Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9159B6F/348AA908D09C11EE80AB8D7EC4F9AE02/vWukX_AnbCxgSgM7B82k5MDfFdc.mft
File:                     vWukX_AnbCxgSgM7B82k5MDfFdc.mft (raw, json)
Hash identifier:          y7gXYAPQHZaihI2vcNtMRrXw0QSRZ8bxbeDvTXtq7NU=
Subject key identifier:   D8:80:D7:5C:1C:4D:DA:EA:42:DD:EF:69:49:C1:D5:F8:C5:78:B6:6C
Authority key identifier: BD:6B:A4:5F:F0:27:6C:2C:60:4A:03:3B:07:CD:A4:E4:C0:DF:15:D7
Certificate issuer:       /CN=A9159B6F/serialNumber=BD6BA45FF0276C2C604A033B07CDA4E4C0DF15D7
Certificate serial:       013E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWukX_AnbCxgSgM7B82k5MDfFdc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9159B6F/348AA908D09C11EE80AB8D7EC4F9AE02/vWukX_AnbCxgSgM7B82k5MDfFdc.mft
Manifest number:          013C
Signing time:             Mon 03 Nov 2025 04:25:21 +0000
Manifest this update:     Mon 03 Nov 2025 04:25:20 +0000
Manifest next update:     Mon 10 Nov 2025 04:25:20 +0000
Files and hashes:         1: vWukX_AnbCxgSgM7B82k5MDfFdc.crl (hash: D8OkJA9GvKdEsXZmR1l8QG8/5EUmDZW5HvXSkr9DIvQ=)
                          2: F56322CCD09C11EE94431F80C4F9AE02.roa (hash: VBkLC1Ug6+V5ASssgia7rSJZ2O30hfTWr/78uTsbXl8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9159B6F/348AA908D09C11EE80AB8D7EC4F9AE02/vWukX_AnbCxgSgM7B82k5MDfFdc.crl
                          rsync://rpki.apnic.net/member_repository/A9159B6F/348AA908D09C11EE80AB8D7EC4F9AE02/vWukX_AnbCxgSgM7B82k5MDfFdc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWukX_AnbCxgSgM7B82k5MDfFdc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 04:25:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 318 (0x13e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9159B6F, serialNumber=BD6BA45FF0276C2C604A033B07CDA4E4C0DF15D7
        Validity
            Not Before: Nov  3 04:25:20 2025 GMT
            Not After : Nov 10 04:25:20 2025 GMT
        Subject: CN=69082eb1-0cd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4a:5f:7b:c7:1f:32:e2:53:93:b5:4b:9f:8a:
                    fe:50:cd:ac:be:9f:45:3e:5b:8b:e4:3a:da:2a:72:
                    57:91:74:b4:2e:9c:84:ed:8f:f2:3e:fd:99:6c:66:
                    c4:13:2a:15:d7:26:ab:56:76:c2:14:cc:03:af:3f:
                    c7:5b:1c:2e:ef:61:b5:4c:3a:e1:67:cd:2b:ea:d4:
                    e7:9b:aa:29:d9:15:84:49:74:b4:2d:dc:a5:36:a7:
                    1a:96:85:df:9a:fe:9f:e8:8e:47:71:ba:40:7d:3b:
                    20:f9:71:44:7a:f1:0d:eb:69:e1:44:17:ed:29:6e:
                    04:0e:0e:6e:a7:66:ab:c2:e4:bb:2a:f7:a0:b6:01:
                    07:0d:cf:df:e1:c1:e9:b6:93:1b:61:54:18:b8:ae:
                    b2:3c:12:64:83:b1:e9:e4:7b:8e:8a:3b:c4:87:c3:
                    3b:65:96:ff:4b:85:4e:cf:6c:07:ed:48:cb:35:c0:
                    81:9b:23:ea:f3:e2:1d:ab:5b:f1:c1:b9:6a:45:bc:
                    c0:5f:1a:c0:81:13:c2:a2:cc:b6:16:77:d9:f1:64:
                    0a:f3:8a:7a:a0:6f:6f:13:4c:12:38:a5:86:05:e3:
                    0a:c3:5f:cb:fd:6f:9c:2d:58:52:80:d5:b8:7d:ec:
                    c3:c0:2f:18:0f:c8:0c:b8:91:61:bd:01:a7:2f:0f:
                    e4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:80:D7:5C:1C:4D:DA:EA:42:DD:EF:69:49:C1:D5:F8:C5:78:B6:6C
            X509v3 Authority Key Identifier:
                keyid:BD:6B:A4:5F:F0:27:6C:2C:60:4A:03:3B:07:CD:A4:E4:C0:DF:15:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9159B6F/348AA908D09C11EE80AB8D7EC4F9AE02/vWukX_AnbCxgSgM7B82k5MDfFdc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWukX_AnbCxgSgM7B82k5MDfFdc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159B6F/348AA908D09C11EE80AB8D7EC4F9AE02/vWukX_AnbCxgSgM7B82k5MDfFdc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:c1:b8:72:19:9c:91:a8:56:c2:15:71:d1:14:b0:ce:c3:63:
         9d:d3:32:2f:4c:ea:0f:94:9d:ae:60:f4:73:17:e3:dd:9a:4c:
         85:32:33:e6:5a:0c:24:fd:c2:50:04:2c:3f:ff:73:ba:7e:23:
         01:97:3b:d3:41:0a:b6:cb:5d:5e:43:8c:7d:8f:f4:46:13:13:
         86:2f:e1:6a:95:a4:fe:9d:ff:35:ac:24:dc:41:3a:48:80:3c:
         58:bc:5e:7f:09:f7:87:5d:a4:a8:a1:93:5f:89:b9:00:df:eb:
         6f:55:22:c9:3d:66:bc:5f:32:8f:9a:2f:7c:95:bf:7d:60:39:
         32:0f:ec:21:9b:71:a1:17:c7:e2:a3:90:35:6f:af:f0:2f:c1:
         ee:c1:d9:8e:4c:b6:55:6f:19:61:5b:7f:c6:e3:f1:4d:38:84:
         d4:16:31:12:20:c0:4b:40:14:6a:c6:ce:6d:90:55:bb:0b:36:
         08:03:68:39:15:4e:18:f7:33:c9:a4:9a:4e:31:e8:1d:46:1d:
         66:fe:e0:d1:79:c6:ea:50:91:5d:96:69:61:83:4e:4d:3c:8a:
         4e:c1:6a:30:d6:52:d8:d0:14:6e:d4:6d:bf:fc:a3:cd:7d:03:
         f9:45:8c:5d:4e:41:2d:af:e1:66:2b:8c:c6:f4:db:f4:96:bd:
         56:33:cc:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:10:19 2025 by rpki-client