Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.mft
File:                     uXgEM1AwWT1tlle8RdvRFLEpHSg.mft (raw, json)
Hash identifier:          Qt5eAxD+lYBapHlpIgczCzpMnU6zt3R1GBLnvd2Zir0=
Subject key identifier:   22:A9:74:46:FA:51:BE:E4:8F:63:D2:E9:AC:3A:08:06:3B:30:5D:E8
Authority key identifier: B9:78:04:33:50:30:59:3D:6D:96:57:BC:45:DB:D1:14:B1:29:1D:28
Certificate issuer:       /CN=A91E9310/serialNumber=B97804335030593D6D9657BC45DBD114B1291D28
Certificate serial:       04AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXgEM1AwWT1tlle8RdvRFLEpHSg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.mft
Manifest number:          04A4
Signing time:             Sun 02 Nov 2025 23:56:39 +0000
Manifest this update:     Sun 02 Nov 2025 23:56:38 +0000
Manifest next update:     Sun 09 Nov 2025 23:56:38 +0000
Files and hashes:         1: uXgEM1AwWT1tlle8RdvRFLEpHSg.crl (hash: FJrtF3XvK8unF06T3zSsFDl+ByE6u7HNeUEy6TuEzwo=)
                          2: 785EB284773D11F0AB969921C4F9AE02.roa (hash: 8Zp/aagGSHH88DTb+DNr1X++0HtBH9A2tNVSmLSIRBM=)
                          3: E985185E773D11F0B023A932C4F9AE02.roa (hash: mISRfVX+s35IuBCQPh+4h139jbl1K2kLytqStI4mDZA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.crl
                          rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXgEM1AwWT1tlle8RdvRFLEpHSg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 23:56:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1196 (0x4ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9310, serialNumber=B97804335030593D6D9657BC45DBD114B1291D28
        Validity
            Not Before: Nov  2 23:56:38 2025 GMT
            Not After : Nov  9 23:56:38 2025 GMT
        Subject: CN=6907efb7-251b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ef:95:93:0c:a0:50:0d:c5:b2:08:7a:bd:c4:
                    51:42:d4:4f:ce:52:d2:98:7f:3b:aa:5b:85:6a:ed:
                    be:e7:dc:3b:b0:68:fd:4b:22:6a:4c:cf:fa:77:9b:
                    f1:d1:55:00:cc:f0:1b:51:18:a6:e2:2c:e0:4e:3f:
                    8e:36:85:75:ef:6f:c2:da:13:6d:c7:5e:f7:bf:0d:
                    82:57:f3:cf:03:ec:32:8c:91:1f:a9:6e:0b:1e:68:
                    a7:77:3b:ef:f3:e9:0d:1c:4f:cc:ec:d6:ef:68:4d:
                    fa:42:09:b8:c8:d2:03:66:d2:51:8b:ae:8a:71:1b:
                    df:10:36:2f:d4:02:0d:f1:45:33:0e:8a:3d:97:83:
                    98:b9:24:d1:2f:e4:46:9c:2b:05:5b:64:0a:f6:4b:
                    27:91:ef:89:d2:8c:96:27:5d:0b:bd:15:f5:b4:32:
                    6c:4a:83:a5:4d:fe:d2:d2:9d:47:7a:05:a6:30:b7:
                    2e:84:ec:b7:91:2c:2a:97:37:fe:dd:bb:41:41:93:
                    81:9d:69:69:d5:ec:0f:11:99:2c:df:bf:51:3f:61:
                    e1:fc:c0:71:7e:e5:ad:b8:0b:3b:eb:c8:e3:df:26:
                    2c:19:37:96:ee:96:80:44:d2:2f:25:ae:f9:2a:2c:
                    aa:c7:7a:f5:44:9a:a5:84:f9:73:52:8e:d7:51:13:
                    5a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:A9:74:46:FA:51:BE:E4:8F:63:D2:E9:AC:3A:08:06:3B:30:5D:E8
            X509v3 Authority Key Identifier:
                keyid:B9:78:04:33:50:30:59:3D:6D:96:57:BC:45:DB:D1:14:B1:29:1D:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXgEM1AwWT1tlle8RdvRFLEpHSg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:e1:a7:3a:3d:be:03:f5:7f:7a:03:30:d4:39:bc:26:a4:48:
         fe:3f:7e:e6:79:23:da:de:f7:26:ec:cd:16:5e:ab:8e:98:63:
         c7:2e:7f:a2:76:db:33:7c:c5:5f:2b:44:7f:07:7c:20:a0:00:
         1f:6b:7b:92:7d:d0:ec:1a:e4:34:39:8f:1b:ed:89:76:b5:0d:
         79:d5:d0:7d:01:50:26:f1:7e:e7:1c:47:88:87:bb:dd:c4:42:
         bf:37:3a:41:47:c0:5c:6a:bf:e3:60:0e:f2:19:32:15:6c:2e:
         a9:a3:57:d0:05:bf:aa:f1:f7:f3:ca:af:54:41:af:cb:3b:d0:
         83:58:62:10:33:3c:01:74:da:21:90:58:64:27:bc:e8:bd:c7:
         99:cb:f6:5b:01:03:aa:33:7a:26:33:66:1d:d2:5a:ba:38:a7:
         be:8d:d9:43:ca:89:40:ef:64:c8:f6:dd:53:7d:12:70:68:2e:
         87:a4:b4:b5:18:7a:12:b0:cc:03:3a:d7:85:9d:f7:db:58:6d:
         75:50:50:77:08:b4:4b:0e:c9:c9:6c:b4:0d:cf:8a:79:c5:7c:
         cb:dc:36:26:2b:b9:ce:9c:b0:84:8d:c4:07:80:5e:07:e6:ab:
         a5:8f:51:c7:45:76:81:d3:7c:a8:c6:e0:32:9c:48:a0:b7:6a:
         35:91:1e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:17:07 2025 by rpki-client