Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.mft
File:                     4UieBUVuksrXFYRyAOSnXWw-Q84.mft (raw, json)
Hash identifier:          dz6SXhE9UMXSgOuwr6g4oaYPFr2uGZfY9ucr3ERfwP0=
Subject key identifier:   1E:95:C0:98:F2:AF:A7:9C:35:29:9E:0D:41:F2:95:92:C5:25:94:96
Authority key identifier: E1:48:9E:05:45:6E:92:CA:D7:15:84:72:00:E4:A7:5D:6C:3E:43:CE
Certificate issuer:       /CN=A91F6AE0/serialNumber=E1489E05456E92CAD715847200E4A75D6C3E43CE
Certificate serial:       0318
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UieBUVuksrXFYRyAOSnXWw-Q84.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.mft
Manifest number:          0312
Signing time:             Mon 03 Nov 2025 01:06:55 +0000
Manifest this update:     Mon 03 Nov 2025 01:06:55 +0000
Manifest next update:     Mon 10 Nov 2025 01:06:55 +0000
Files and hashes:         1: 4UieBUVuksrXFYRyAOSnXWw-Q84.crl (hash: V+J9Nsu4kFJxooaktb2me4ZEFywNqmvoG3r46xn3ZIQ=)
                          2: E2DF828CF20211ECBCC9B986C4F9AE02.roa (hash: z4QSZHsaMIqrT5GqWS+ItSZJBTmn9r2MlyBM2UIg/g4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.crl
                          rsync://rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UieBUVuksrXFYRyAOSnXWw-Q84.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 01:06:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 792 (0x318)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F6AE0, serialNumber=E1489E05456E92CAD715847200E4A75D6C3E43CE
        Validity
            Not Before: Nov  3 01:06:55 2025 GMT
            Not After : Nov 10 01:06:55 2025 GMT
        Subject: CN=6908002f-e07e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:71:4e:13:af:b0:67:ef:cd:9e:53:91:d4:c9:
                    59:44:16:21:99:78:d0:a8:20:30:06:59:d5:45:0e:
                    66:8a:2d:e9:dc:dc:9e:aa:42:d9:c1:dd:d7:00:b1:
                    54:db:85:d1:27:6d:2a:66:b8:f8:8b:06:9d:a5:cb:
                    6a:f1:55:cb:73:01:6a:12:c0:6e:20:45:b7:c2:19:
                    1e:c6:dc:53:92:23:cc:37:8f:0b:b0:87:ef:7f:14:
                    63:a8:cd:72:b4:5b:fa:e1:4f:2d:8c:2d:f8:ea:3e:
                    22:f4:43:28:44:a9:b1:0a:56:49:fb:c7:e3:81:0e:
                    9d:63:02:ba:86:6c:c2:b8:64:60:82:27:2e:20:b1:
                    e1:fe:70:b9:70:4a:7c:52:a3:cc:24:26:7a:b9:4b:
                    3f:14:04:b5:0a:e2:d2:36:89:0f:2a:13:4d:de:9f:
                    2a:f4:af:c5:ac:23:ac:22:32:12:47:7f:32:81:b6:
                    dc:66:ab:d1:03:44:36:cd:0a:8d:3d:e3:bf:86:1f:
                    15:85:fd:5f:c2:45:7b:14:5f:fd:8b:8c:88:61:5c:
                    95:9a:57:8a:28:9f:17:a6:68:76:d6:07:6c:55:48:
                    2f:15:b1:cf:89:39:84:49:c8:b4:23:38:ba:3d:d4:
                    c0:4e:82:8e:26:cc:28:77:b7:70:00:d5:56:9a:04:
                    0c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:95:C0:98:F2:AF:A7:9C:35:29:9E:0D:41:F2:95:92:C5:25:94:96
            X509v3 Authority Key Identifier:
                keyid:E1:48:9E:05:45:6E:92:CA:D7:15:84:72:00:E4:A7:5D:6C:3E:43:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UieBUVuksrXFYRyAOSnXWw-Q84.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:3c:6d:fa:fe:ff:1a:a0:aa:6a:a6:f5:1e:1d:e1:8a:7a:28:
         57:43:16:de:2c:4d:82:a0:c4:04:b2:bd:22:28:b6:be:ab:a6:
         31:2a:98:10:45:29:f6:df:04:83:4b:7d:06:6b:85:c8:6c:04:
         0e:2a:1b:c4:cc:e3:e0:5c:ef:07:ec:23:cf:b0:40:aa:92:23:
         d6:12:c7:55:1a:25:58:74:d5:ca:ef:68:9a:4c:35:54:34:b1:
         e1:48:64:cb:6c:98:e2:f2:94:6b:13:cc:07:75:fc:ab:a6:75:
         72:96:72:30:c4:ef:2d:21:30:42:05:3c:20:81:e3:f0:e0:fd:
         d9:fa:0d:4a:ae:4e:40:a7:0f:72:11:9a:48:a3:ce:de:00:27:
         88:59:52:34:28:2e:49:57:6f:1b:83:dc:8b:fe:4c:6e:c4:31:
         eb:87:07:c1:3c:24:3a:53:f3:20:e2:41:a0:f7:8f:b0:e2:5a:
         f9:c6:77:e1:70:0c:84:95:25:41:6f:83:0d:a1:01:44:b8:db:
         07:fd:b7:b4:0e:a7:bf:47:6b:38:92:c6:a9:3f:94:81:34:2b:
         5c:45:bb:21:af:94:63:d8:44:34:ff:8c:cb:3a:26:c2:2d:ce:
         60:0c:6b:a6:82:ae:4a:5c:a2:23:b4:c1:69:52:55:b5:ea:3d:
         05:bb:1d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 01:10:13 2025 by rpki-client