Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft
File:                     u5dqWY5eywXjf6wApbeIjlf1HFI.mft (raw, json)
Hash identifier:          oeGfpFr2m769b0Dm7YACH4wmdviitf2bcsRxxNinqBE=
Subject key identifier:   B7:27:F1:69:39:06:C4:4D:F3:3F:87:E2:C3:DC:88:3B:A6:3E:86:80
Authority key identifier: BB:97:6A:59:8E:5E:CB:05:E3:7F:AC:00:A5:B7:88:8E:57:F5:1C:52
Certificate issuer:       /CN=A91590E3/serialNumber=BB976A598E5ECB05E37FAC00A5B7888E57F51C52
Certificate serial:       1949
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft
Manifest number:          1910
Signing time:             Sat 18 Oct 2025 16:51:10 +0000
Manifest this update:     Sat 18 Oct 2025 16:51:09 +0000
Manifest next update:     Sat 25 Oct 2025 16:51:09 +0000
Files and hashes:         1: u5dqWY5eywXjf6wApbeIjlf1HFI.crl (hash: 9/Y/+UVviCPtZy1NhPI7ubh01dWcKUE6bSbWfy4AmJA=)
                          2: 1295ACC8511811F0BC16C641C4F9AE02.roa (hash: R8XRFOIDeyA0zkEPG1aEWumISmv4uchl7mAPbuAAI+Q=)
                          3: 4D12993446CC11F08EB9471AC4F9AE02.roa (hash: CSY6qOROtmw30A6xQccy8vmsJfZI5dJ5MZbhg1cI3+o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.crl
                          rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 16:51:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6473 (0x1949)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91590E3, serialNumber=BB976A598E5ECB05E37FAC00A5B7888E57F51C52
        Validity
            Not Before: Oct 18 16:51:09 2025 GMT
            Not After : Oct 25 16:51:09 2025 GMT
        Subject: CN=68f3c57d-9fd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:87:af:8d:a8:60:96:b4:18:04:42:d8:40:2f:
                    b4:ed:e1:a4:03:77:9f:0c:57:10:d6:04:d2:df:f2:
                    e7:18:8d:bf:86:ed:e3:68:bc:00:5a:d9:1b:de:21:
                    38:ba:5b:90:44:76:f0:bd:96:e1:23:39:65:dc:68:
                    ae:12:dc:28:6c:06:ae:72:24:fb:18:ae:40:6e:a0:
                    da:33:3c:b5:1c:2c:bc:07:cf:18:02:e0:ea:6b:47:
                    e6:22:b4:1f:e2:2f:d5:74:a3:a3:33:e5:db:94:51:
                    19:0d:fe:9b:80:8b:44:54:63:88:b8:5b:6a:12:5a:
                    f8:36:4f:fc:e2:86:39:fe:58:24:f6:de:6b:80:29:
                    98:5f:eb:72:56:3d:b6:d1:ef:eb:fb:81:4a:67:dc:
                    e9:19:2b:9b:2d:f8:b3:87:42:e9:9c:65:bb:ee:c7:
                    9e:97:b9:77:de:79:33:40:76:c6:92:09:e7:c3:ec:
                    2f:91:56:64:62:79:1c:e1:b5:a7:44:9e:28:ed:b7:
                    01:51:3a:7a:50:05:4f:4c:47:e3:c7:6b:90:c5:fd:
                    d1:90:48:7b:4a:ef:f2:17:64:8a:1a:8b:8e:61:f4:
                    0d:6c:01:90:cc:38:f1:aa:85:6c:12:39:1e:29:d8:
                    29:dd:9b:ac:46:57:47:e5:08:e0:24:33:10:17:b0:
                    3c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:27:F1:69:39:06:C4:4D:F3:3F:87:E2:C3:DC:88:3B:A6:3E:86:80
            X509v3 Authority Key Identifier:
                keyid:BB:97:6A:59:8E:5E:CB:05:E3:7F:AC:00:A5:B7:88:8E:57:F5:1C:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:77:24:10:77:94:b8:24:ef:2e:d0:11:9b:23:c4:07:ae:4d:
         61:84:70:89:76:8a:76:15:88:0e:8e:0b:1e:b0:75:58:9f:4e:
         af:48:da:53:2e:ec:e1:5e:5c:90:dd:1c:87:ae:6a:9d:df:e3:
         85:56:bc:82:03:8d:45:00:e5:73:a1:9e:56:55:d8:96:2f:65:
         63:90:e8:71:25:01:12:87:d9:c1:a7:dc:84:9b:92:cb:64:db:
         f4:03:e9:be:8b:9b:9e:ff:9d:0d:84:17:31:6f:c0:95:8e:33:
         32:22:e4:4f:3e:9e:60:a9:5a:3c:64:45:39:6a:8d:b5:80:7b:
         37:0d:16:86:b9:8b:37:45:2d:0b:f8:de:b1:f6:37:1d:ff:8d:
         d3:94:e0:57:c7:83:cc:e9:64:ba:82:dc:b9:39:7b:db:ed:6d:
         a0:78:d9:f7:c5:93:a0:a3:a8:15:bf:9c:2e:db:ed:4d:0f:6a:
         5c:06:a5:ac:d0:70:de:6e:d4:e4:40:40:08:27:ce:9b:8a:4a:
         77:ea:d4:4c:1a:51:aa:cd:5d:6d:e9:f8:ff:b3:a5:ef:a7:ce:
         00:93:5c:29:e7:db:18:96:2e:5e:fa:bb:b2:16:fa:8e:47:aa:
         5a:2b:7b:e6:54:69:cf:f0:84:ed:a1:3c:c5:84:c2:55:5c:52:
         91:f2:18:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:43:19 2025 by rpki-client