Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft
File:                     uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft (raw, json)
Hash identifier:          r7Mkb1mwjG4aCARiApo8IMY8Oewo1e1kwJ1pFzOTXbs=
Subject key identifier:   F3:96:70:9A:6D:1A:B9:44:B3:A2:8C:E3:05:2A:C1:E3:77:6E:80:74
Authority key identifier: B8:8B:D5:D5:B9:B8:64:6D:8E:43:E6:4C:12:7B:84:81:A4:18:C6:36
Certificate issuer:       /CN=A915825D/serialNumber=B88BD5D5B9B8646D8E43E64C127B8481A418C636
Certificate serial:       BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft
Manifest number:          BB
Signing time:             Mon 03 Nov 2025 06:02:58 +0000
Manifest this update:     Mon 03 Nov 2025 06:02:57 +0000
Manifest next update:     Mon 10 Nov 2025 06:02:57 +0000
Files and hashes:         1: uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.crl (hash: wl7XRANcy204oefZXnGpT1FDZ/EaB5ngPValU/u31CE=)
                          2: B035E67615D311F09BAD2971C4F9AE02.roa (hash: m6K1ejQzgZZN/JIHhR+mHfBRgRA0KhwEs/admphjKvc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.crl
                          rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 06:02:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 191 (0xbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915825D, serialNumber=B88BD5D5B9B8646D8E43E64C127B8481A418C636
        Validity
            Not Before: Nov  3 06:02:57 2025 GMT
            Not After : Nov 10 06:02:57 2025 GMT
        Subject: CN=69084591-d99e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7a:6f:47:8d:84:b1:aa:3b:82:87:9c:30:ee:
                    23:91:8d:f5:c5:db:c1:a3:4f:e3:46:42:0a:9e:5b:
                    44:fd:12:29:ba:fc:ec:aa:c5:8e:56:12:4d:ce:62:
                    66:c9:3f:dc:81:42:a0:f8:7b:78:af:7b:e0:dd:87:
                    ea:98:54:3f:cd:1d:e6:c6:41:f8:24:f8:a0:af:90:
                    e3:06:38:86:96:1b:6d:40:9d:ac:8e:a5:a6:86:a7:
                    1b:1c:5a:88:04:9e:8f:f2:b5:66:44:49:35:84:b6:
                    e1:d7:ad:5e:0c:be:36:8b:17:f1:36:45:ae:fe:0f:
                    62:e9:a6:65:ff:12:95:cc:0b:30:03:54:25:29:a9:
                    96:f5:e6:5d:b1:14:f0:50:0f:db:f3:78:86:76:69:
                    0e:41:50:34:f0:ec:d6:1d:0d:5f:cb:9a:96:cf:9b:
                    cc:0b:d9:83:56:8c:45:af:fd:8a:45:f5:0f:9a:b8:
                    af:01:c6:47:01:e2:80:d3:70:ce:e7:db:ff:23:72:
                    ee:96:3a:02:c7:fd:58:dd:19:bd:06:e0:dc:c1:25:
                    a4:12:04:29:76:dc:2e:50:a6:1b:56:33:2f:22:54:
                    14:de:5e:e6:ab:5d:57:73:72:38:3e:fa:60:9b:ee:
                    89:49:76:aa:e1:75:cc:c3:ba:75:b4:76:fe:0d:ca:
                    6c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:96:70:9A:6D:1A:B9:44:B3:A2:8C:E3:05:2A:C1:E3:77:6E:80:74
            X509v3 Authority Key Identifier:
                keyid:B8:8B:D5:D5:B9:B8:64:6D:8E:43:E6:4C:12:7B:84:81:A4:18:C6:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:7d:54:02:b8:36:38:5a:34:ee:67:0d:ab:38:b2:5f:78:2e:
         a6:3a:d3:b6:70:8b:f4:18:04:b6:d4:bd:f5:57:e5:15:e3:8f:
         34:95:46:d7:53:8a:40:19:7b:69:c7:5c:f6:30:1f:68:85:2c:
         41:89:74:e2:4a:47:56:a9:18:08:d9:17:9b:3b:6c:a5:62:9d:
         00:63:f6:53:15:91:ab:78:b9:91:6d:70:2a:f2:f7:a6:b3:4c:
         45:c0:0b:d1:b7:10:27:c5:a8:c4:77:5e:be:52:25:16:98:46:
         82:8f:69:a5:25:00:21:9e:1b:3c:cb:4a:6e:87:31:cb:75:3b:
         5f:e5:54:4b:12:ae:d8:71:b5:de:fc:c9:06:ed:8d:a7:92:54:
         59:11:ea:65:b2:01:eb:f3:a8:51:fe:1d:b2:cb:5a:0e:67:e3:
         ea:e9:f6:80:88:54:2c:9f:64:4a:99:80:e1:0f:b3:d8:26:c6:
         aa:31:23:14:4f:76:d6:35:a1:cd:f2:aa:6f:58:ff:95:6c:69:
         45:c8:59:86:1c:9c:cb:db:d8:01:e1:29:eb:63:de:39:e9:aa:
         bb:4f:d7:b2:9e:9b:3d:f6:48:e9:0e:ff:75:2a:b5:e4:f7:b5:
         a6:cd:49:b4:31:d6:bd:5b:3f:b6:c1:5d:91:68:1c:15:d9:91:
         1c:f9:15:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:10:54 2025 by rpki-client