Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.mft
File:                     Uw0prcD7HPKDfTm7hjQ0hsHHFoI.mft (raw, json)
Hash identifier:          HcHF+m2MZYQeU+EDpjvFKS0q+sMMcZ9WOJEDHAuXx1Q=
Subject key identifier:   06:C7:02:A2:F6:AA:AD:1D:E6:28:A2:2B:E8:6B:39:B6:30:21:4F:07
Authority key identifier: 53:0D:29:AD:C0:FB:1C:F2:83:7D:39:BB:86:34:34:86:C1:C7:16:82
Certificate issuer:       /CN=A91F3AF8/serialNumber=530D29ADC0FB1CF2837D39BB86343486C1C71682
Certificate serial:       07FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.mft
Manifest number:          07F3
Signing time:             Sat 18 Oct 2025 22:17:14 +0000
Manifest this update:     Sat 18 Oct 2025 22:17:13 +0000
Manifest next update:     Sat 25 Oct 2025 22:17:13 +0000
Files and hashes:         1: Uw0prcD7HPKDfTm7hjQ0hsHHFoI.crl (hash: hVKr2vE35q/X4ZxpNnzUl3j5gCpPrczN7EgXNwf85R4=)
                          2: 3791632A030011EB909C3244C4F9AE02.roa (hash: dB3zmsBTd89CRpUWBbCoSsuPQSrK3XC84t7uk9x1cA8=)
                          3: CC08667A7A6011EB9BC9937BC4F9AE02.roa (hash: Z/3rZQtnqfOwNEnHVO1+ydXZ5JjAuPVHRMvibrG3oIc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.crl
                          rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 22:17:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2047 (0x7ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3AF8, serialNumber=530D29ADC0FB1CF2837D39BB86343486C1C71682
        Validity
            Not Before: Oct 18 22:17:13 2025 GMT
            Not After : Oct 25 22:17:13 2025 GMT
        Subject: CN=68f411ea-c5fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2f:b9:4a:33:d3:09:68:8e:26:16:31:b6:bf:
                    2f:16:6c:b4:a2:91:41:17:70:4e:d5:f3:d5:0a:4d:
                    69:23:ad:75:19:b3:6e:a1:0b:2b:84:83:ea:bd:9e:
                    62:bb:43:c8:e4:0b:7a:05:ff:d3:dc:43:bd:ed:99:
                    15:ca:84:ec:cf:88:ca:7c:cb:15:35:c8:c8:92:dd:
                    8b:28:3e:24:ce:9a:fe:71:70:ee:5a:02:3f:e4:cb:
                    0e:17:f0:81:e8:d7:45:9b:01:72:4b:37:6b:2e:4c:
                    a2:e8:c7:f9:e9:28:4f:0f:c8:fd:25:eb:91:48:87:
                    16:dd:84:bb:02:64:db:9c:f3:07:40:b0:b2:59:02:
                    df:36:31:a2:ce:58:cb:0a:f9:79:cf:67:33:79:e3:
                    07:c8:b8:a1:f4:a9:9c:b9:de:1c:f3:30:8c:4e:e8:
                    39:f8:91:be:78:39:ea:3b:f2:d8:57:8a:01:54:40:
                    4a:81:39:67:95:e1:10:05:6e:3c:96:1f:80:ea:d7:
                    fd:bb:d6:e8:6f:78:e6:e7:ed:1d:06:64:e4:e0:ec:
                    80:1c:bf:8e:5a:d8:0f:ad:ad:6f:f0:ef:b8:e4:ba:
                    12:08:79:5b:93:60:d6:ed:15:bf:12:19:19:7c:c6:
                    34:9d:13:a6:c3:cb:09:77:09:a4:57:6f:8f:8a:e3:
                    ba:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C7:02:A2:F6:AA:AD:1D:E6:28:A2:2B:E8:6B:39:B6:30:21:4F:07
            X509v3 Authority Key Identifier:
                keyid:53:0D:29:AD:C0:FB:1C:F2:83:7D:39:BB:86:34:34:86:C1:C7:16:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:f6:29:1c:7b:62:42:d2:03:e1:98:ef:aa:ff:a6:0b:ce:bc:
         46:23:5e:94:76:51:d3:e2:99:c6:84:ed:41:f2:48:45:f1:14:
         43:f4:da:6b:b0:2e:78:26:8e:88:f0:be:ec:6a:c3:eb:33:09:
         40:04:a7:d0:4e:6b:9f:90:55:98:3a:1a:6d:4b:e1:73:11:69:
         d2:da:12:09:41:34:01:f4:ff:b3:c4:a0:0a:ba:cf:2c:73:45:
         93:f5:ea:46:b9:16:44:4d:a1:50:70:66:14:76:3f:dd:7e:79:
         2e:5e:4d:2f:6e:d4:9e:0c:a3:4f:f9:1d:07:61:f6:dd:42:ed:
         86:3f:17:e6:20:54:21:e3:fd:81:ad:f8:7d:19:29:63:bb:a2:
         fb:fc:82:6d:6f:ad:c7:17:12:0b:7f:b6:82:e3:06:1f:a3:2b:
         7e:b4:da:8d:b0:39:13:f0:c3:88:64:9e:5a:c7:64:16:a2:3d:
         8d:37:e0:83:7d:39:9a:48:86:c4:08:fb:d3:2b:27:74:d1:e5:
         d8:a6:04:da:ca:d1:b9:81:2c:14:9c:d2:8d:e0:93:1b:28:f4:
         bf:d3:35:1c:ee:39:a2:16:64:b8:dc:b5:ff:60:57:8c:7b:a8:
         46:8a:c4:6b:e1:1b:b0:54:93:25:93:ee:53:79:24:40:7b:f8:
         00:c8:a8:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:45:33 2025 by rpki-client