Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft
File:                     uOVJaYlT9l5x-4S20zjAisF4Glo.mft (raw, json)
Hash identifier:          vNCh33XwiLE4ZM0n62Oc/snB2miYdYar3qwfXIuL5Us=
Subject key identifier:   5A:97:4E:87:90:A1:08:A1:B8:ED:04:29:B1:37:13:66:E0:30:32:44
Authority key identifier: B8:E5:49:69:89:53:F6:5E:71:FB:84:B6:D3:38:C0:8A:C1:78:1A:5A
Certificate issuer:       /CN=A91B5C70/serialNumber=B8E549698953F65E71FB84B6D338C08AC1781A5A
Certificate serial:       09E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOVJaYlT9l5x-4S20zjAisF4Glo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft
Manifest number:          09CC
Signing time:             Sat 18 Oct 2025 21:02:42 +0000
Manifest this update:     Sat 18 Oct 2025 21:02:41 +0000
Manifest next update:     Sat 25 Oct 2025 21:02:41 +0000
Files and hashes:         1: uOVJaYlT9l5x-4S20zjAisF4Glo.crl (hash: mZFeYAlpmrbKpckL795N81tBs21K90p22Pstuxqg8Hg=)
                          2: 49DDFE0682F511F0B6DCE147C4F9AE02.roa (hash: XUn3CIuvEXS6KPUlF+3czLodjUH67iWEKRvo5E16IQw=)
                          3: 658C5D24A76B11F0A66F9138C4F9AE02.roa (hash: S630ws9prbiv+X73lkiriOtUneLfFYuwhIIx2uOXGSo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.crl
                          rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOVJaYlT9l5x-4S20zjAisF4Glo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 21:02:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2535 (0x9e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5C70, serialNumber=B8E549698953F65E71FB84B6D338C08AC1781A5A
        Validity
            Not Before: Oct 18 21:02:41 2025 GMT
            Not After : Oct 25 21:02:41 2025 GMT
        Subject: CN=68f40071-5612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:af:7f:16:f1:14:4f:32:8d:54:b5:7f:b8:e4:
                    28:c5:d5:da:cf:4a:e4:9d:5b:e2:e8:41:06:5b:7d:
                    29:e8:1b:f1:d4:d8:88:b7:22:1d:aa:ad:39:e8:60:
                    6f:af:70:53:34:33:16:47:8f:3f:bf:83:de:83:38:
                    c8:82:b7:75:57:83:88:14:b2:71:a7:bb:6e:c2:2b:
                    0a:45:5c:a8:ee:0f:06:51:48:91:75:dc:81:67:a2:
                    53:ce:35:a8:30:57:59:0a:df:1a:4f:64:6d:4d:2d:
                    72:01:66:72:38:b8:22:66:93:a6:57:a6:e6:a3:7d:
                    c6:b4:dd:24:af:c3:29:1c:2f:b8:53:e1:5f:d7:c5:
                    3d:fd:0c:c4:f4:ee:bb:c1:55:e1:d9:72:93:ed:00:
                    f9:22:a5:95:34:69:a2:1e:f9:15:c0:19:18:40:c7:
                    6d:46:03:5c:e2:d0:df:49:eb:c8:0a:fe:23:ea:69:
                    c6:77:f9:2f:21:83:9c:d0:4a:05:39:7b:a6:fc:42:
                    ee:bc:1e:90:c7:c8:68:fe:d0:27:ac:45:d8:55:af:
                    ac:49:82:97:01:e1:01:b9:ec:3a:2e:2b:8e:a5:83:
                    2c:90:54:39:a5:0c:cb:a6:80:44:34:17:8e:a9:d1:
                    f6:12:79:ac:43:d3:18:47:bf:5c:c6:30:2a:33:09:
