Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C832/5B6180601E6111F0934F6F74C4F9AE02/7UHN-Ie33i9cIBvogU8ejfPQIB8.mft
File:                     7UHN-Ie33i9cIBvogU8ejfPQIB8.mft (raw, json)
Hash identifier:          /FqoRJj7nKhgzS+dwd3BJxSysYDQWbdkbk+bmwHswMQ=
Subject key identifier:   32:F8:CF:68:D9:8D:95:1C:01:71:FB:F8:83:DE:52:9A:49:E8:00:49
Authority key identifier: ED:41:CD:F8:87:B7:DE:2F:5C:20:1B:E8:81:4F:1E:8D:F3:D0:20:1F
Certificate issuer:       /CN=A916C832/serialNumber=ED41CDF887B7DE2F5C201BE8814F1E8DF3D0201F
Certificate serial:       66
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7UHN-Ie33i9cIBvogU8ejfPQIB8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C832/5B6180601E6111F0934F6F74C4F9AE02/7UHN-Ie33i9cIBvogU8ejfPQIB8.mft
Manifest number:          64
Signing time:             Mon 03 Nov 2025 07:01:59 +0000
Manifest this update:     Mon 03 Nov 2025 07:01:59 +0000
Manifest next update:     Mon 10 Nov 2025 07:01:59 +0000
Files and hashes:         1: 7UHN-Ie33i9cIBvogU8ejfPQIB8.crl (hash: BEwilK2190coseHZmE+ClKt+9gDfgOJQ5KrgYz42uT0=)
                          2: 9C40745A86F911F0AC1F5922C4F9AE02.roa (hash: iXo4kScDCGZMJR2A/670yFNX9nbH7Jj9Oj398RIkzRg=)
                          3: AA3FBE4A1E6111F093F53B75C4F9AE02.roa (hash: LSRr7TMpx9Qi1u09QfccXCZNggaDKCGxTg8r/GddSHQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C832/5B6180601E6111F0934F6F74C4F9AE02/7UHN-Ie33i9cIBvogU8ejfPQIB8.crl
                          rsync://rpki.apnic.net/member_repository/A916C832/5B6180601E6111F0934F6F74C4F9AE02/7UHN-Ie33i9cIBvogU8ejfPQIB8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7UHN-Ie33i9cIBvogU8ejfPQIB8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 07:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102 (0x66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C832, serialNumber=ED41CDF887B7DE2F5C201BE8814F1E8DF3D0201F
        Validity
            Not Before: Nov  3 07:01:59 2025 GMT
            Not After : Nov 10 07:01:59 2025 GMT
        Subject: CN=69085367-7419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4c:66:6b:57:91:6c:ae:55:ab:d9:88:a4:e2:
                    6a:6e:20:eb:8a:6b:9b:4b:97:27:a0:9a:d1:fe:c3:
                    40:d2:fd:d8:78:74:79:d4:a8:55:db:4a:fc:9f:97:
                    a3:16:19:50:81:3b:81:5a:c2:67:77:ac:da:f0:05:
                    ac:4c:ff:93:5c:8f:fd:85:ca:00:61:23:c2:28:b1:
                    3f:2a:dc:93:da:f9:b4:dd:77:28:b8:79:a0:bc:32:
                    69:b0:1e:94:97:8e:80:12:d9:ac:77:88:f7:52:b8:
                    fe:cb:79:2f:fe:39:05:5a:13:ae:c0:5f:ec:40:41:
                    1d:2c:a0:05:0a:a1:b1:b4:86:7f:2e:ec:23:ea:75:
                    50:5d:1c:ee:32:4b:24:56:98:61:af:62:de:34:79:
                    d6:65:dd:38:e7:ac:a7:f2:0a:ef:86:fe:17:6e:a3:
                    ac:57:55:8b:b2:83:07:48:47:d3:59:fa:b7:9d:91:
                    15:e6:9e:1e:cd:09:af:8b:79:49:95:35:53:1c:f6:
                    f4:7c:94:a2:ea:1e:f8:43:8e:46:63:f8:16:1a:a7:
                    04:d3:78:a3:a9:13:a4:39:d8:13:fe:5b:c3:e6:05:
                    03:a9:3d:fb:b9:cb:0b:f0:bf:e6:65:80:33:4f:e0:
                    28:b1:08:fb:5e:7f:5c:b3:72:74:e8:83:7d:dd:95:
                    73:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:F8:CF:68:D9:8D:95:1C:01:71:FB:F8:83:DE:52:9A:49:E8:00:49
            X509v3 Authority Key Identifier:
                keyid:ED:41:CD:F8:87:B7:DE:2F:5C:20:1B:E8:81:4F:1E:8D:F3:D0:20:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C832/5B6180601E6111F0934F6F74C4F9AE02/7UHN-Ie33i9cIBvogU8ejfPQIB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7UHN-Ie33i9cIBvogU8ejfPQIB8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C832/5B6180601E6111F0934F6F74C4F9AE02/7UHN-Ie33i9cIBvogU8ejfPQIB8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:76:b5:b4:d1:c0:4f:0b:47:42:38:4c:c9:c3:d5:0c:9b:24:
         16:61:41:ac:e3:af:f9:92:2a:70:30:f3:d1:d2:1f:a5:23:14:
         bc:dc:04:ba:3e:17:ef:8b:52:01:35:6a:cd:32:46:44:6a:f8:
         9b:84:dc:e1:a9:bd:31:66:01:c9:fe:e3:ee:35:ca:5f:98:9c:
         d7:83:22:0b:97:f6:89:71:75:85:bb:bd:15:9f:13:21:41:e8:
         ec:6f:ed:4c:54:32:34:86:cd:78:d2:03:0c:2f:d5:fa:2e:7a:
         52:5e:51:d8:b5:96:6e:d2:c4:13:cb:58:ca:8a:26:08:74:71:
         a5:c6:b6:5b:6a:b5:c5:00:ad:26:10:e6:d8:c2:47:f3:e4:ad:
         30:69:92:86:34:09:65:52:bc:d5:e3:89:ba:be:c9:a5:8f:d7:
         c7:16:82:58:d3:ff:cd:4b:03:c1:be:ae:81:22:3b:b3:43:29:
         06:ee:20:f9:0c:1c:b7:b0:d2:a1:df:cd:70:9f:1f:a8:bc:0c:
         46:11:f3:79:b8:1a:a6:0f:1f:d5:e9:74:01:bb:f6:aa:bd:17:
         31:c4:ec:f9:59:7a:29:c2:20:94:45:09:9b:bc:fb:da:74:96:
         18:79:1f:cf:89:b1:8f:d2:41:b2:c1:17:25:14:45:73:1d:1d:
         4a:c2:94:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 16:04:16 2025 by rpki-client