Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft
File:                     UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft (raw, json)
Hash identifier:          2j1OQ05AF3E1dvsxF1DEj7e0q0hID66uPaS4BJ9rOXM=
Subject key identifier:   BF:8F:B4:80:F7:D9:3E:FB:8A:B7:F4:63:13:8A:0C:96:2C:C8:0B:DC
Authority key identifier: 50:E6:68:3A:6A:F4:64:4B:68:A1:1C:22:DA:7F:3A:65:B3:12:C0:6F
Certificate issuer:       /CN=A913B1DA/serialNumber=50E6683A6AF4644B68A11C22DA7F3A65B312C06F
Certificate serial:       30C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft
Manifest number:          30B7
Signing time:             Sat 18 Oct 2025 15:37:27 +0000
Manifest this update:     Sat 18 Oct 2025 15:37:26 +0000
Manifest next update:     Sat 25 Oct 2025 15:37:26 +0000
Files and hashes:         1: UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl (hash: YL3P/FYzR6K9/MoVp3ryEl8fYPG2jWL6nbY9gZgXifk=)
                          2: E5DB5238DFBD11EC8E203126C4F9AE02.roa (hash: ZrmmPRVPNdXmVUqASzwRt7WIJ8A+6EE3tmK84hv8/3g=)
                          3: B8B02658C16B11EEA7D01A7DC4F9AE02.roa (hash: inEKK4l1A/n9MCoAdqgbUu3ySJUn1ofzfsmCuXBMLoQ=)
                          4: 446A425EA6BB11ED9D458785C4F9AE02.roa (hash: b3tJCOFhrOxNwX+xrXj/RF8CaJdbbK6dUe5Fw9N8cng=)
                          5: 43DADDD0A6BB11ED9D458785C4F9AE02.roa (hash: pqhARhh64EGCd2MgnNHnrxWDNycvjlNc8wDHcPRwifg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl
                          rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 15:37:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12489 (0x30c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B1DA, serialNumber=50E6683A6AF4644B68A11C22DA7F3A65B312C06F
        Validity
            Not Before: Oct 18 15:37:26 2025 GMT
            Not After : Oct 25 15:37:26 2025 GMT
        Subject: CN=68f3b437-c03b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:49:6b:77:2f:f6:c2:c5:29:54:b6:ce:89:6e:
                    1d:db:3e:09:3e:55:08:89:7f:9a:7c:65:7f:30:c6:
                    51:a0:b3:4a:be:ea:1e:5e:54:a0:0b:f7:0e:b2:2d:
                    5b:00:11:ab:42:e9:34:2b:38:ac:19:e7:4f:25:90:
                    bb:db:e0:07:cf:24:0f:d7:3a:d1:4d:69:d4:77:8b:
                    86:da:ad:85:8b:cc:5f:18:84:ff:52:87:7e:8d:db:
                    69:5f:36:cf:91:13:32:bd:0f:b4:b1:e6:bb:50:2f:
                    46:19:6a:a4:f5:9e:b6:b8:41:90:e6:ce:e0:36:26:
                    ac:8c:94:c5:1c:25:5c:b9:67:a9:51:6c:8e:23:91:
                    b9:ce:f8:7e:6d:79:31:44:8b:a1:d2:65:e2:f8:58:
                    f1:46:f1:a2:66:78:7e:88:15:19:44:72:74:9f:b4:
                    95:0e:d8:fc:00:e1:bd:cb:63:b8:e7:d4:93:fd:b5:
                    0e:85:05:64:33:50:86:a0:5d:29:2c:0a:a1:53:b4:
                    dc:a0:09:3e:52:55:81:9d:22:19:c6:33:e5:0c:94:
                    47:0c:89:78:e1:d1:ce:f2:92:a6:5d:1c:31:30:99:
                    18:3c:f9:68:70:3a:10:55:61:5d:9e:d8:4a:f9:94:
                    4d:8b:9f:dc:58:b2:82:08:2e:66:9f:70:b1:3c:f9:
                    fa:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:8F:B4:80:F7:D9:3E:FB:8A:B7:F4:63:13:8A:0C:96:2C:C8:0B:DC
            X509v3 Authority Key Identifier:
                keyid:50:E6:68:3A:6A:F4:64:4B:68:A1:1C:22:DA:7F:3A:65:B3:12:C0:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:fb:5f:cb:9b:92:cb:e4:f3:b9:b9:c9:4f:6c:8b:52:da:ff:
         c3:0f:db:22:1a:1a:72:05:ef:d0:0a:f8:57:da:8b:e1:fc:4d:
         59:27:95:a0:e2:04:77:8d:5a:c9:14:79:f1:93:3e:92:fc:88:
         d1:ba:d8:2c:5e:20:f7:06:83:28:6a:75:31:f7:5c:b6:0d:f0:
         58:f1:1f:57:25:e8:6f:32:37:20:5c:c5:78:84:c6:d1:53:34:
         4b:cf:79:10:02:1d:ef:2c:e2:54:e5:a4:9e:65:45:b7:e6:9e:
         b5:d0:3e:5d:2e:94:02:30:5e:f0:0b:56:55:8d:ee:5f:e3:d3:
         d0:a7:66:99:75:59:b3:56:d4:49:7c:ae:d4:53:c1:6d:74:33:
         ed:9a:8c:3e:58:a7:1a:98:79:8a:b2:48:3d:f8:5b:29:91:19:
         30:91:9f:71:bd:15:66:11:bf:35:79:24:ce:3b:16:80:34:b0:
         83:a5:50:b5:2c:87:90:c5:d8:c6:04:47:08:0c:7d:45:1a:6d:
         32:6f:8d:61:27:79:b8:0d:6c:42:0f:7b:4f:ac:20:d0:6c:59:
         11:95:5e:70:bd:83:44:99:cb:7c:8d:ea:4a:e8:18:25:4d:5a:
         34:2b:71:af:e8:1d:ff:de:6e:b5:08:d5:d7:5c:98:74:a2:9d:
         3d:bb:de:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:47:22 2025 by rpki-client