Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9188EB6/9C0EF83A74EC11EC93F81A33C4F9AE02/rUR6Z_B-gc0JwyLs0QrZQWvESys.mft
File:                     rUR6Z_B-gc0JwyLs0QrZQWvESys.mft (raw, json)
Hash identifier:          OmvbnbaZPB6afXHTeh5/j/uIti/XbZtLJjuItSWF2e8=
Subject key identifier:   AC:DC:14:1D:1C:89:DB:26:8C:88:E9:BC:B8:57:51:05:BF:05:17:B4
Authority key identifier: AD:44:7A:67:F0:7E:81:CD:09:C3:22:EC:D1:0A:D9:41:6B:C4:4B:2B
Certificate issuer:       /CN=A9188EB6/serialNumber=AD447A67F07E81CD09C322ECD10AD9416BC44B2B
Certificate serial:       0453
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rUR6Z_B-gc0JwyLs0QrZQWvESys.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9188EB6/9C0EF83A74EC11EC93F81A33C4F9AE02/rUR6Z_B-gc0JwyLs0QrZQWvESys.mft
Manifest number:          044F
Signing time:             Thu 06 Nov 2025 20:59:18 +0000
Manifest this update:     Thu 06 Nov 2025 20:59:17 +0000
Manifest next update:     Thu 13 Nov 2025 20:59:17 +0000
Files and hashes:         1: rUR6Z_B-gc0JwyLs0QrZQWvESys.crl (hash: 3xGNMhqwYJjir6AqtXkzW3K900O7WkvfqxFCiL/o8y0=)
                          2: 09B2D8EC704C11ED97935E7DC4F9AE02.roa (hash: /8IJZqUqWTlleISqmqBCzCx51/D+1Ajxq0hCjjaBFnY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9188EB6/9C0EF83A74EC11EC93F81A33C4F9AE02/rUR6Z_B-gc0JwyLs0QrZQWvESys.crl
                          rsync://rpki.apnic.net/member_repository/A9188EB6/9C0EF83A74EC11EC93F81A33C4F9AE02/rUR6Z_B-gc0JwyLs0QrZQWvESys.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rUR6Z_B-gc0JwyLs0QrZQWvESys.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Nov 2025 20:59:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1107 (0x453)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9188EB6, serialNumber=AD447A67F07E81CD09C322ECD10AD9416BC44B2B
        Validity
            Not Before: Nov  6 20:59:17 2025 GMT
            Not After : Nov 13 20:59:17 2025 GMT
        Subject: CN=690d0c25-b762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ae:ea:01:c7:0e:de:1e:8b:96:6c:56:1f:87:
                    b0:09:57:d4:4f:56:ae:7c:7b:08:fa:17:d6:9e:c4:
                    a9:f6:a2:06:5e:00:f2:48:01:fe:06:9c:7f:f8:67:
                    6f:d7:07:b6:27:fd:ea:9a:0e:68:95:66:18:33:ec:
                    f6:e6:10:ff:dd:ec:bb:f7:25:a7:d4:1d:17:df:e0:
                    94:34:09:ac:8a:e2:f4:cf:3b:47:c9:71:24:ca:66:
                    40:8d:e1:a4:a4:b0:3d:0f:46:54:74:1e:48:18:5f:
                    4e:74:5c:7f:ba:4a:15:d3:3c:19:e8:d8:fa:bf:02:
                    b1:a2:bd:dc:48:cb:96:f7:fc:6c:f4:54:e8:b5:61:
                    54:fc:52:7e:3c:f7:a0:99:d6:33:46:78:a4:a4:b9:
                    35:1d:53:84:59:63:02:d1:29:b8:61:f0:ea:82:b9:
                    6c:1b:ea:18:b3:cf:aa:42:c0:bb:04:be:e3:b5:05:
                    0c:de:41:ba:cf:01:33:76:8b:9c:60:4c:38:5f:93:
                    d9:10:05:19:50:e9:4c:0c:d6:c2:db:43:1a:21:16:
                    95:a8:7e:5f:03:57:8c:da:e0:fb:87:14:88:2b:e9:
                    b4:75:4e:1d:aa:f8:dc:df:5e:f0:ac:5d:52:9b:21:
                    6c:28:16:69:e2:b8:c9:9d:e8:58:d9:00:41:3a:76:
                    73:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:DC:14:1D:1C:89:DB:26:8C:88:E9:BC:B8:57:51:05:BF:05:17:B4
            X509v3 Authority Key Identifier:
                keyid:AD:44:7A:67:F0:7E:81:CD:09:C3:22:EC:D1:0A:D9:41:6B:C4:4B:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9188EB6/9C0EF83A74EC11EC93F81A33C4F9AE02/rUR6Z_B-gc0JwyLs0QrZQWvESys.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rUR6Z_B-gc0JwyLs0QrZQWvESys.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188EB6/9C0EF83A74EC11EC93F81A33C4F9AE02/rUR6Z_B-gc0JwyLs0QrZQWvESys.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:4d:d6:31:03:ee:0d:cb:2f:4b:b3:d2:d6:55:7a:59:28:11:
         1c:f9:b9:bf:1f:ad:9c:02:e6:32:8b:2d:7e:8c:6b:42:b7:29:
         b3:35:13:6d:89:3d:11:a0:99:5d:7e:94:32:e7:41:e6:42:3c:
         1f:13:36:0c:6d:72:d5:39:6b:9f:93:a3:c9:a2:c8:55:f9:2e:
         28:30:0e:e0:71:d9:b9:93:8a:0e:92:7e:2f:74:f9:66:99:a4:
         ac:de:51:4c:22:e7:85:ab:17:c2:b4:48:60:2e:96:3d:83:5d:
         3a:c1:55:c4:35:98:e0:3c:1a:4f:3a:1e:5f:c6:5e:46:f5:89:
         d0:12:54:76:81:fe:bf:fc:e9:fe:19:38:56:23:92:7d:18:d6:
         b6:23:ca:75:c0:73:19:9f:cb:ed:6c:6c:3b:22:56:8d:74:e4:
         c4:81:5a:7b:e5:8f:db:c2:75:9d:7f:8f:22:58:78:46:49:3b:
         6f:e8:57:5a:5c:09:c2:06:7d:99:7e:a1:76:04:1f:72:26:1f:
         86:ae:ec:8a:56:fa:1a:5b:aa:62:eb:b1:0c:6e:b9:6c:83:9c:
         55:cf:18:b9:1c:63:d9:e7:bc:ca:03:3b:4c:08:29:09:3c:c5:
         3b:9b:0a:93:a4:e2:5d:ba:b9:9a:aa:c5:13:6c:c7:5c:ad:01:
         89:54:bc:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 16:34:20 2025 by rpki-client