Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft
File:                     Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft (raw, json)
Hash identifier:          ERqYw5+npGJ75ZH6m6RYW+H4WKZJCnpVfkJG1fvtVeg=
Subject key identifier:   6A:B6:76:70:BA:5E:27:F6:B4:13:2D:F2:8F:41:FB:59:26:17:4F:AB
Authority key identifier: 16:ED:C8:95:6B:C4:13:C9:C5:02:19:28:B0:3B:C8:50:FC:7E:72:47
Certificate issuer:       /CN=A916223F/serialNumber=16EDC8956BC413C9C5021928B03BC850FC7E7247
Certificate serial:       0CD4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fu3IlWvEE8nFAhkosDvIUPx-ckc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft
Manifest number:          0CCD
Signing time:             Sun 02 Nov 2025 18:09:31 +0000
Manifest this update:     Sun 02 Nov 2025 18:09:30 +0000
Manifest next update:     Sun 09 Nov 2025 18:09:30 +0000
Files and hashes:         1: Fu3IlWvEE8nFAhkosDvIUPx-ckc.crl (hash: 3AaL2v2C+YS+ySycestYgJUtpypQrCsExKJzWcoEvZE=)
                          2: 80392340F95D11E9ABF14387C4F9AE02.roa (hash: HyFNgnjZWsveyr1t+EGS0rR5D+l88ZMNMytH+WMJ+18=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.crl
                          rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fu3IlWvEE8nFAhkosDvIUPx-ckc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 18:09:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3284 (0xcd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916223F, serialNumber=16EDC8956BC413C9C5021928B03BC850FC7E7247
        Validity
            Not Before: Nov  2 18:09:30 2025 GMT
            Not After : Nov  9 18:09:30 2025 GMT
        Subject: CN=69079e5b-9f4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2e:d1:74:e4:7e:28:49:53:14:db:0d:4a:70:
                    34:29:b3:17:b5:46:67:b3:53:7c:1b:7e:c7:7d:3b:
                    48:58:5f:6e:87:cd:20:91:5b:4d:82:40:da:b3:c2:
                    6b:40:c8:cd:d5:11:f4:89:01:12:cb:81:90:f9:87:
                    d0:a5:fc:58:a6:de:7a:f4:d3:07:97:a7:1a:86:54:
                    22:9a:44:22:34:a2:b9:26:a9:2d:87:34:2c:54:67:
                    2e:70:5e:8c:68:79:9d:92:16:9f:89:06:7d:7e:c6:
                    89:51:f7:58:dd:65:05:86:69:6b:c1:32:a8:18:3c:
                    63:11:f2:9f:35:90:b5:ab:7e:1b:d3:0e:6d:4d:20:
                    0f:64:69:21:63:7d:3c:77:da:7b:3f:5c:b5:5a:a8:
                    7b:23:82:a2:99:07:78:c3:94:4d:0a:89:bd:74:6c:
                    c8:b4:0e:41:61:24:c8:15:b9:68:3d:1d:e2:d9:48:
                    f6:08:aa:a5:f7:6b:98:16:38:c5:da:5c:86:44:d3:
                    43:de:4b:5d:7a:58:08:20:8a:fc:97:06:52:ed:b0:
                    8e:82:4c:e3:f8:df:e7:2f:81:28:23:da:75:36:8d:
                    ec:11:4e:09:e4:02:d0:77:e5:fd:b1:75:be:0b:43:
                    a6:84:d9:ff:72:36:b4:ac:66:f2:ef:c1:9f:82:84:
                    98:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:B6:76:70:BA:5E:27:F6:B4:13:2D:F2:8F:41:FB:59:26:17:4F:AB
            X509v3 Authority Key Identifier:
                keyid:16:ED:C8:95:6B:C4:13:C9:C5:02:19:28:B0:3B:C8:50:FC:7E:72:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fu3IlWvEE8nFAhkosDvIUPx-ckc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:d4:f0:3d:6c:be:21:e4:10:4d:20:23:de:da:3f:e7:f6:8d:
         00:93:08:92:f6:39:e2:59:49:8d:80:42:c8:d0:52:19:cb:00:
         bf:84:10:c5:50:76:4b:42:61:26:6a:da:8d:74:cd:ec:01:6d:
         61:d6:07:b2:a0:21:16:bf:88:5e:4f:4d:15:30:5f:bb:9a:c0:
         ed:98:23:4a:c5:ad:e5:d8:44:cc:42:4a:77:33:12:f1:e6:f2:
         09:4c:e0:f1:10:61:77:0b:52:36:a5:ec:7b:dc:23:8c:a3:5a:
         54:81:11:78:68:ad:e8:4a:b8:62:69:cd:26:b8:07:64:5c:1d:
         4e:3d:44:11:76:ce:c5:48:f9:87:fd:6c:bf:c5:b0:db:a4:47:
         06:bd:e4:02:5d:ff:16:6b:13:97:1e:53:d7:9a:1b:d2:7e:b9:
         7e:44:57:17:39:4d:1a:01:88:6f:a3:86:7a:f7:65:29:ff:cc:
         eb:ba:86:0f:0d:78:9c:6b:e4:62:a3:cc:97:95:0f:e7:74:e6:
         21:f1:35:ed:56:33:b9:2c:05:b8:1b:e3:67:b9:7d:b4:d8:f8:
         f0:7d:e8:ab:dd:0f:bb:eb:cd:12:a6:58:f5:d8:d0:af:64:cd:
         08:bd:f0:c8:79:76:3c:25:c3:10:0a:e2:60:6b:47:3c:57:5a:
         f1:cb:35:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 01:10:24 2025 by rpki-client