Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913DC32/840A16B0FCFD11EFADB86115C4F9AE02/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.mft
File:                     Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.mft (raw, json)
Hash identifier:          84D1jEoiH5gKFuQg6O/j45cbmQfRv8PwHCT4PWt3hTw=
Subject key identifier:   4C:39:4E:2F:75:24:F4:EB:F6:F9:09:10:A4:77:01:F8:9A:7F:56:10
Authority key identifier: 53:0F:CD:29:9E:77:5B:8A:CB:27:52:A0:3A:FA:A7:D1:81:E5:00:EE
Certificate issuer:       /CN=A913DC32/serialNumber=530FCD299E775B8ACB2752A03AFAA7D181E500EE
Certificate serial:       75
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913DC32/840A16B0FCFD11EFADB86115C4F9AE02/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.mft
Manifest number:          74
Signing time:             Sun 19 Oct 2025 10:11:41 +0000
Manifest this update:     Sun 19 Oct 2025 10:11:40 +0000
Manifest next update:     Sun 26 Oct 2025 10:11:40 +0000
Files and hashes:         1: Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.crl (hash: q/gmhFH5/cpGCfotXuNLdbt7cc+G5BygrirSteJ64yM=)
                          2: 455B2534FD0811EF85ADED79C4F9AE02.roa (hash: EqPvfZWybFxDEzuqUOMumy7hGqKdVROQozF26OVvW/M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913DC32/840A16B0FCFD11EFADB86115C4F9AE02/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.crl
                          rsync://rpki.apnic.net/member_repository/A913DC32/840A16B0FCFD11EFADB86115C4F9AE02/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 10:11:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117 (0x75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913DC32, serialNumber=530FCD299E775B8ACB2752A03AFAA7D181E500EE
        Validity
            Not Before: Oct 19 10:11:40 2025 GMT
            Not After : Oct 26 10:11:40 2025 GMT
        Subject: CN=68f4b95d-85c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:dc:71:e5:48:b8:46:5b:7a:b9:da:6c:09:a1:
                    a4:ca:79:f8:f2:31:10:d3:39:2c:72:d2:41:91:02:
                    ea:9b:81:87:3e:da:d6:65:22:ca:fa:b0:0b:7d:30:
                    08:14:29:e6:91:60:65:be:ec:e9:e4:1f:fb:43:1a:
                    03:50:a7:64:ce:99:a4:f3:f3:77:4a:7a:64:6e:e3:
                    2c:94:26:dc:ca:ee:bf:de:dd:c4:37:ee:31:21:c8:
                    cb:c3:69:f2:07:ae:a2:91:bd:61:b1:51:b1:dd:24:
                    44:7b:a7:29:a4:e4:a7:f0:e3:fd:c6:85:36:0c:82:
                    0c:23:e0:13:5f:13:d6:42:60:46:e7:c2:1d:b6:c2:
                    81:4b:d8:63:f2:f5:b5:f0:83:e8:33:25:a8:54:9c:
                    8e:33:27:1f:f0:04:42:e1:99:99:47:58:98:8f:13:
                    fa:d1:76:e2:f7:ac:1a:b0:52:79:56:67:d7:35:f4:
                    6f:62:81:12:93:44:16:03:2e:e1:0a:2c:9d:69:9c:
                    e0:ca:22:12:de:c4:8b:56:e6:e6:26:4b:d2:b4:b2:
                    33:c0:bc:8f:f0:2f:db:42:1c:22:67:79:0a:44:81:
                    68:90:84:b4:dc:f0:b6:01:13:94:8e:c9:e5:72:63:
                    25:9f:02:86:75:cd:a4:38:67:c1:4e:bf:67:c1:8d:
                    f1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:39:4E:2F:75:24:F4:EB:F6:F9:09:10:A4:77:01:F8:9A:7F:56:10
            X509v3 Authority Key Identifier:
                keyid:53:0F:CD:29:9E:77:5B:8A:CB:27:52:A0:3A:FA:A7:D1:81:E5:00:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913DC32/840A16B0FCFD11EFADB86115C4F9AE02/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DC32/840A16B0FCFD11EFADB86115C4F9AE02/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:83:73:06:bd:ca:1d:9f:ef:a4:4b:06:72:75:40:a2:4f:97:
         1b:75:62:9e:38:10:ae:69:d5:e2:a8:2b:1b:8e:02:3f:86:e6:
         93:3f:85:f8:38:65:a7:76:10:12:43:2e:18:7c:fa:e3:27:82:
         9c:6b:df:2d:c2:bb:c7:8a:b9:5b:19:1e:00:e6:0e:b7:16:08:
         61:ab:66:0f:5e:96:0b:4d:9f:f9:2f:9e:71:78:7d:ac:3c:8c:
         d3:c0:f8:cc:6d:62:9a:a7:65:28:fd:e4:1c:05:50:d2:c4:47:
         12:07:61:55:04:ae:dd:e9:dc:a3:a6:d5:3d:49:03:74:df:20:
         6a:74:fa:2c:d4:01:c1:1f:df:62:6c:9b:37:b1:57:bf:02:8a:
         d3:a9:86:36:e9:98:5c:79:eb:f3:ea:f4:20:23:4a:f3:7d:ed:
         b1:c7:29:7e:85:8e:42:95:f0:11:7c:89:d5:2c:7c:16:ff:28:
         2f:4b:3d:07:7c:ee:9a:bd:ed:00:c5:53:27:62:aa:70:cf:4b:
         75:e6:99:98:21:02:5f:0c:ed:85:75:cb:8e:72:bc:91:3d:34:
         a2:6f:2d:1b:cd:e4:80:39:c0:e6:32:d8:d8:c5:0d:48:2e:27:
         65:65:d3:ce:d7:b7:8c:5c:c7:02:3f:3a:d6:93:dc:69:c5:05:
         af:63:b7:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:26:00 2025 by rpki-client