Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4413/20002C12236711ED97C2EF27C4F9AE02/u4g-aByWIiVDBg6XnT6Chuq2iok.mft
File:                     u4g-aByWIiVDBg6XnT6Chuq2iok.mft (raw, json)
Hash identifier:          8cMzRkL08Flqg5t3U7udxgU8y9r3NsmhjBK6W/ORPYM=
Subject key identifier:   BC:4D:82:84:E6:0B:25:53:CC:4C:19:52:B1:3C:6E:2E:9B:F5:D0:34
Authority key identifier: BB:88:3E:68:1C:96:22:25:43:06:0E:97:9D:3E:82:86:EA:B6:8A:89
Certificate issuer:       /CN=A91A4413/serialNumber=BB883E681C96222543060E979D3E8286EAB68A89
Certificate serial:       028B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4g-aByWIiVDBg6XnT6Chuq2iok.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4413/20002C12236711ED97C2EF27C4F9AE02/u4g-aByWIiVDBg6XnT6Chuq2iok.mft
Manifest number:          0287
Signing time:             Sun 19 Oct 2025 03:48:15 +0000
Manifest this update:     Sun 19 Oct 2025 03:48:15 +0000
Manifest next update:     Sun 26 Oct 2025 03:48:15 +0000
Files and hashes:         1: u4g-aByWIiVDBg6XnT6Chuq2iok.crl (hash: rFix4TMU/Bq9LUs1UjoS/0eQzWiax+KipHC4LkYypjY=)
                          2: 3D3C7DC8236A11ED8018D62BC4F9AE02.roa (hash: ulvwJEE9TrSCR3alPiPFyCbLR3kKPVNTCzyUzxRhzpM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4413/20002C12236711ED97C2EF27C4F9AE02/u4g-aByWIiVDBg6XnT6Chuq2iok.crl
                          rsync://rpki.apnic.net/member_repository/A91A4413/20002C12236711ED97C2EF27C4F9AE02/u4g-aByWIiVDBg6XnT6Chuq2iok.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4g-aByWIiVDBg6XnT6Chuq2iok.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 03:48:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 651 (0x28b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4413, serialNumber=BB883E681C96222543060E979D3E8286EAB68A89
        Validity
            Not Before: Oct 19 03:48:15 2025 GMT
            Not After : Oct 26 03:48:15 2025 GMT
        Subject: CN=68f45f7f-57eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:6d:86:21:f0:42:17:5c:dd:85:da:e6:9b:b6:
                    46:a7:70:21:96:58:de:37:15:7c:a0:06:3e:75:62:
                    f3:9a:5c:00:d0:f9:76:50:5a:aa:47:30:fa:cc:66:
                    03:5e:c8:8a:30:4c:68:e8:be:10:1a:b0:78:45:b0:
                    05:c4:d5:80:71:44:e3:92:c4:43:6e:ee:93:e6:cf:
                    d7:cd:16:d9:9c:b2:50:3b:29:05:af:c1:b3:d0:65:
                    d6:cd:0c:09:49:d2:dc:ee:1b:a0:77:3b:14:d4:67:
                    01:8c:97:16:6b:8d:a7:1d:78:4d:fa:b5:f3:bd:97:
                    24:fd:09:df:89:68:51:5a:9a:f2:90:b4:1e:8e:e1:
                    f4:b1:24:bc:a0:e4:c4:7f:16:0b:b5:c7:2f:ef:62:
                    2e:da:5b:8b:44:ef:76:27:c5:b7:0a:42:14:bf:21:
                    18:ef:2e:d9:8f:de:16:84:32:c1:92:1d:8c:c7:03:
                    2a:36:f7:8f:c4:4b:01:d0:0e:24:44:8d:5f:44:84:
                    47:77:1e:22:fb:ed:dd:01:71:3b:ca:ef:56:fa:34:
                    e0:70:17:88:47:8f:ed:b7:7a:b0:de:34:b9:eb:0d:
                    23:9d:96:6d:6b:e4:a1:2b:27:1f:a4:a4:f0:f5:a0:
                    d3:e9:70:92:32:2b:d8:8f:6b:52:77:39:f1:63:58:
