Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F92A/2660378286C911F0872F9D2FC4F9AE02/uCqc9vnMgDxqa3BmLYB-xR2C290.mft
File:                     uCqc9vnMgDxqa3BmLYB-xR2C290.mft (raw, json)
Hash identifier:          1PO13Oa//XWptekr9v+hvHxA0FW1M8kZ2gyq0PqN31Y=
Subject key identifier:   47:04:B5:13:54:1E:01:10:47:6C:48:BB:91:28:F1:15:12:E6:91:DE
Authority key identifier: B8:2A:9C:F6:F9:CC:80:3C:6A:6B:70:66:2D:80:7E:C5:1D:82:DB:DD
Certificate issuer:       /CN=A911F92A/serialNumber=B82A9CF6F9CC803C6A6B70662D807EC51D82DBDD
Certificate serial:       1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uCqc9vnMgDxqa3BmLYB-xR2C290.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F92A/2660378286C911F0872F9D2FC4F9AE02/uCqc9vnMgDxqa3BmLYB-xR2C290.mft
Manifest number:          19
Signing time:             Sun 19 Oct 2025 11:23:39 +0000
Manifest this update:     Sun 19 Oct 2025 11:23:38 +0000
Manifest next update:     Sun 26 Oct 2025 11:23:38 +0000
Files and hashes:         1: uCqc9vnMgDxqa3BmLYB-xR2C290.crl (hash: lL6Jh9pEhABqc3Z4Lk5YhXb+zl4J4SFnuoHHa9P9CJ8=)
                          2: B3DED21C86C911F0BAF28043C4F9AE02.roa (hash: CocTAGyUcSYA6MVP0olvSXDiZcQTc7S0RwIMK0ei44s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F92A/2660378286C911F0872F9D2FC4F9AE02/uCqc9vnMgDxqa3BmLYB-xR2C290.crl
                          rsync://rpki.apnic.net/member_repository/A911F92A/2660378286C911F0872F9D2FC4F9AE02/uCqc9vnMgDxqa3BmLYB-xR2C290.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uCqc9vnMgDxqa3BmLYB-xR2C290.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 11:23:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F92A, serialNumber=B82A9CF6F9CC803C6A6B70662D807EC51D82DBDD
        Validity
            Not Before: Oct 19 11:23:38 2025 GMT
            Not After : Oct 26 11:23:38 2025 GMT
        Subject: CN=68f4ca3a-625a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:de:90:2d:71:52:f1:98:11:d3:2f:84:9b:a1:
                    df:82:e2:20:d7:ef:dd:22:3e:12:0e:db:2e:98:8f:
                    6b:29:6c:52:b8:4e:0b:60:bb:88:ac:36:54:f3:90:
                    35:bb:f7:e5:12:06:64:7f:9f:ce:f2:bc:ad:5e:b4:
                    72:16:78:b7:c4:e1:b4:43:44:98:84:6c:2b:3d:ed:
                    7d:5c:31:e3:8a:33:bf:81:56:06:67:d4:16:06:66:
                    5c:fe:b7:9d:ca:3f:7c:75:3e:bc:8d:ec:15:8d:a9:
                    94:79:20:69:26:02:04:2f:03:c4:b3:29:36:e9:db:
                    54:b0:54:5c:f7:ac:36:a6:98:a9:19:cc:8e:09:f8:
                    02:30:21:77:42:0b:a7:96:e6:53:62:cb:d3:68:59:
                    8f:52:bd:ab:d8:3d:50:79:9c:83:15:ee:1d:d6:5e:
                    23:e2:42:a5:98:c1:8f:b5:77:fd:4f:34:df:b3:20:
                    6a:8f:34:c9:a4:f5:33:f4:c6:fe:07:af:e1:92:31:
                    9a:ac:5e:89:ea:ba:7b:f6:dd:2a:77:da:2c:82:db:
                    39:ed:db:25:ce:3d:6e:88:ff:74:e5:c1:ec:c2:37:
                    45:6e:38:dc:40:ca:1d:02:31:ad:48:c1:e8:79:50:
                    ea:6e:73:ab:c8:bd:f6:26:5e:2f:d4:c8:7d:73:6c:
                    51:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:04:B5:13:54:1E:01:10:47:6C:48:BB:91:28:F1:15:12:E6:91:DE
            X509v3 Authority Key Identifier:
                keyid:B8:2A:9C:F6:F9:CC:80:3C:6A:6B:70:66:2D:80:7E:C5:1D:82:DB:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F92A/2660378286C911F0872F9D2FC4F9AE02/uCqc9vnMgDxqa3BmLYB-xR2C290.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uCqc9vnMgDxqa3BmLYB-xR2C290.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F92A/2660378286C911F0872F9D2FC4F9AE02/uCqc9vnMgDxqa3BmLYB-xR2C290.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:09:c6:19:b0:30:6e:6d:00:b8:c4:e7:bf:52:40:09:73:e9:
         31:6d:30:c2:3a:db:40:c5:41:4f:69:e7:50:0a:00:63:5c:46:
         6f:c4:c6:94:86:ca:ba:0a:34:5f:5c:8d:18:2d:c6:52:87:27:
         3d:8e:3f:bf:4e:85:30:9b:a2:3e:2f:85:8e:69:f0:67:de:0f:
         7a:aa:4b:15:db:f3:f3:63:92:d8:91:f4:0c:77:42:32:9b:a0:
         86:a4:ad:bc:1d:c0:07:bd:fb:8a:1e:6f:fa:b4:39:46:cc:50:
         6a:1c:41:42:4d:7f:d3:93:26:6d:05:cf:ce:b8:55:e1:7c:2d:
         b2:e8:5e:8f:36:30:ae:03:54:38:f0:6c:7f:96:e2:e3:fe:5e:
         f2:af:bc:5d:2f:17:de:e7:d0:05:27:43:c0:bf:42:15:d0:5c:
         21:6a:98:22:e4:b0:01:d0:de:04:e4:5f:48:64:61:0a:69:0d:
         cc:45:3c:7c:8b:42:e5:c0:f3:38:11:63:d0:31:a7:1a:95:4a:
         ff:3a:d8:fe:59:2b:24:72:41:1d:56:6d:58:1c:57:27:87:77:
         7c:68:c0:ac:9b:4a:0a:80:bd:ef:87:25:63:5b:72:19:d6:2e:
         e4:7c:4a:a6:d4:8c:f4:2d:88:19:5a:57:85:52:6e:92:f4:76:
         28:92:00:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:09:27 2025 by rpki-client