Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.mft
File:                     UoaLCQH1W0B4uRpzRRym0iMSyKs.mft (raw, json)
Hash identifier:          P5jnyNqsRQuGi3b/m7aqg/4z6pQyPFlqNiZMrIus28M=
Subject key identifier:   B7:56:39:57:13:3A:B2:1E:EA:5A:24:A5:9C:99:38:17:3F:15:0A:E9
Authority key identifier: 52:86:8B:09:01:F5:5B:40:78:B9:1A:73:45:1C:A6:D2:23:12:C8:AB
Certificate issuer:       /CN=A913E2B3/serialNumber=52868B0901F55B4078B91A73451CA6D22312C8AB
Certificate serial:       0C55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoaLCQH1W0B4uRpzRRym0iMSyKs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.mft
Manifest number:          0C47
Signing time:             Sat 18 Oct 2025 19:25:01 +0000
Manifest this update:     Sat 18 Oct 2025 19:25:00 +0000
Manifest next update:     Sat 25 Oct 2025 19:25:00 +0000
Files and hashes:         1: UoaLCQH1W0B4uRpzRRym0iMSyKs.crl (hash: abPz4EIT6MI9rX7LVY+7sKbzFw4Xa89CbQvGORzKTtk=)
                          2: 399AB6DA4ED511ED84336740C4F9AE02.roa (hash: xH17spaHhMO4029wjNj4ZW6FqoA9g6CON6QQbD7o3j0=)
                          3: 3AB1E0D44ED511ED84336740C4F9AE02.roa (hash: J+JzfdPnvnmB6Ay3Ml+qeWmcjb1XIfVxnUqGVNUN7Ko=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.crl
                          rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoaLCQH1W0B4uRpzRRym0iMSyKs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 19:24:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3157 (0xc55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E2B3, serialNumber=52868B0901F55B4078B91A73451CA6D22312C8AB
        Validity
            Not Before: Oct 18 19:25:00 2025 GMT
            Not After : Oct 25 19:25:00 2025 GMT
        Subject: CN=68f3e98c-c59a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:07:3e:10:28:6f:5c:a9:dc:af:b1:76:ed:83:
                    ed:d8:8c:4a:26:e1:ea:e6:bc:6e:6a:c3:38:c3:6f:
                    ef:e5:ac:fc:e3:d7:41:64:ca:87:12:82:54:b6:f4:
                    ca:69:a4:02:af:64:a5:52:65:81:26:cd:b6:0e:46:
                    ff:0f:47:5d:0d:2f:3c:48:fd:a8:44:c8:d3:be:94:
                    92:16:e1:14:4e:ba:f9:94:37:27:76:25:22:c0:02:
                    83:f8:b6:ba:7f:99:e0:df:b2:78:09:cd:f6:9c:f1:
                    8e:20:03:4c:c3:35:2d:17:3e:3b:2b:1e:81:21:d0:
                    8b:af:14:0f:09:18:0d:a7:c3:ca:4c:38:2b:0c:3a:
                    2e:f6:ed:d8:59:14:60:8f:db:9c:e5:64:9a:79:fc:
                    83:0b:ad:e4:39:b1:e6:a5:ee:7f:f1:e2:b1:71:f0:
                    75:c8:72:95:cf:0c:7b:1f:ef:09:57:5b:60:af:90:
                    e0:c7:49:ba:ed:cd:eb:61:09:c9:ee:be:c0:b6:af:
                    e9:1e:f1:2f:44:e3:ff:a8:10:26:fb:67:b8:29:6c:
                    93:72:9c:ce:1b:56:d6:87:88:da:8c:2c:87:33:2e:
                    1e:1b:a5:60:e0:32:7f:87:9e:9b:a0:4d:7e:62:18:
                    14:12:24:f1:29:19:09:42:46:da:f0:c4:94:51:35:
                    77:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:56:39:57:13:3A:B2:1E:EA:5A:24:A5:9C:99:38:17:3F:15:0A:E9
            X509v3 Authority Key Identifier:
                keyid:52:86:8B:09:01:F5:5B:40:78:B9:1A:73:45:1C:A6:D2:23:12:C8:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoaLCQH1W0B4uRpzRRym0iMSyKs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:12:b3:f8:18:e0:b1:a6:1a:b8:21:6b:3e:de:b7:23:bb:18:
         04:1e:a7:8a:e2:16:6a:1f:43:79:67:24:60:fc:c2:b5:27:b3:
         bb:36:4d:ed:a9:d4:ff:8a:a8:b9:00:82:a4:d0:b7:0f:0e:6c:
         33:08:cc:36:5d:9b:77:c5:2d:7f:96:95:b3:25:ee:3f:b9:67:
         15:79:a3:d9:70:81:a6:57:f8:45:8e:7b:61:2b:99:e3:61:41:
         d4:69:8c:5e:e5:de:31:14:5b:c3:47:e8:fd:b9:19:46:cf:88:
         c9:64:1f:c4:86:6c:ab:b5:3a:16:e0:0d:8a:74:58:56:6c:76:
         cb:47:40:50:00:9f:81:0f:d9:9d:be:af:16:97:7a:8c:02:70:
         f8:3e:77:a5:45:28:3a:41:5f:fa:ed:46:fb:f9:8b:6d:aa:f6:
         28:46:2f:87:82:ed:0f:a7:86:f9:f4:bd:85:f2:f8:8c:65:09:
         a4:3d:35:e0:fd:5f:b2:8c:42:2f:f4:e5:15:b2:fa:85:e7:6e:
         92:3b:14:c1:54:22:c1:bd:ff:91:6e:66:b7:8f:15:71:c2:0f:
         d4:f6:de:7b:32:85:a9:e8:8d:a1:26:7a:9f:21:b6:5e:f5:15:
         4f:fe:0c:63:29:99:3e:c1:a4:14:d2:99:81:7d:6b:6d:1e:61:
         35:5f:d9:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:32:06 2025 by rpki-client