                    4a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:4D:82:84:E6:0B:25:53:CC:4C:19:52:B1:3C:6E:2E:9B:F5:D0:34
            X509v3 Authority Key Identifier:
                keyid:BB:88:3E:68:1C:96:22:25:43:06:0E:97:9D:3E:82:86:EA:B6:8A:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4413/20002C12236711ED97C2EF27C4F9AE02/u4g-aByWIiVDBg6XnT6Chuq2iok.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4g-aByWIiVDBg6XnT6Chuq2iok.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4413/20002C12236711ED97C2EF27C4F9AE02/u4g-aByWIiVDBg6XnT6Chuq2iok.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:cb:a9:37:4f:c6:0e:5a:41:56:fe:48:ee:84:f4:cb:8c:fb:
         c4:4e:09:18:cb:63:af:42:d7:a5:21:09:77:e8:b2:93:60:48:
         cb:eb:19:25:28:59:c9:27:27:f6:2d:a5:21:1e:0c:ee:68:3b:
         88:50:d4:9d:77:e0:a6:46:65:d0:5f:11:fe:c5:70:42:50:ba:
         35:19:47:1d:16:94:54:f9:e8:48:bb:e1:11:e4:c8:d8:b9:9c:
         eb:3f:c5:25:0e:5b:1c:3c:6f:ad:7a:ef:c4:04:43:09:5e:24:
         83:e9:71:11:53:7e:18:b7:c7:06:48:3f:1d:17:2d:18:dc:c4:
         e1:12:b8:d4:08:ff:03:7a:8c:23:70:0f:ea:d5:d1:6b:b0:62:
         63:2b:b2:87:35:92:af:03:ff:7a:66:5e:a1:b8:44:60:3c:7c:
         f9:ab:c6:79:6b:d4:06:d1:d3:34:06:34:6c:3f:51:9b:3d:2d:
         88:cf:58:8f:fd:19:38:bd:a8:1f:45:7c:37:77:72:f0:5d:b5:
         ec:14:95:48:a8:b0:9f:fc:32:86:fe:db:40:e9:73:4b:4f:8a:
         57:fe:36:b8:73:eb:8f:4b:9c:5a:9d:01:58:02:d9:13:7f:ea:
         ed:18:87:50:7b:8c:59:77:a0:36:d6:58:7a:38:38:2e:b0:e3:
         5c:5e:39:c1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTQ0MTMxMTAvBgNVBAUTKEJCODgzRTY4MUM5NjIyMjU0MzA2MEU5NzlEM0U4Mjg2
RUFCNjhBODkwHhcNMjUxMDE5MDM0ODE1WhcNMjUxMDI2MDM0ODE1WjAYMRYwFAYD
VQQDEw02OGY0NWY3Zi01N2ViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3W2GIfBCF1zdhdrmm7ZGp3AhlljeNxV8oAY+dWLzmlwA0Pl2UFqqRzD6zGYD
XsiKMExo6L4QGrB4RbAFxNWAcUTjksRDbu6T5s/XzRbZnLJQOykFr8Gz0GXWzQwJ
SdLc7hugdzsU1GcBjJcWa42nHXhN+rXzvZck/QnfiWhRWprykLQejuH0sSS8oOTE
fxYLtccv72Iu2luLRO92J8W3CkIUvyEY7y7Zj94WhDLBkh2MxwMqNvePxEsB0A4k
RI1fRIRHdx4i++3dAXE7yu9W+jTgcBeIR4/tt3qw3jS56w0jnZZta+ShKycfpKTw
9aDT6XCSMivYj2tSdznxY1hKnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLxNgoTm
CyVTzEwZUrE8bi6b9dA0MB8GA1UdIwQYMBaAFLuIPmgcliIlQwYOl50+gobqtoqJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQxMy8yMDAwMkMxMjIz
NjcxMUVEOTdDMkVGMjdDNEY5QUUwMi91NGctYUJ5V0lpVkRCZzZYblQ2Q2h1cTJp
b2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3U0Zy1hQnlXSWlWREJnNlhuVDZDaHVxMmlvay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NDQxMy8yMDAwMkMxMjIzNjcxMUVEOTdDMkVGMjdDNEY5QUUwMi91NGctYUJ5V0lp
VkRCZzZYblQ2Q2h1cTJpb2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAsy6k3T8YOWkFW/kjuhPTLjPvETgkYy2OvQtelIQl36LKTYEjL6xkl
KFnJJyf2LaUhHgzuaDuIUNSdd+CmRmXQXxH+xXBCULo1GUcdFpRU+ehIu+ER5MjY
uZzrP8UlDlscPG+teu/EBEMJXiSD6XERU34Yt8cGSD8dFy0Y3MThErjUCP8Deowj
cA/q1dFrsGJjK7KHNZKvA/96Zl6huERgPHz5q8Z5a9QG0dM0BjRsP1GbPS2Iz1iP
/Rk4vagfRXw3d3LwXbXsFJVIqLCf/DKG/ttA6XNLT4pX/ja4c+uPS5xanQFYAtkT
f+rtGIdQe4xZd6A21lh6ODgusONcXjnB
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:35:32 2025 by rpki-client