:e1:4d:d4:54:f5:
                    b6:51:45:dd:2c:cf:e7:0c:d2:a8:ac:78:95:f7:0d:
                    ec:ee:d4:25:52:8b:51:87:a7:ba:ea:28:f5:fd:b7:
                    86:03:82:01:92:38:db:90:b5:60:0e:db:8f:d4:b6:
                    4d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:A1:1D:D2:19:9E:2E:8E:A1:43:E4:71:64:3F:11:27:67:BE:1B:16
            X509v3 Authority Key Identifier:
                keyid:08:DB:81:5B:73:10:D8:7E:EF:AF:CD:52:CF:26:1C:D1:58:29:F7:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/CNuBW3MQ2H7vr81SzyYc0Vgp95A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNuBW3MQ2H7vr81SzyYc0Vgp95A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/CNuBW3MQ2H7vr81SzyYc0Vgp95A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:89:f9:f9:5a:1e:a7:50:8a:dd:e1:5d:13:0e:70:eb:2d:c4:
         e5:a3:fb:0f:fe:22:a7:c9:ca:d1:2d:b3:46:51:79:ef:fd:1a:
         74:59:6a:cc:31:66:21:7b:d3:b3:03:19:e1:05:33:ca:51:c0:
         10:9b:64:9f:68:29:d4:2f:a6:03:8f:7f:a0:f1:c8:cc:d1:d8:
         39:06:15:1e:d9:3d:96:3d:54:23:ae:a2:2d:89:91:bc:82:ab:
         8a:1a:ca:42:fa:8b:f6:85:de:5b:24:2d:cb:88:56:be:c9:69:
         eb:73:b0:3d:71:88:d9:a3:9d:7e:fd:ee:a8:91:57:59:a1:ae:
         f4:06:1a:e1:50:1f:70:90:69:3d:65:bb:89:a0:ec:c5:09:58:
         96:b1:f6:6c:b6:38:58:a9:5a:27:44:63:61:57:46:c9:04:7d:
         95:0c:23:9b:c9:33:63:47:07:78:a3:c1:3f:91:60:9f:b1:89:
         b0:dc:fa:74:a7:bf:36:c9:94:aa:4c:ab:d8:78:a1:a4:16:3e:
         37:73:17:aa:54:18:fe:d0:3a:d7:74:d4:2b:ab:d4:b7:b1:a2:
         14:d7:13:b7:06:46:a7:e6:ee:42:de:f7:28:32:77:9d:f1:cb:
         dd:f6:99:bb:3f:c1:5a:45:f9:8f:f9:4a:d4:ec:f8:fd:8f:12:
         80:d2:c2:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:11:12 2025 by rpki-client