                    9e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:97:4E:87:90:A1:08:A1:B8:ED:04:29:B1:37:13:66:E0:30:32:44
            X509v3 Authority Key Identifier:
                keyid:B8:E5:49:69:89:53:F6:5E:71:FB:84:B6:D3:38:C0:8A:C1:78:1A:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOVJaYlT9l5x-4S20zjAisF4Glo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:5b:f8:10:f4:f9:f3:fc:2f:70:fb:30:0b:48:9f:3a:60:7a:
         0d:6a:3f:96:47:4e:a1:ea:82:a8:bc:32:57:ff:e3:69:da:3b:
         04:db:5b:ce:06:ad:49:38:31:2b:24:75:13:6a:39:10:fa:ee:
         37:51:09:ee:97:81:44:81:9e:b2:3e:18:01:75:ee:f5:dd:bd:
         69:55:ce:f3:9e:ca:01:09:45:52:fc:67:6e:ce:6a:a9:bd:00:
         ff:60:f5:9d:e5:b5:b2:4a:d9:ef:e2:cf:0f:93:76:b2:65:7f:
         91:e7:5b:89:c5:81:a0:19:48:a0:f3:50:67:8f:68:b7:78:24:
         47:06:43:15:e6:bb:20:3d:c9:0a:52:98:ed:99:50:f9:41:53:
         ff:67:6d:b5:28:38:1e:3c:fe:ed:e7:2c:f6:7d:b9:9c:82:4d:
         79:16:cb:6a:09:33:a6:2c:cd:ad:49:04:84:ea:fe:03:48:2a:
         6e:b6:26:95:83:c2:e0:80:e9:bd:4b:dc:2d:6f:30:7d:c6:33:
         01:6e:ec:0b:1c:a9:6f:aa:90:e7:cd:ee:38:11:df:a2:98:e8:
         19:54:5d:7e:af:bc:c3:e5:90:c8:ae:53:af:fa:d2:e9:5c:45:
         f9:c5:ff:3f:f6:a7:96:f5:b6:80:d5:22:51:db:ac:52:9d:44:
         55:0e:a4:ad
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjVDNzAxMTAvBgNVBAUTKEI4RTU0OTY5ODk1M0Y2NUU3MUZCODRCNkQzMzhDMDhB
QzE3ODFBNUEwHhcNMjUxMDE4MjEwMjQxWhcNMjUxMDI1MjEwMjQxWjAYMRYwFAYD
VQQDEw02OGY0MDA3MS01NjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArq9/FvEUTzKNVLV/uOQoxdXaz0rknVvi6EEGW30p6Bvx1NiItyIdqq056GBv
r3BTNDMWR48/v4PegzjIgrd1V4OIFLJxp7tuwisKRVyo7g8GUUiRddyBZ6JTzjWo
MFdZCt8aT2RtTS1yAWZyOLgiZpOmV6bmo33GtN0kr8MpHC+4U+Ff18U9/QzE9O67
wVXh2XKT7QD5IqWVNGmiHvkVwBkYQMdtRgNc4tDfSevICv4j6mnGd/kvIYOc0EoF
OXum/ELuvB6Qx8ho/tAnrEXYVa+sSYKXAeEBuew6LiuOpYMskFQ5pQzLpoBENBeO
qdH2EnmsQ9MYR79cxjAqMwme1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFqXToeQ
oQihuO0EKbE3E2bgMDJEMB8GA1UdIwQYMBaAFLjlSWmJU/ZecfuEttM4wIrBeBpa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUM3MC8yM0EwQUMwNjkx
MDcxMUVBQTNFOTNBNUJDNEY5QUUwMi91T1ZKYVlsVDlsNXgtNFMyMHpqQWlzRjRH
bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VPVkphWWxUOWw1eC00UzIwempBaXNGNEdsby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NUM3MC8yM0EwQUMwNjkxMDcxMUVBQTNFOTNBNUJDNEY5QUUwMi91T1ZKYVlsVDls
NXgtNFMyMHpqQWlzRjRHbG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAMW/gQ9Pnz/C9w+zALSJ86YHoNaj+WR06h6oKovDJX/+Np2jsE21vO
Bq1JODErJHUTajkQ+u43UQnul4FEgZ6yPhgBde713b1pVc7znsoBCUVS/Gduzmqp
vQD/YPWd5bWyStnv4s8Pk3ayZX+R51uJxYGgGUig81Bnj2i3eCRHBkMV5rsgPckK
UpjtmVD5QVP/Z221KDgePP7t5yz2fbmcgk15FstqCTOmLM2tSQSE6v4DSCputiaV
g8LggOm9S9wtbzB9xjMBbuwLHKlvqpDnze44Ed+imOgZVF1+r7zD5ZDIrlOv+tLp
XEX5xf8/9qeW9baA1SJR26xSnURVDqSt
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:26:35 2025 by rpki-client