Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.mft
File:                     uK3V-E0RutdH--lY1GutO6kTGQM.mft (raw, json)
Hash identifier:          QIb2XJ4Tm3lEzm9pST91g2snuQ6gHIuxid5pfw7dDi4=
Subject key identifier:   C0:48:6A:28:78:34:38:89:90:3C:87:AE:D2:50:89:33:2B:32:6C:FB
Authority key identifier: B8:AD:D5:F8:4D:11:BA:D7:47:FB:E9:58:D4:6B:AD:3B:A9:13:19:03
Certificate issuer:       /CN=A91F86D2/serialNumber=B8ADD5F84D11BAD747FBE958D46BAD3BA9131903
Certificate serial:       03D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK3V-E0RutdH--lY1GutO6kTGQM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.mft
Manifest number:          03CA
Signing time:             Sun 19 Oct 2025 02:38:58 +0000
Manifest this update:     Sun 19 Oct 2025 02:38:58 +0000
Manifest next update:     Sun 26 Oct 2025 02:38:58 +0000
Files and hashes:         1: uK3V-E0RutdH--lY1GutO6kTGQM.crl (hash: 4WOATU9I0DY49hpdfDxfyT2HnT0FdEdgKxwNGLr5y/g=)
                          2: 1A377B907A7811EF9D5ED47CC4F9AE02.roa (hash: 2FKrneZIYdwek2LQDep+qpyFwMcW7v1PTDAdjyafS0U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.crl
                          rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK3V-E0RutdH--lY1GutO6kTGQM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 02:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 981 (0x3d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F86D2, serialNumber=B8ADD5F84D11BAD747FBE958D46BAD3BA9131903
        Validity
            Not Before: Oct 19 02:38:58 2025 GMT
            Not After : Oct 26 02:38:58 2025 GMT
        Subject: CN=68f44f42-04d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b8:2d:53:ad:99:83:40:4b:84:2d:99:c2:da:
                    f8:80:6d:22:2f:14:ea:68:f6:61:e3:70:85:be:2c:
                    33:ba:a9:90:9f:81:44:09:6f:4a:82:c0:b3:b8:55:
                    bd:cb:e8:59:30:75:e2:3b:2c:ed:d0:30:fb:d8:ee:
                    cb:1c:6c:f7:85:2f:42:5e:2c:ff:79:2a:7f:01:62:
                    d2:f6:f1:43:22:18:86:37:5d:35:69:ad:cf:79:64:
                    02:19:5a:59:ec:70:68:fc:8b:b3:c7:34:28:a2:89:
                    c1:a6:11:5d:f4:07:ed:c1:de:5f:37:c0:e7:91:89:
                    1c:a4:6b:ce:7c:9c:52:2b:83:3f:11:91:cd:d2:e3:
                    bb:af:8f:b2:a0:bd:89:26:a2:6a:ae:3e:2b:91:34:
                    c1:6b:82:51:9a:71:48:93:b4:88:53:a6:7b:21:3e:
                    e1:15:38:89:dc:fd:47:6e:e6:27:14:d7:38:b8:bd:
                    a0:09:f4:66:ae:11:f2:3d:bd:41:66:8a:e9:4a:59:
                    64:d3:26:a3:b6:34:32:92:e6:b2:65:f8:c7:73:4c:
                    96:9a:b0:7b:ab:ea:b1:30:95:6a:ef:30:09:d2:e4:
                    36:ed:13:27:b8:86:9b:b7:15:98:e2:b2:97:ce:4c:
                    7f:56:29:d3:a0:e1:78:bf:9e:78:1f:ed:ca:c9:28:
                    ff:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:48:6A:28:78:34:38:89:90:3C:87:AE:D2:50:89:33:2B:32:6C:FB
            X509v3 Authority Key Identifier:
                keyid:B8:AD:D5:F8:4D:11:BA:D7:47:FB:E9:58:D4:6B:AD:3B:A9:13:19:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK3V-E0RutdH--lY1GutO6kTGQM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:dc:25:d1:37:be:38:0a:4f:c5:dc:13:e8:9f:2c:f7:58:41:
         04:9c:05:e8:ad:5c:fb:d2:a3:e4:5d:9a:fc:d3:8e:33:d0:33:
         57:93:ec:e6:41:22:31:89:a8:e3:69:1e:cc:8d:e1:a0:0e:f1:
         9b:b9:cf:2f:80:f0:80:b6:69:3f:fb:35:1c:12:72:fc:08:0d:
         c1:1f:53:50:5c:ec:9d:7d:af:65:32:2b:2f:54:08:4f:d8:9c:
         70:f6:00:f5:21:ae:58:69:a2:68:e3:f8:f9:1e:fa:e3:5c:d3:
         f3:d2:03:ce:40:d5:12:f2:ea:91:4e:29:bf:b6:ce:df:f1:ed:
         7a:f7:71:63:78:4a:40:66:67:26:ea:95:28:64:fc:ab:96:6a:
         26:86:db:6e:64:e5:c7:f7:a6:e4:b4:67:fc:27:76:62:b1:39:
         12:95:9f:39:21:6b:2c:cd:67:9a:bf:fd:21:86:e6:2b:30:1e:
         28:b6:46:23:cb:c2:ff:f5:d3:b4:73:ac:8c:63:b7:c1:fc:f6:
         b2:20:ae:5c:d8:b8:cb:77:f7:14:a6:c0:b7:6e:7b:d0:64:14:
         da:a1:17:18:0d:af:59:19:ef:5d:f2:ab:20:76:f0:58:56:8a:
         c7:62:b9:8b:b0:21:21:42:15:8b:a9:e1:af:94:89:b5:fa:0c:
         20:14:ff:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:20:38 2025 by rpki-client