Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B8A1/A1119CA0DCD111ECBA66D637C4F9AE02/UhRr8Q81lfF6kjn1NmTdbAE-L58.mft
File:                     UhRr8Q81lfF6kjn1NmTdbAE-L58.mft (raw, json)
Hash identifier:          IdrelFdI/mXQJHhBXmkB+Qz7YK0uq3mSbDn0b3JbvmU=
Subject key identifier:   B6:B5:48:08:8E:3C:56:79:93:FB:D9:77:5C:75:7D:63:C7:D5:0E:A8
Authority key identifier: 52:14:6B:F1:0F:35:95:F1:7A:92:39:F5:36:64:DD:6C:01:3E:2F:9F
Certificate issuer:       /CN=A912B8A1/serialNumber=52146BF10F3595F17A9239F53664DD6C013E2F9F
Certificate serial:       0323
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhRr8Q81lfF6kjn1NmTdbAE-L58.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B8A1/A1119CA0DCD111ECBA66D637C4F9AE02/UhRr8Q81lfF6kjn1NmTdbAE-L58.mft
Manifest number:          031F
Signing time:             Sat 23 Aug 2025 01:24:41 +0000
Manifest this update:     Sat 23 Aug 2025 01:24:41 +0000
Manifest next update:     Sat 30 Aug 2025 01:24:41 +0000
Files and hashes:         1: UhRr8Q81lfF6kjn1NmTdbAE-L58.crl (hash: FytvmITLaPeiyjc+ABZFWgCaxpd02zD4kKSsKYQhnG8=)
                          2: 1A922B26DCD711EC87E30728C4F9AE02.roa (hash: XEGSj7dQ6VTCZmneur6OMrLP6cXWkey7miJkuempT94=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B8A1/A1119CA0DCD111ECBA66D637C4F9AE02/UhRr8Q81lfF6kjn1NmTdbAE-L58.crl
                          rsync://rpki.apnic.net/member_repository/A912B8A1/A1119CA0DCD111ECBA66D637C4F9AE02/UhRr8Q81lfF6kjn1NmTdbAE-L58.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhRr8Q81lfF6kjn1NmTdbAE-L58.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 01:24:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 803 (0x323)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B8A1, serialNumber=52146BF10F3595F17A9239F53664DD6C013E2F9F
        Validity
            Not Before: Aug 23 01:24:41 2025 GMT
            Not After : Aug 30 01:24:41 2025 GMT
        Subject: CN=68a91859-581b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:8b:d5:82:5e:3d:04:d7:49:3f:90:55:66:d1:
                    4a:92:43:3c:4a:ca:c3:56:9a:68:15:48:29:40:52:
                    3e:2c:f5:f0:64:df:17:46:6a:7a:30:f7:ea:71:be:
                    74:b2:7e:8d:47:a0:ef:43:6b:38:06:f1:94:5c:9c:
                    56:de:87:a0:89:30:da:59:d5:e4:8b:8f:3e:82:72:
                    fe:52:2a:86:3c:8d:8b:b1:bd:b5:1d:4e:ab:ec:51:
                    23:b1:65:b9:50:19:56:3e:2d:2c:4d:bf:2d:18:8a:
                    23:11:65:85:0b:75:35:30:8a:ea:52:6c:d4:1c:41:
                    d4:8e:ab:cc:42:f0:0a:5e:8e:57:63:31:c9:7d:44:
                    46:e8:5f:5a:26:d6:78:56:06:b9:8f:56:2a:60:83:
                    0b:22:84:72:30:10:5b:b4:19:03:e4:71:3e:13:0c:
                    96:c3:40:1a:b4:24:ef:57:05:e1:77:01:72:63:52:
                    e9:6d:1f:0f:83:bd:3b:74:68:80:a8:62:2a:fc:32:
                    f8:28:57:cd:c6:c3:e7:63:a2:c3:53:99:84:12:f7:
                    ee:e9:e9:2e:47:d9:c8:e8:df:06:0c:76:28:26:41:
                    43:76:58:38:66:ef:f2:0f:50:2d:df:45:00:b8:47:
                    0d:ec:a3:2b:15:bf:c0:9a:df:bb:cf:a9:15:9a:3f:
                    d0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:B5:48:08:8E:3C:56:79:93:FB:D9:77:5C:75:7D:63:C7:D5:0E:A8
            X509v3 Authority Key Identifier:
                keyid:52:14:6B:F1:0F:35:95:F1:7A:92:39:F5:36:64:DD:6C:01:3E:2F:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B8A1/A1119CA0DCD111ECBA66D637C4F9AE02/UhRr8Q81lfF6kjn1NmTdbAE-L58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhRr8Q81lfF6kjn1NmTdbAE-L58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B8A1/A1119CA0DCD111ECBA66D637C4F9AE02/UhRr8Q81lfF6kjn1NmTdbAE-L58.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:01:90:dd:b8:ad:2c:01:08:25:7b:f1:c1:ca:c5:19:3d:6f:
         62:94:f5:da:14:18:96:0a:b5:28:fa:8f:05:5a:51:0b:53:1d:
         c9:63:a9:ce:2a:c3:c7:09:05:c1:a1:18:86:b7:ba:6f:6e:0f:
         53:a9:fc:57:94:ef:b6:48:f5:3f:66:6b:91:3a:81:f3:ec:43:
         e5:51:ba:50:6e:74:9a:b7:fe:8d:36:cc:ac:24:ae:20:ef:b9:
         ec:79:d7:cb:98:00:ac:4e:9c:b5:33:31:67:ae:51:0d:a0:20:
         ac:5d:f1:40:80:25:df:e1:3d:1f:20:35:36:1a:e0:df:82:32:
         db:dd:1d:f7:d0:a8:45:91:c9:46:a6:f8:cd:d0:c6:b6:fb:27:
         95:f9:f4:bb:d3:88:51:38:ce:45:0d:7e:cc:24:ae:10:60:ce:
         78:da:74:51:c7:74:33:5b:4d:a8:af:37:d8:3f:54:97:31:ce:
         b1:1b:ad:08:d9:95:f8:39:11:24:c8:d6:26:4b:34:41:0e:9e:
         c9:67:18:b3:25:2c:62:b1:a9:2d:c0:e8:bb:1d:88:9a:ff:e1:
         bd:8e:e9:0b:bb:f7:64:9a:32:be:23:a8:78:5b:65:b6:0d:a0:
         b6:96:ba:30:6b:eb:4c:fd:92:7f:ba:cb:02:71:be:6d:a5:5e:
         a7:6c:34:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:30:34 2025 by rpki-client