Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.mft
File:                     UHOVHlwVgmk6hwcu5UjGVIWwWiw.mft (raw, json)
Hash identifier:          LXZYywNBDhEnKmsf5ZuVjqXhKJ0ZS6zpncNYYAMaKpU=
Subject key identifier:   9C:75:0F:DA:0B:9F:F4:49:B8:35:F9:00:3D:BE:40:A0:5E:9F:C7:A9
Authority key identifier: 50:73:95:1E:5C:15:82:69:3A:87:07:2E:E5:48:C6:54:85:B0:5A:2C
Certificate issuer:       /CN=A91EEE06/serialNumber=5073951E5C1582693A87072EE548C65485B05A2C
Certificate serial:       04D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHOVHlwVgmk6hwcu5UjGVIWwWiw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.mft
Manifest number:          049D
Signing time:             Sun 19 Oct 2025 01:55:44 +0000
Manifest this update:     Sun 19 Oct 2025 01:55:43 +0000
Manifest next update:     Sun 26 Oct 2025 01:55:43 +0000
Files and hashes:         1: UHOVHlwVgmk6hwcu5UjGVIWwWiw.crl (hash: DZBoC5Iz59a6t7HtpDhq9bibucFHsPneiqbxwrG3s2M=)
                          2: DEBDCECAC2CF11EFA805380FC4F9AE02.roa (hash: fbHNG5VnI5vBavVCzw8LniM5caV6eOPIQLCn1UeldBc=)
                          3: 0294E1EADB0D11EE88489759C4F9AE02.roa (hash: LFGX/jVfbWAISfHlUtm9x1tFR24hTnDvuTIOnrEtJuY=)
                          4: 01CF36F2DB0D11EE88489759C4F9AE02.roa (hash: Bc41Sc+m7v/fikpnEXBGH8owwIIMKnoEIMrJsvVIo78=)
                          5: 0104D0BADB0D11EE88489759C4F9AE02.roa (hash: KdbVV+GEXY2BL9mYf6LHh/aKsgwvJc/K6FH7hj47FDo=)
                          6: 71A1BB74759711EFA89BA96BC4F9AE02.roa (hash: OehIWzlmpLn+tHX2OGp9aRhBba8Lt99w8j7PUJDnUtU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.crl
                          rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHOVHlwVgmk6hwcu5UjGVIWwWiw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 01:55:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1232 (0x4d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EEE06, serialNumber=5073951E5C1582693A87072EE548C65485B05A2C
        Validity
            Not Before: Oct 19 01:55:43 2025 GMT
            Not After : Oct 26 01:55:43 2025 GMT
        Subject: CN=68f4451f-b7be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e7:b0:cc:11:0e:28:91:a5:39:1c:70:cc:a9:
                    78:6f:c8:a5:1d:bc:8b:88:50:b5:06:ab:e5:97:08:
                    16:29:9b:37:80:75:e0:bb:64:23:75:88:72:6a:cf:
                    ac:a2:9a:e2:46:87:64:ea:63:dd:b8:bd:b6:39:17:
                    ce:c6:91:70:31:33:09:59:7f:1f:9a:f3:2e:b7:db:
                    6e:dc:58:30:1e:aa:a1:8e:9c:fb:f2:50:8e:3f:83:
                    65:d6:20:dd:8d:a1:db:56:50:82:64:9a:f6:90:e7:
                    7c:44:1d:4c:42:51:c7:02:c3:55:e6:57:a9:81:e8:
                    2a:e6:45:53:53:20:f9:56:5f:bf:13:b4:08:29:6a:
                    16:55:50:ae:5e:9e:f7:25:3d:35:63:2e:ed:8e:23:
                    36:44:c0:1e:3d:e7:db:76:f7:23:c3:c8:e2:63:30:
                    2e:09:f1:3c:89:aa:de:53:a4:c4:c3:5b:60:95:02:
                    5c:12:4a:4e:9a:bc:cc:2e:90:b0:06:be:09:9c:94:
                    ba:3f:97:67:e7:3b:04:93:98:3d:98:19:51:d0:74:
                    9c:10:c9:e3:45:c9:3e:17:88:e2:e2:da:71:82:6a:
                    ba:81:1e:5b:cb:e6:c9:2d:6c:21:44:29:27:df:40:
                    5c:cf:49:ba:f6:70:30:92:af:41:03:b1:2e:78:08:
                    c1:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:75:0F:DA:0B:9F:F4:49:B8:35:F9:00:3D:BE:40:A0:5E:9F:C7:A9
            X509v3 Authority Key Identifier:
                keyid:50:73:95:1E:5C:15:82:69:3A:87:07:2E:E5:48:C6:54:85:B0:5A:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHOVHlwVgmk6hwcu5UjGVIWwWiw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:31:64:aa:8a:57:9a:2a:26:74:7a:9c:0c:b0:20:92:fa:cc:
         aa:88:9d:09:e5:e4:6b:dc:97:a6:65:97:95:34:20:e2:12:f5:
         d2:70:f9:93:9c:f3:a2:b5:1a:9b:87:37:5d:8f:a4:a4:12:b0:
         cc:72:4f:9d:ca:1a:31:c6:ea:39:81:e2:97:9e:e5:ca:49:23:
         e6:78:d8:36:48:5b:ac:f5:3e:48:76:c9:23:a0:c0:84:ff:29:
         73:f5:1e:68:2e:31:5d:1a:73:1e:c7:20:22:1c:2e:a2:89:b1:
         49:28:c7:39:41:00:3c:a0:4f:e7:cb:f9:59:d3:85:41:cf:70:
         4d:07:08:03:fd:a1:1a:c7:c7:5e:b3:bd:62:79:fd:74:44:b2:
         79:78:7c:43:74:b0:2b:2f:a3:cb:59:65:a8:8a:93:0e:81:4c:
         d7:8b:fb:62:67:6a:1c:e9:a6:32:3a:fb:36:f0:b8:bf:1c:e6:
         98:61:a0:8f:01:79:38:e0:9c:2d:ec:ce:95:14:c9:4d:8e:5e:
         27:5d:fb:17:71:88:93:70:f6:db:fa:16:70:53:e4:cc:16:30:
         66:3d:17:fb:ba:87:6c:d7:74:08:11:fd:a5:a2:0a:59:c2:7a:
         ca:ca:0c:72:fd:81:bc:9f:96:4f:df:9c:f0:2c:5c:b9:81:b4:
         20:2f:4f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:46:22 2025 by rpki-client