Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/psUEnf_CZCcfSnelrurkd9fu6vM.mft
File:                     psUEnf_CZCcfSnelrurkd9fu6vM.mft (raw, json)
Hash identifier:          WTu13qeZioc9mC1gVTwby5Mk4GZrPXF89vSs0ReuJeQ=
Subject key identifier:   A7:03:50:7B:2A:F8:BA:C3:DD:37:39:2C:E5:0B:42:44:10:BF:81:2A
Authority key identifier: A6:C5:04:9D:FF:C2:64:27:1F:4A:77:A5:AE:EA:E4:77:D7:EE:EA:F3
Certificate issuer:       /CN=A916683C/serialNumber=A6C5049DFFC264271F4A77A5AEEAE477D7EEEAF3
Certificate serial:       0A2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psUEnf_CZCcfSnelrurkd9fu6vM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/psUEnf_CZCcfSnelrurkd9fu6vM.mft
Manifest number:          0A20
Signing time:             Sat 18 Oct 2025 20:48:19 +0000
Manifest this update:     Sat 18 Oct 2025 20:48:18 +0000
Manifest next update:     Sat 25 Oct 2025 20:48:18 +0000
Files and hashes:         1: psUEnf_CZCcfSnelrurkd9fu6vM.crl (hash: 2pKbTOcRAqbBqF9HOTphH6Lm3ux492PgisnU7M0OvCo=)
                          2: 800F1868BEB311EAAFE28B42C4F9AE02.roa (hash: DJlPhIx4YqqClR2h+Oy9c2Nr2oIq6a7gz2KUzsszzP4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/psUEnf_CZCcfSnelrurkd9fu6vM.crl
                          rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/psUEnf_CZCcfSnelrurkd9fu6vM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psUEnf_CZCcfSnelrurkd9fu6vM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 20:48:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2604 (0xa2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916683C, serialNumber=A6C5049DFFC264271F4A77A5AEEAE477D7EEEAF3
        Validity
            Not Before: Oct 18 20:48:18 2025 GMT
            Not After : Oct 25 20:48:18 2025 GMT
        Subject: CN=68f3fd13-2c05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0e:c2:90:35:23:e6:8d:1c:e5:e2:9a:c5:6f:
                    96:e9:88:ae:9a:ed:3f:da:25:c3:11:d2:42:5f:19:
                    91:73:43:5a:66:55:9c:71:68:f4:0c:52:f3:8b:8b:
                    ec:70:18:af:31:ff:d0:52:f3:b8:c2:28:c5:f7:e8:
                    a7:82:09:46:1c:65:e1:e3:4a:a5:f9:1e:32:53:b4:
                    08:b2:54:bd:38:67:32:8d:9d:d1:5e:c1:1c:d4:8e:
                    58:af:5d:84:b6:fa:89:d9:c4:a4:98:cb:db:0f:8b:
                    60:d8:64:0c:19:f3:0a:a1:1e:cb:a7:56:25:62:20:
                    e5:30:f2:65:bb:a9:16:e9:7b:95:59:b5:c4:a0:1c:
                    93:25:f1:e3:95:c1:10:6c:20:21:1b:e0:5e:85:19:
                    75:c8:f4:51:c3:44:de:7c:1c:e1:17:71:98:33:cc:
                    c8:ad:a0:db:0a:93:52:1d:a7:e7:df:4e:0e:8b:d1:
                    a6:ac:54:69:ce:c1:00:2c:23:29:bf:af:d9:18:6d:
                    1b:06:2c:8d:b5:a5:8b:e3:b7:a3:88:29:b7:b7:ae:
                    6a:ee:8f:21:8e:08:d9:f5:35:9c:03:77:8b:06:ab:
                    8d:00:47:ae:c4:a1:3e:0d:d0:05:4e:8e:74:ad:74:
                    7e:85:1d:48:51:8c:d6:fb:82:f1:cf:9b:0f:7a:2b:
                    0a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:03:50:7B:2A:F8:BA:C3:DD:37:39:2C:E5:0B:42:44:10:BF:81:2A
            X509v3 Authority Key Identifier:
                keyid:A6:C5:04:9D:FF:C2:64:27:1F:4A:77:A5:AE:EA:E4:77:D7:EE:EA:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/psUEnf_CZCcfSnelrurkd9fu6vM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psUEnf_CZCcfSnelrurkd9fu6vM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/psUEnf_CZCcfSnelrurkd9fu6vM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:ba:cd:c7:f9:df:03:cc:da:1d:97:c7:91:1b:d7:cd:6f:02:
         fc:a7:76:83:c5:94:fb:57:21:7a:fb:68:7e:5e:3a:6d:a0:58:
         6d:aa:2f:95:cd:9b:70:9b:e2:0d:4b:b1:e5:6f:72:f1:ec:0d:
         7d:22:11:77:d3:39:b7:35:db:92:47:86:a9:95:32:69:d4:7b:
         0f:03:2f:99:41:6e:82:cd:12:55:41:80:b2:e3:2f:a3:77:bf:
         77:fc:22:9a:4a:e5:31:f0:6b:1d:b7:35:eb:05:57:cc:18:76:
         89:57:27:2c:61:cc:40:15:f9:a7:fd:9f:b2:32:d0:a0:a9:47:
         9c:71:62:b9:32:57:68:d7:df:7b:af:fc:4e:1f:1f:11:ca:56:
         60:a1:ce:77:e4:12:35:8e:30:4d:d4:a1:62:55:e3:81:50:14:
         71:df:bd:37:0f:07:4a:89:30:75:58:02:2e:c8:2e:ce:09:7b:
         b3:a0:3b:b4:24:f5:cc:52:9d:6e:2a:45:35:64:07:91:2c:af:
         79:1f:c5:4c:2f:51:26:9c:42:f6:77:58:f2:26:7d:ff:5a:43:
         54:29:17:6c:6d:61:18:c0:84:24:9d:6e:27:51:30:c7:cc:8e:
         8d:75:87:3f:8e:7e:43:f8:04:78:9f:99:39:59:cd:c1:c6:29:
         a6:d4:66:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:47:22 2025 by rpki-client