Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft
File:                     0UdMHaQ5s05IfCjCRynmh-CUfXM.mft (raw, json)
Hash identifier:          eq0IUKy3jtiEAzL0VhVgEcwn9O4epF2egRTA4LR0dsM=
Subject key identifier:   93:5C:88:A2:59:42:50:D5:7B:9D:4C:8E:DA:9A:FC:72:BD:C0:B3:BD
Authority key identifier: D1:47:4C:1D:A4:39:B3:4E:48:7C:28:C2:47:29:E6:87:E0:94:7D:73
Certificate issuer:       /CN=A91840A8/serialNumber=D1474C1DA439B34E487C28C24729E687E0947D73
Certificate serial:       0690
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft
Manifest number:          0674
Signing time:             Sun 19 Oct 2025 00:11:09 +0000
Manifest this update:     Sun 19 Oct 2025 00:11:08 +0000
Manifest next update:     Sun 26 Oct 2025 00:11:08 +0000
Files and hashes:         1: 0UdMHaQ5s05IfCjCRynmh-CUfXM.crl (hash: w/X5Agi5+QcULSB2xL1yvyvMukAYgz03IQrO/uvGtXs=)
                          2: AB4B141CA24211ED92C4107BC4F9AE02.roa (hash: gznbpzQsXm6xdg/ldBzHxBtH3yLXVXqXYnLIiSuqeug=)
                          3: DD7CA58EA23F11EDBCDB6D73C4F9AE02.roa (hash: 5xwHH4/f23qWAT+TboZC+tRvenA32AbWJXTfPPug25w=)
                          4: E9FB74DCE57711ECBC483554C4F9AE02.roa (hash: t68ri8+sG+PCgnACutRhiIQMtoo2iXpsz04+S32xy6c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.crl
                          rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 00:11:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1680 (0x690)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91840A8, serialNumber=D1474C1DA439B34E487C28C24729E687E0947D73
        Validity
            Not Before: Oct 19 00:11:08 2025 GMT
            Not After : Oct 26 00:11:08 2025 GMT
        Subject: CN=68f42c9d-d1ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5b:9f:49:40:b5:0d:5f:a1:2a:79:f2:63:d3:
                    32:ed:ec:5b:2d:1d:2d:98:da:a1:7e:82:23:1b:2c:
                    22:c7:3e:0f:f2:6f:49:7d:e2:c2:dc:e2:23:88:20:
                    df:07:4b:e6:18:31:af:03:ca:e1:3f:58:d7:33:ab:
                    24:54:13:fe:50:1c:43:f9:28:01:b0:25:6b:6b:d7:
                    f2:86:a4:e9:d8:db:ed:fe:6a:d9:cc:77:3e:7d:29:
                    80:34:6a:98:60:4a:8d:39:c3:f8:75:09:2d:fd:31:
                    c4:24:d4:08:27:a0:6e:86:45:ce:1b:07:1d:d1:cf:
                    fc:56:db:43:45:44:d5:d4:d2:6a:f6:43:cb:69:8b:
                    70:9f:8a:95:aa:c8:fa:0d:18:05:cd:14:20:e6:4b:
                    39:90:29:62:0a:9c:9d:1f:91:46:59:c2:6f:1a:27:
                    1e:d7:d8:cf:3a:3d:da:14:79:b1:93:15:26:c8:af:
                    c2:a4:67:d7:34:51:16:a3:63:a4:76:3e:56:3b:5a:
                    68:6f:8c:16:3d:65:b2:5c:1b:57:1a:32:ba:58:0a:
                    19:34:12:31:35:92:31:14:86:f0:e7:4c:d6:62:2e:
                    6c:52:c3:f4:2e:06:85:82:5c:6a:14:23:f0:1e:9a:
                    02:7f:83:c5:e3:ad:73:72:e1:98:4b:5d:4a:91:6f:
                    3b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:5C:88:A2:59:42:50:D5:7B:9D:4C:8E:DA:9A:FC:72:BD:C0:B3:BD
            X509v3 Authority Key Identifier:
                keyid:D1:47:4C:1D:A4:39:B3:4E:48:7C:28:C2:47:29:E6:87:E0:94:7D:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:e7:89:f3:c3:5f:94:cc:1e:28:df:ae:60:65:00:0a:4b:17:
         fa:e2:72:f6:0c:de:8b:99:61:df:b3:77:a3:99:28:99:02:3c:
         e3:ac:76:e0:28:20:63:aa:11:b7:38:52:16:02:4d:0d:86:96:
         89:3e:b2:8f:d1:8c:5f:ae:55:c0:82:1e:c5:76:15:f3:5f:5c:
         56:54:5a:c4:a8:77:38:2b:fa:45:51:42:85:11:10:a0:19:76:
         0e:51:d4:1c:67:35:3e:c5:f4:0d:17:68:00:9b:8a:c1:f8:e2:
         1e:aa:e5:36:c8:be:e2:81:07:2e:e7:75:f7:ca:bd:82:9c:65:
         b2:de:1c:e2:88:0e:21:9d:5d:12:ab:cb:d4:9f:25:b0:45:9f:
         0a:85:fd:f2:f3:97:62:58:35:f5:cb:70:e7:5c:cb:8d:0a:c1:
         3d:1d:28:10:b9:0f:f2:71:35:4d:6c:91:4a:9c:5a:52:31:5e:
         79:33:e5:24:6e:98:67:f2:71:c7:33:00:f8:b9:79:22:60:9c:
         c3:a2:ee:08:9f:76:91:7e:41:1b:17:b2:51:1a:c5:89:b7:8c:
         05:83:46:0b:3f:7a:c5:d9:4b:a1:25:04:a0:4b:dc:f1:3d:56:
         39:27:f1:0f:05:9a:c0:b4:4e:3b:1c:b3:9e:37:0d:64:70:1b:
         41:61:cf:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:49:32 2025 by rpki-client