Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft
File:                     0UdMHaQ5s05IfCjCRynmh-CUfXM.mft (raw, json)
Hash identifier:          1dMIzfk1bcmuFhj2LenBhIMoMIuUTI19bkByqrfmO8A=
Subject key identifier:   6A:0C:88:23:DD:E5:87:17:F1:CD:70:60:4F:E9:EE:63:D1:50:45:BE
Authority key identifier: D1:47:4C:1D:A4:39:B3:4E:48:7C:28:C2:47:29:E6:87:E0:94:7D:73
Certificate issuer:       /CN=A91840A8/serialNumber=D1474C1DA439B34E487C28C24729E687E0947D73
Certificate serial:       0693
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft
Manifest number:          0677
Signing time:             Sun 26 Oct 2025 23:29:55 +0000
Manifest this update:     Sun 26 Oct 2025 23:29:54 +0000
Manifest next update:     Sun 02 Nov 2025 23:29:54 +0000
Files and hashes:         1: 0UdMHaQ5s05IfCjCRynmh-CUfXM.crl (hash: 0UK87QVG/T2uRk8W/UI9hXckOvzZO3fDkRoaROvAuus=)
                          2: AB4B141CA24211ED92C4107BC4F9AE02.roa (hash: gznbpzQsXm6xdg/ldBzHxBtH3yLXVXqXYnLIiSuqeug=)
                          3: DD7CA58EA23F11EDBCDB6D73C4F9AE02.roa (hash: 5xwHH4/f23qWAT+TboZC+tRvenA32AbWJXTfPPug25w=)
                          4: E9FB74DCE57711ECBC483554C4F9AE02.roa (hash: t68ri8+sG+PCgnACutRhiIQMtoo2iXpsz04+S32xy6c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.crl
                          rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Nov 2025 23:29:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1683 (0x693)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91840A8, serialNumber=D1474C1DA439B34E487C28C24729E687E0947D73
        Validity
            Not Before: Oct 26 23:29:54 2025 GMT
            Not After : Nov  2 23:29:54 2025 GMT
        Subject: CN=68feaef3-8723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a3:04:60:d5:59:0b:5d:c8:9a:be:8c:2c:07:
                    e3:83:f5:67:2b:25:13:64:88:9f:dd:ad:b0:b9:85:
                    2c:86:a4:18:b9:1e:31:c7:21:d6:70:69:ef:86:a1:
                    b8:d7:cc:80:11:60:73:a6:ba:56:36:e4:9f:12:a6:
                    aa:e5:54:90:c1:bc:e0:26:b0:11:7b:54:ba:eb:9b:
                    75:a5:fd:ff:76:d0:c4:1e:55:8d:e2:fb:10:7d:88:
                    6b:c2:97:17:c4:61:ea:36:10:d9:0d:a8:05:cc:af:
                    16:4f:20:7e:a0:e2:c4:21:5d:9a:53:c3:2a:0f:92:
                    a8:13:59:87:cc:e7:4b:2f:33:b3:ed:56:93:6b:a5:
                    78:82:40:c2:7e:3c:c6:d3:c6:02:32:bd:ae:b9:b9:
                    33:08:60:c2:9a:08:38:52:44:5e:f5:98:98:93:05:
                    b8:28:69:59:fb:a8:57:7f:bd:a5:49:1f:53:ae:e3:
                    10:5b:26:91:92:99:62:7f:66:a3:cb:ba:33:e9:e1:
                    fe:fe:e3:a8:3d:16:fc:9d:c0:f9:02:6a:42:5e:00:
                    0c:c6:b3:cb:45:d2:b0:76:32:5c:f9:cf:04:8c:b4:
                    36:bc:3a:97:c1:b6:35:90:3b:29:d4:b0:6c:bf:48:
                    37:8e:90:0f:77:48:62:19:20:37:85:95:42:34:15:
                    5d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:0C:88:23:DD:E5:87:17:F1:CD:70:60:4F:E9:EE:63:D1:50:45:BE
            X509v3 Authority Key Identifier:
                keyid:D1:47:4C:1D:A4:39:B3:4E:48:7C:28:C2:47:29:E6:87:E0:94:7D:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:be:fd:8b:2b:5c:1a:8b:38:4e:62:23:b5:32:c0:18:ec:b1:
         69:8c:42:17:42:bb:51:de:76:c8:9e:d1:57:5d:5a:ff:d7:90:
         e3:a2:15:25:a0:8c:a2:51:13:3a:28:c7:df:73:3e:a4:15:ac:
         95:b3:13:d8:6d:a2:60:c2:e9:09:9f:8f:bb:74:8f:78:29:ec:
         5e:03:95:b6:1d:fb:c4:77:9d:f6:91:2d:68:30:47:6d:fc:8f:
         e1:c4:9e:c3:05:a0:9a:d2:a7:1d:0b:8e:7d:38:16:63:12:ae:
         f4:a0:92:1e:f3:9a:aa:e9:1c:18:48:e2:33:a7:40:18:4c:eb:
         89:9f:29:fe:8e:83:7f:9c:01:f7:46:b8:18:6a:f5:4a:60:6d:
         83:cb:7c:32:2d:2a:ae:ae:7c:63:e8:fb:93:c6:65:c0:bc:8f:
         da:d2:75:ae:55:9d:48:49:c7:9b:37:74:db:f5:33:47:c0:38:
         ef:f7:95:1b:57:35:ac:6e:37:bd:78:a6:4d:05:cb:a0:27:cb:
         f3:49:14:e0:f9:c5:c3:b9:d2:91:42:12:02:cd:22:0e:99:6c:
         63:9d:c8:d9:f0:55:a6:0d:65:b3:f3:5f:18:6c:59:eb:1f:27:
         93:0b:86:0b:98:01:fe:4e:de:89:bc:16:e1:c3:0b:b4:8e:52:
         79:b4:9d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 14:19:03 2025 by rpki-client