Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/480mJgfLdDTJiY967Pbnw2o09pM.mft
File:                     480mJgfLdDTJiY967Pbnw2o09pM.mft (raw, json)
Hash identifier:          V+e2WvzE5PnWsHs3s6//93ZmGq/omhyZGS0j6JzygSY=
Subject key identifier:   79:98:34:AA:AB:50:6F:28:F8:2E:56:7A:53:51:34:AC:70:4F:38:38
Authority key identifier: E3:CD:26:26:07:CB:74:34:C9:89:8F:7A:EC:F6:E7:C3:6A:34:F6:93
Certificate issuer:       /CN=A9183B33/serialNumber=E3CD262607CB7434C9898F7AECF6E7C36A34F693
Certificate serial:       05B7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/480mJgfLdDTJiY967Pbnw2o09pM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/480mJgfLdDTJiY967Pbnw2o09pM.mft
Manifest number:          05B0
Signing time:             Thu 06 Nov 2025 20:10:22 +0000
Manifest this update:     Thu 06 Nov 2025 20:10:22 +0000
Manifest next update:     Thu 13 Nov 2025 20:10:21 +0000
Files and hashes:         1: 480mJgfLdDTJiY967Pbnw2o09pM.crl (hash: 0zhIE2WrcQzt1fo9HeQmrANCHFDZ6z5c+6eyMTKf3fc=)
                          2: 0F106C42E9BF11EB9287F045C4F9AE02.roa (hash: RvNzl03JDVUp48sMZXLXZA1zzsN0lAMQGmHnXdeMUAw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/480mJgfLdDTJiY967Pbnw2o09pM.crl
                          rsync://rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/480mJgfLdDTJiY967Pbnw2o09pM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/480mJgfLdDTJiY967Pbnw2o09pM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Nov 2025 20:10:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1463 (0x5b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183B33, serialNumber=E3CD262607CB7434C9898F7AECF6E7C36A34F693
        Validity
            Not Before: Nov  6 20:10:22 2025 GMT
            Not After : Nov 13 20:10:21 2025 GMT
        Subject: CN=690d00ae-1ea8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2a:98:9e:62:da:f1:5c:3c:1e:89:60:44:8e:
                    b6:10:61:8c:2e:ac:68:ce:a4:7c:f3:84:b3:d5:c1:
                    e8:33:32:ea:5c:3c:d1:8e:70:10:7b:e6:82:41:a7:
                    c6:24:bb:87:ac:78:21:54:e4:78:17:b4:5b:b2:a2:
                    5b:88:08:d0:2e:14:06:6f:cb:61:8d:59:63:55:4f:
                    7f:69:0c:3d:c3:56:ed:53:c9:6a:aa:6e:ac:c4:7c:
                    2d:9c:5c:00:19:4e:4f:5a:c4:8d:fd:b6:23:21:5d:
                    ea:3b:91:da:60:c2:48:e3:8e:d0:25:89:63:60:c1:
                    93:a5:0f:ff:68:aa:58:aa:87:67:ad:c3:43:4a:a6:
                    75:33:06:36:d8:19:e0:14:37:b5:bc:d6:10:be:2d:
                    31:eb:bc:b9:9e:8b:fc:ca:09:9f:6a:f2:66:b1:38:
                    98:a6:25:5c:3b:d9:e7:34:62:8f:01:71:de:50:f7:
                    4b:af:ad:2a:2b:be:43:7c:c4:8c:8e:97:09:ef:9a:
                    06:7a:81:b0:22:2f:94:c2:9b:5f:97:b5:bb:1f:18:
                    76:ef:3a:0f:af:bb:11:d6:d8:08:c9:0c:20:25:73:
                    0e:a9:9c:27:4b:20:fa:12:a0:e9:ca:3c:bc:8e:1c:
                    c4:89:64:ee:00:b7:c7:c8:57:24:fc:bf:49:d6:32:
                    b3:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:98:34:AA:AB:50:6F:28:F8:2E:56:7A:53:51:34:AC:70:4F:38:38
            X509v3 Authority Key Identifier:
                keyid:E3:CD:26:26:07:CB:74:34:C9:89:8F:7A:EC:F6:E7:C3:6A:34:F6:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/480mJgfLdDTJiY967Pbnw2o09pM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/480mJgfLdDTJiY967Pbnw2o09pM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/480mJgfLdDTJiY967Pbnw2o09pM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:dc:16:3a:73:1b:2a:b0:20:61:de:dd:d5:30:eb:2e:2d:bc:
         33:49:dc:b6:26:6d:f1:26:45:36:44:cc:7b:1c:52:78:0e:ba:
         2d:2f:00:a9:30:09:3f:c6:26:e7:93:42:9d:da:d0:d9:fe:44:
         f9:40:eb:4e:55:dc:76:54:cf:e7:e4:1b:2f:a1:09:0b:71:b9:
         48:f3:dd:78:d5:48:0f:27:c2:0f:a3:4a:9b:ef:29:8b:64:6d:
         21:c9:f4:a2:cd:c8:d3:ae:03:66:6b:b8:83:fe:16:18:b7:43:
         3a:7f:33:ff:60:a3:45:1c:ff:37:86:67:36:a2:ed:94:89:95:
         6b:e7:4f:ef:d7:a6:09:81:cc:72:80:1b:63:9e:55:77:88:51:
         c9:ec:11:c1:f2:6a:d5:a5:18:36:49:42:b5:12:ea:a7:5a:21:
         81:a1:d9:61:d8:97:dc:78:4a:e1:2c:d4:2f:54:49:6e:65:4e:
         d0:20:27:cc:60:dd:99:5b:54:3e:c5:c3:94:f3:18:c7:3c:90:
         68:e8:80:d1:3a:65:fa:e0:34:b4:26:85:e6:c5:18:6b:2e:17:
         e7:ea:97:53:6b:3e:f1:3c:f2:81:fe:5e:12:12:46:6b:e0:e1:
         fa:a3:0c:ac:b8:11:fc:b4:d3:2f:a4:2d:d6:68:e2:bd:ea:84:
         1b:4e:f3:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 16:27:25 2025 by rpki-client