Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/C13116F228D311ED8FBD6D6CC4F9AE02/Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.mft
File:                     Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.mft (raw, json)
Hash identifier:          ttZvA3IjLaA50+EeG92Zxsd87y1BX0ZRYQyICoLhLgM=
Subject key identifier:   E7:19:D2:5A:8F:32:A6:CC:6C:3E:F4:89:07:B5:9D:FC:AB:16:D1:D2
Authority key identifier: 52:FE:2B:6B:7F:49:7F:94:F1:D4:92:D1:91:7B:48:64:78:BF:59:D6
Certificate issuer:       /CN=A9125475/serialNumber=52FE2B6B7F497F94F1D492D1917B486478BF59D6
Certificate serial:       0274
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125475/C13116F228D311ED8FBD6D6CC4F9AE02/Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.mft
Manifest number:          026B
Signing time:             Fri 22 Aug 2025 14:20:48 +0000
Manifest this update:     Fri 22 Aug 2025 14:20:48 +0000
Manifest next update:     Fri 29 Aug 2025 14:20:48 +0000
Files and hashes:         1: Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.crl (hash: yikTW0pgMU2iuJUmPDkfnAFi6YTf5fhFRtsWcRrl+GA=)
                          2: 84094296EF5E11EF81B0790EC4F9AE02.roa (hash: Ckg4hw6DabBO2d7okoEF2pancj6gViKBZRAEfAu13oo=)
                          3: DFA79FA2EFD811EE87F4440AC4F9AE02.roa (hash: hQScYTUNqe8SfNNwSXoRwPKv/1EvvMjHkzfsNEe+pKg=)
                          4: C3923CE6EFD811EEB93EE009C4F9AE02.roa (hash: EgTNqiKvmZXEy9LjOSG2dN0ynTpnYuhjXlrpPTL50KA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125475/C13116F228D311ED8FBD6D6CC4F9AE02/Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.crl
                          rsync://rpki.apnic.net/member_repository/A9125475/C13116F228D311ED8FBD6D6CC4F9AE02/Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 14:20:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 628 (0x274)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125475, serialNumber=52FE2B6B7F497F94F1D492D1917B486478BF59D6
        Validity
            Not Before: Aug 22 14:20:48 2025 GMT
            Not After : Aug 29 14:20:48 2025 GMT
        Subject: CN=68a87cc0-3a34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:11:89:ed:2e:13:75:a1:d1:c1:ca:42:cb:8d:
                    e9:e1:58:ce:e0:a7:24:f1:9a:f0:c7:f6:9f:46:3e:
                    53:ac:e2:a0:06:73:95:96:1d:2b:0b:c3:18:6a:c5:
                    60:94:35:e5:a3:25:0c:c5:29:a2:46:a5:71:ab:ed:
                    db:82:6e:9c:b2:65:c2:02:91:79:6e:e2:c0:ab:b6:
                    c2:56:f1:73:11:ab:69:11:42:6e:ee:4a:6c:64:65:
                    34:3d:4b:c3:fe:99:31:2c:75:ed:9b:96:aa:2d:30:
                    d4:14:60:8d:d8:b2:c4:50:a9:86:41:ec:b1:eb:c0:
                    56:de:7e:aa:b0:4b:bb:1d:e5:d9:e5:0c:07:ca:c5:
                    7f:35:15:81:bd:61:43:2b:04:af:a2:64:8f:ae:33:
                    fb:8d:bf:b0:19:3b:0c:91:7b:66:82:c0:72:47:51:
                    0d:56:6b:d8:83:e4:37:0c:35:ae:d7:8d:5a:58:0e:
                    ed:94:92:3c:2a:d5:55:6a:fe:ef:eb:dd:c2:cf:a1:
                    ab:09:21:b8:c5:d7:38:6a:8b:8e:cf:9b:aa:4e:d7:
                    19:a9:7f:38:41:f3:21:70:49:1c:36:6f:59:08:f8:
                    c3:69:37:f1:81:46:b4:8e:75:cc:06:a6:5a:b4:52:
                    9e:a3:61:7c:9b:8a:34:92:a7:a5:ba:1d:3c:a7:00:
                    20:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:19:D2:5A:8F:32:A6:CC:6C:3E:F4:89:07:B5:9D:FC:AB:16:D1:D2
            X509v3 Authority Key Identifier:
                keyid:52:FE:2B:6B:7F:49:7F:94:F1:D4:92:D1:91:7B:48:64:78:BF:59:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125475/C13116F228D311ED8FBD6D6CC4F9AE02/Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/C13116F228D311ED8FBD6D6CC4F9AE02/Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:79:2e:3d:98:6a:ab:28:81:df:01:40:1f:1e:cc:99:f2:14:
         3f:ee:a6:09:e8:49:f3:c5:34:b4:68:53:42:01:63:3b:0a:23:
         53:1c:00:ca:1f:d1:4a:61:51:5a:f3:3f:ed:be:d2:57:7b:13:
         0d:d6:d2:b8:c7:77:f6:92:2e:9a:4c:4a:70:2e:24:c2:12:1f:
         e4:74:1f:6b:c1:2e:35:09:2e:b7:fe:b5:27:c9:60:74:0f:4f:
         94:7a:3e:8f:2b:f6:13:d0:c5:59:3b:d9:77:ab:5a:ca:8e:31:
         e4:d3:49:84:29:4e:62:1d:e7:a4:33:82:81:bd:19:51:9b:e5:
         aa:7c:d3:37:50:7f:f3:55:0e:8c:82:d3:aa:da:37:d0:cc:39:
         28:0a:65:76:13:5b:bd:0b:1a:e7:c7:01:0d:0b:ef:33:1f:e9:
         9d:4c:58:59:0a:ea:3c:18:d0:ad:08:8d:6a:eb:71:e8:68:54:
         4a:a2:4d:8c:a1:b2:80:0d:04:4e:85:7d:f4:a7:4f:2d:ff:da:
         af:e0:ca:0c:f4:cd:57:8a:de:3c:45:a3:e7:6c:66:ba:e8:25:
         e6:60:d6:71:d0:36:8b:4a:c9:45:50:c6:ee:cc:7b:48:e2:6c:
         80:d7:ef:60:fc:74:0b:7a:0a:27:40:05:e9:49:2c:ac:81:cb:
         0d:7e:39:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:05:27 2025 by rpki-client