Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.mft
File:                     pWEUadKee9PIXTGAtycy6qt6-5Y.mft (raw, json)
Hash identifier:          lv22x5WPwYsT4HeFWE8M9nDFG2XJf2LfKaxfilOtE2E=
Subject key identifier:   B3:4D:8C:44:91:4D:77:A6:63:B1:49:41:2E:E4:D2:24:76:03:46:CC
Authority key identifier: A5:61:14:69:D2:9E:7B:D3:C8:5D:31:80:B7:27:32:EA:AB:7A:FB:96
Certificate issuer:       /CN=A9146BA1/serialNumber=A5611469D29E7BD3C85D3180B72732EAAB7AFB96
Certificate serial:       040E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWEUadKee9PIXTGAtycy6qt6-5Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.mft
Manifest number:          0408
Signing time:             Mon 03 Nov 2025 00:24:13 +0000
Manifest this update:     Mon 03 Nov 2025 00:24:12 +0000
Manifest next update:     Mon 10 Nov 2025 00:24:12 +0000
Files and hashes:         1: pWEUadKee9PIXTGAtycy6qt6-5Y.crl (hash: UnFBVSOxVm0i8iAFuyMivzgyqGv1D+YpYBDybvQpwnw=)
                          2: F67BB6E890AB11ECAB81252FC4F9AE02.roa (hash: 2seh0qxAc2BF9PqaOJpWiLsBwQeqToRGwKWIaD/PtHs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.crl
                          rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWEUadKee9PIXTGAtycy6qt6-5Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 00:24:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1038 (0x40e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146BA1, serialNumber=A5611469D29E7BD3C85D3180B72732EAAB7AFB96
        Validity
            Not Before: Nov  3 00:24:12 2025 GMT
            Not After : Nov 10 00:24:12 2025 GMT
        Subject: CN=6907f62d-4586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:67:bb:6d:a0:ea:88:1a:68:6a:34:bc:36:e0:
                    98:ee:da:20:75:21:f7:52:6f:b4:0b:f2:29:1a:9e:
                    6e:b1:79:07:21:17:93:39:08:f6:0e:be:53:9b:b5:
                    86:fb:61:b8:0e:a1:75:8d:4c:98:b6:27:05:50:86:
                    26:c0:27:b6:d6:74:9e:79:59:fb:5d:f3:2c:2d:69:
                    7e:99:b0:43:ca:18:6d:f3:f4:3c:24:60:68:f8:b6:
                    b8:4e:b9:6a:93:92:e0:26:ec:43:59:b4:8e:ad:78:
                    8e:de:d6:ea:96:0f:17:65:ac:e6:2a:c3:3c:62:61:
                    89:ec:46:fe:2e:1a:a9:45:f6:5f:c0:d8:7b:9b:ed:
                    02:9c:76:5b:de:7a:a0:a5:2b:42:87:82:ee:84:fb:
                    c8:33:0c:6c:ba:53:b8:e2:2e:e1:6f:23:ac:71:09:
                    62:40:50:21:25:5b:ff:eb:a5:f7:fb:e6:b3:d8:37:
                    51:cb:09:ce:2a:ec:b1:d0:31:b2:2f:ce:7c:2b:5e:
                    1c:e9:de:db:59:c2:2e:8e:98:27:4e:86:3c:a1:f3:
                    14:52:22:7f:c2:b0:85:78:ce:ae:55:d6:12:ef:ef:
                    f6:93:ab:d4:1b:e1:11:60:2c:ba:da:69:26:10:e4:
                    28:f8:44:5c:71:ab:cb:80:54:ad:9d:07:ce:a5:82:
                    59:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:4D:8C:44:91:4D:77:A6:63:B1:49:41:2E:E4:D2:24:76:03:46:CC
            X509v3 Authority Key Identifier:
                keyid:A5:61:14:69:D2:9E:7B:D3:C8:5D:31:80:B7:27:32:EA:AB:7A:FB:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWEUadKee9PIXTGAtycy6qt6-5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:1d:75:09:8c:56:4d:0b:92:07:4d:f0:99:c4:c9:4f:5a:38:
         c2:ce:c9:a7:c7:a6:59:27:53:94:cb:25:68:d0:ef:cf:69:66:
         66:ff:a6:b1:e3:51:26:c7:bb:de:f9:17:09:f3:b3:b1:b4:99:
         2c:fb:2e:05:27:ca:ff:6a:59:01:4b:eb:9a:c9:02:19:70:da:
         9c:56:61:55:1a:19:96:28:3f:61:29:e9:ec:89:69:fc:58:da:
         0d:46:88:7c:1f:23:84:c4:6c:7c:34:76:82:e1:e7:98:14:f8:
         d5:ec:83:7b:41:a1:53:c3:79:da:a4:eb:3c:03:4f:be:d9:97:
         3e:af:6b:dc:ea:47:4a:81:64:32:77:a1:f6:58:a3:05:ca:62:
         5f:61:08:d1:d9:cd:e1:b9:d0:0b:3a:60:96:1b:77:94:0a:57:
         04:e7:67:4e:8d:74:6e:28:ec:a8:46:13:63:ad:18:03:66:0b:
         4e:92:13:7d:9a:6a:d0:fc:09:14:ea:54:a5:27:40:6f:75:ee:
         92:39:07:6f:3c:9f:4a:7b:97:c4:e4:f9:84:8e:90:89:72:9a:
         17:82:76:78:14:04:cd:47:d3:d2:3f:39:eb:a0:ca:54:61:7f:
         a9:63:92:19:d3:16:c3:51:fc:cb:b6:1b:07:a2:f1:be:92:16:
         c5:99:81:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:18:14 2025 by rpki-client