Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/usH6Gx5O5DACOyddInpdBDx_lqM.mft
File:                     usH6Gx5O5DACOyddInpdBDx_lqM.mft (raw, json)
Hash identifier:          8D7fyUnNBuARHnpzI9uoRdcxDXrbZOkLF5/FvS9HPPQ=
Subject key identifier:   66:4B:01:FE:D1:53:59:9C:2A:DD:00:F7:09:B2:31:A9:D7:04:F5:68
Authority key identifier: BA:C1:FA:1B:1E:4E:E4:30:02:3B:27:5D:22:7A:5D:04:3C:7F:96:A3
Certificate issuer:       /CN=A913FE55/serialNumber=BAC1FA1B1E4EE430023B275D227A5D043C7F96A3
Certificate serial:       48
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/usH6Gx5O5DACOyddInpdBDx_lqM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/usH6Gx5O5DACOyddInpdBDx_lqM.mft
Manifest number:          46
Signing time:             Sun 19 Oct 2025 10:51:49 +0000
Manifest this update:     Sun 19 Oct 2025 10:51:48 +0000
Manifest next update:     Sun 26 Oct 2025 10:51:48 +0000
Files and hashes:         1: usH6Gx5O5DACOyddInpdBDx_lqM.crl (hash: F/9M7rB5Q8cWv8rbNv8VTvyjLsLV42Q7TkzjS8YshoA=)
                          2: 7D7ECB70480611F08B614210C4F9AE02.roa (hash: PHW92SRejl/mbnatTD1r3a2U+gvK6WAe5C24ZUPT5mA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/usH6Gx5O5DACOyddInpdBDx_lqM.crl
                          rsync://rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/usH6Gx5O5DACOyddInpdBDx_lqM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/usH6Gx5O5DACOyddInpdBDx_lqM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 10:51:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72 (0x48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913FE55, serialNumber=BAC1FA1B1E4EE430023B275D227A5D043C7F96A3
        Validity
            Not Before: Oct 19 10:51:48 2025 GMT
            Not After : Oct 26 10:51:48 2025 GMT
        Subject: CN=68f4c2c5-c319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:35:f5:0c:fc:75:07:38:72:54:d3:cc:49:f2:
                    71:91:c2:f9:c3:69:de:47:85:03:ad:10:4f:5e:15:
                    51:f2:97:52:f0:57:d0:52:af:02:fc:ae:60:c7:33:
                    27:d7:b7:11:b8:17:0a:5b:81:ad:a5:28:04:b1:db:
                    eb:3f:20:d1:93:80:96:7a:11:f6:26:f2:68:01:12:
                    45:71:14:2e:fc:df:f8:03:fc:98:98:32:f9:ea:07:
                    88:7e:ce:06:72:6d:1c:70:e7:d3:8a:fd:0f:0b:b0:
                    4f:00:25:36:db:2c:36:7f:8a:b3:86:23:cb:65:da:
                    24:79:54:ed:02:3a:55:e9:80:de:6f:f9:fd:b5:ee:
                    99:ff:c1:63:18:60:8c:2d:da:e9:db:2f:d9:c8:61:
                    47:3c:4f:8a:3a:70:4e:0f:f0:e7:9c:6b:b3:9b:87:
                    c8:69:e2:d2:fb:e8:f4:d7:e9:7c:ea:8f:2b:73:cd:
                    8c:52:82:a0:39:7e:e8:5c:8c:8a:9a:82:5e:39:84:
                    c4:bd:cc:96:ea:2f:cd:89:f6:88:33:1f:0d:8e:8f:
                    76:e6:67:9f:e2:82:c1:7a:33:fc:07:3c:f4:6f:bf:
                    a3:7e:50:ee:c4:50:a1:e8:ca:53:7e:72:5a:b6:fb:
                    30:52:18:0a:a3:4d:6f:8e:b5:b4:21:01:3b:00:c8:
                    03:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:4B:01:FE:D1:53:59:9C:2A:DD:00:F7:09:B2:31:A9:D7:04:F5:68
            X509v3 Authority Key Identifier:
                keyid:BA:C1:FA:1B:1E:4E:E4:30:02:3B:27:5D:22:7A:5D:04:3C:7F:96:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/usH6Gx5O5DACOyddInpdBDx_lqM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/usH6Gx5O5DACOyddInpdBDx_lqM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/usH6Gx5O5DACOyddInpdBDx_lqM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:ed:82:13:ea:98:b4:08:ca:b2:66:40:36:3e:c3:7b:0e:41:
         d6:0b:52:56:19:75:03:73:88:d2:02:9f:b9:f0:b0:6b:9a:16:
         c3:34:89:99:16:f9:5e:d5:21:91:8f:a0:b8:bb:7d:2e:47:09:
         8c:6c:03:8e:3b:32:f4:a9:7e:b9:32:d4:be:bd:27:0d:23:bd:
         21:ba:c9:9a:9a:dd:80:4b:fd:a9:c7:b9:5c:8a:7f:ee:6e:7e:
         88:57:cf:7a:75:99:c6:36:0f:8f:95:20:5b:e2:b7:85:b2:5a:
         a5:98:72:ad:80:7b:77:38:e0:60:90:3c:0a:3d:9c:72:b3:fc:
         aa:38:4d:9e:a7:dd:cd:c0:1e:d7:fd:33:00:21:15:44:43:2c:
         d7:8f:ff:2f:55:7e:78:76:08:41:74:78:0d:62:1b:b9:18:cc:
         24:14:5c:02:b4:23:92:37:15:e9:71:0d:67:16:8b:dc:11:28:
         46:dd:d1:50:3b:f2:6a:86:b1:7a:9c:1c:17:7a:d9:bc:74:c1:
         b0:ec:cd:9b:a4:9a:1d:b0:ad:31:18:1b:e6:f8:da:44:2e:d2:
         bd:b6:6a:ba:cf:0b:a4:37:87:b8:90:8e:af:01:3a:55:e2:6b:
         5d:59:b2:0a:78:90:77:cb:97:3b:49:fd:79:5f:85:b5:5f:3b:
         8d:f2:8d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:22:19 2025 by rpki-client