Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.mft
File:                     UM3WDPjzEj_evOkIgq83u-PvXEg.mft (raw, json)
Hash identifier:          fjdLHODAQpCrlD99ApuBkw9vK6Eaayi3Hr5369vmCeY=
Subject key identifier:   31:F6:B5:74:10:2E:EC:9A:38:D5:B0:9D:4D:E3:84:F0:3F:F7:E4:F8
Authority key identifier: 50:CD:D6:0C:F8:F3:12:3F:DE:BC:E9:08:82:AF:37:BB:E3:EF:5C:48
Certificate issuer:       /CN=A9122C94/serialNumber=50CDD60CF8F3123FDEBCE90882AF37BBE3EF5C48
Certificate serial:       07B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UM3WDPjzEj_evOkIgq83u-PvXEg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.mft
Manifest number:          07B0
Signing time:             Sat 18 Oct 2025 22:41:11 +0000
Manifest this update:     Sat 18 Oct 2025 22:41:10 +0000
Manifest next update:     Sat 25 Oct 2025 22:41:10 +0000
Files and hashes:         1: UM3WDPjzEj_evOkIgq83u-PvXEg.crl (hash: a72nGg41V4nL55xGdqAlBbmbsKwc+AK2Vj+5sBvyOLs=)
                          2: 5BF797081CF411EBB5ADE642C4F9AE02.roa (hash: v+COy4aJ4vI2kVsinHUDpF8Q9iJxgP+snNqHCNRWWC8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.crl
                          rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UM3WDPjzEj_evOkIgq83u-PvXEg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 22:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1975 (0x7b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122C94, serialNumber=50CDD60CF8F3123FDEBCE90882AF37BBE3EF5C48
        Validity
            Not Before: Oct 18 22:41:10 2025 GMT
            Not After : Oct 25 22:41:10 2025 GMT
        Subject: CN=68f41786-c9f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d1:bc:49:48:ba:27:78:35:56:71:86:57:f9:
                    ea:60:3a:3a:5b:c9:fd:9f:bc:d1:04:f0:47:48:20:
                    a3:92:39:ff:40:58:39:fd:bd:85:d5:d3:1e:ea:62:
                    66:4c:48:b3:71:80:b4:f2:72:b1:b6:af:be:05:76:
                    88:19:d8:15:8f:bb:cd:5e:c8:c2:5c:26:34:e5:b4:
                    d8:f5:d8:bb:5c:2c:9d:57:5e:da:12:c8:63:86:04:
                    09:f9:9f:3b:01:40:fd:e7:64:2c:14:b4:f0:eb:c9:
                    c7:10:cf:41:5c:6d:24:cb:cf:5e:1d:a9:02:cf:05:
                    a0:2f:f0:34:a5:54:fa:bc:c5:88:1a:2c:6a:8e:29:
                    af:c8:9e:f9:58:95:cf:6d:c5:40:f1:07:bb:cb:29:
                    29:66:d9:54:f1:01:a6:36:91:6a:d2:01:72:d1:54:
                    e6:c8:e6:74:8b:c5:fb:1c:5f:a3:08:71:3d:c0:e3:
                    31:2a:8c:29:83:f7:70:c9:85:71:8e:a7:e1:10:c5:
                    11:2a:bb:ac:1a:06:dc:be:d0:3d:64:25:c4:28:87:
                    d8:35:85:dd:3d:dd:82:a8:3f:1c:93:9d:ef:97:df:
                    4a:6c:59:b0:20:a4:ee:c7:72:12:e1:2b:e1:8a:95:
                    52:b2:14:d5:86:6e:08:6c:1d:7b:80:a9:0a:58:c8:
                    cb:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:F6:B5:74:10:2E:EC:9A:38:D5:B0:9D:4D:E3:84:F0:3F:F7:E4:F8
            X509v3 Authority Key Identifier:
                keyid:50:CD:D6:0C:F8:F3:12:3F:DE:BC:E9:08:82:AF:37:BB:E3:EF:5C:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UM3WDPjzEj_evOkIgq83u-PvXEg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:8a:a3:00:c9:87:b3:e0:0c:86:17:f9:05:11:36:42:eb:44:
         23:4e:31:64:ed:c4:82:58:bf:ad:68:f3:5d:73:8b:07:72:70:
         d7:73:98:d0:94:4d:fc:5d:6d:f6:3e:8e:c2:09:63:cb:d9:89:
         f5:a8:4e:bd:18:c4:42:e6:f9:35:06:28:a6:cc:96:0e:b3:14:
         4b:f6:ad:d1:d2:9c:d8:66:36:52:8e:32:dc:8e:78:dc:fd:d2:
         03:ab:cc:2f:e4:27:43:a8:21:19:73:ca:4c:7b:fa:51:92:9a:
         44:6f:62:22:68:a6:7f:19:55:ea:29:62:b9:80:f5:63:a9:fa:
         2a:d7:1f:04:f1:0e:d4:b3:f5:24:e4:28:fb:62:94:dd:86:da:
         62:ef:0f:f5:21:13:ea:65:9d:36:03:a1:0e:3a:6d:80:73:ea:
         79:c1:f4:9b:6c:53:3f:05:70:a9:a0:a2:08:59:43:83:72:18:
         cf:1f:eb:d6:e8:89:63:4f:e1:b1:e8:2f:cc:d1:f4:bb:62:ee:
         f7:b4:cc:a1:21:14:3b:37:6f:da:ea:d8:d7:e2:e0:21:f4:38:
         3a:24:db:eb:91:a0:e9:d9:df:19:64:f5:1e:8d:32:4a:34:f9:
         ee:4c:54:8c:8f:92:d3:25:fc:67:27:1a:3b:60:ad:76:c2:08:
         8e:fe:0c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:32:49 2025 by rpki-client