Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEE26/A7C1610CAF1011EABF61D33AC4F9AE02/UPqOjU4pl_9d5gjaeMrGVMzRabY.mft
File:                     UPqOjU4pl_9d5gjaeMrGVMzRabY.mft (raw, json)
Hash identifier:          ufhwvXtaD1JZDNRGEK5MW8qqkicATkwS5ozd4/NuYJI=
Subject key identifier:   90:3D:32:4A:F7:F0:36:C3:F0:18:1C:07:AF:E3:50:EA:86:6C:4D:34
Authority key identifier: 50:FA:8E:8D:4E:29:97:FF:5D:E6:08:DA:78:CA:C6:54:CC:D1:69:B6
Certificate issuer:       /CN=A91AEE26/serialNumber=50FA8E8D4E2997FF5DE608DA78CAC654CCD169B6
Certificate serial:       0942
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPqOjU4pl_9d5gjaeMrGVMzRabY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AEE26/A7C1610CAF1011EABF61D33AC4F9AE02/UPqOjU4pl_9d5gjaeMrGVMzRabY.mft
Manifest number:          0937
Signing time:             Tue 04 Nov 2025 20:19:17 +0000
Manifest this update:     Tue 04 Nov 2025 20:19:17 +0000
Manifest next update:     Tue 11 Nov 2025 20:19:17 +0000
Files and hashes:         1: UPqOjU4pl_9d5gjaeMrGVMzRabY.crl (hash: g4s+Y/OmUXhmrM2ukyK2GDpRmXT8+lYr8oJN2do8tvQ=)
                          2: CD095756AF1211EAA486D140C4F9AE02.roa (hash: nvWxmCSAUBjo1M2/wF1sYZaCvwMpa6MX82x33FgigCc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AEE26/A7C1610CAF1011EABF61D33AC4F9AE02/UPqOjU4pl_9d5gjaeMrGVMzRabY.crl
                          rsync://rpki.apnic.net/member_repository/A91AEE26/A7C1610CAF1011EABF61D33AC4F9AE02/UPqOjU4pl_9d5gjaeMrGVMzRabY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPqOjU4pl_9d5gjaeMrGVMzRabY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 20:19:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2370 (0x942)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AEE26, serialNumber=50FA8E8D4E2997FF5DE608DA78CAC654CCD169B6
        Validity
            Not Before: Nov  4 20:19:17 2025 GMT
            Not After : Nov 11 20:19:17 2025 GMT
        Subject: CN=690a5fc5-04e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3a:3a:22:b7:7c:40:a8:88:94:12:13:73:ac:
                    c8:a8:47:da:cf:73:8a:ad:2e:30:4e:6a:98:02:cb:
                    92:0b:4a:4f:51:53:d5:36:a1:03:c9:de:4e:90:ac:
                    2a:bd:f8:b1:58:42:db:b0:cb:f8:00:27:df:f7:0f:
                    33:66:cc:81:34:72:e0:dc:c3:70:5a:11:a5:05:f7:
                    7e:14:f5:d1:3f:45:9f:35:12:e3:75:5a:b3:47:5b:
                    f5:3c:ef:3d:a4:f7:af:e3:d0:24:44:a4:50:53:3d:
                    c5:9b:b0:fa:a6:6b:72:b2:92:47:68:bf:e3:e4:e6:
                    a8:57:c3:ae:7f:76:06:35:87:a4:c9:dd:a9:b1:f0:
                    ac:b0:67:4e:d1:1f:45:45:47:f6:68:41:51:9f:66:
                    b3:b3:57:c1:35:e7:cd:66:2a:5b:64:35:3d:1f:0b:
                    9f:20:4e:b8:3f:af:d1:31:a9:c2:b3:61:2d:1b:90:
                    87:e7:bb:6c:a3:9f:68:f6:d2:ac:4f:8b:1e:0a:d9:
                    a2:2f:c1:6e:f1:de:fd:ab:65:1e:71:06:80:a7:cb:
                    ee:b8:97:6e:dc:58:9e:39:af:c3:55:b5:31:58:29:
                    75:9a:7e:e7:7c:4f:ab:54:f6:9d:17:d4:16:2e:26:
                    e4:b3:b9:57:61:9f:89:25:49:3e:be:a2:ee:1e:97:
                    31:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:3D:32:4A:F7:F0:36:C3:F0:18:1C:07:AF:E3:50:EA:86:6C:4D:34
            X509v3 Authority Key Identifier:
                keyid:50:FA:8E:8D:4E:29:97:FF:5D:E6:08:DA:78:CA:C6:54:CC:D1:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AEE26/A7C1610CAF1011EABF61D33AC4F9AE02/UPqOjU4pl_9d5gjaeMrGVMzRabY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPqOjU4pl_9d5gjaeMrGVMzRabY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEE26/A7C1610CAF1011EABF61D33AC4F9AE02/UPqOjU4pl_9d5gjaeMrGVMzRabY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:fa:0f:fe:fc:0c:73:f2:3b:82:0e:7c:75:33:70:14:23:f9:
         1e:67:47:2f:a5:16:4a:97:71:01:af:33:8e:f7:63:a4:e9:d0:
         df:14:4e:af:9b:65:34:3a:63:37:48:e1:34:d3:88:ad:6b:80:
         72:f4:7d:0e:91:ad:96:7f:5f:da:6c:e9:5a:11:29:53:8a:21:
         69:9d:95:a2:08:a7:1d:13:f3:5c:c4:f7:ca:91:ba:fb:91:7f:
         7f:3f:e0:44:01:87:eb:5a:98:9c:19:5c:82:3b:5b:e1:0a:37:
         f1:68:43:93:f6:8c:45:62:fd:64:bd:44:1f:07:23:0c:94:b1:
         b4:3f:9c:01:e8:3c:d7:e9:91:3e:12:8f:fe:50:ec:64:34:ea:
         2d:9e:4e:54:7f:14:ab:10:f9:b9:21:0c:ec:4e:72:25:a7:5d:
         06:4b:98:33:dd:46:99:31:f1:d1:56:0d:29:06:4b:30:37:1f:
         b1:51:8c:2d:93:5b:83:a5:4a:2a:77:c2:e5:34:40:8f:70:72:
         5c:fe:94:58:35:82:f4:86:bb:87:5d:f7:58:cf:a4:74:e6:0b:
         04:11:7a:9c:11:ce:6b:f0:62:78:3e:58:bb:20:62:21:2b:84:
         d6:6b:76:01:2e:04:45:d4:86:a1:e7:aa:b5:36:b6:e5:86:b3:
         21:85:51:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:22:52 2025 by rpki-client