Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130626/310572EAAF0911E9AF7C4444C4F9AE02/u-ULDcHkp69YCVjW19dBR67ZDG4.mft
File:                     u-ULDcHkp69YCVjW19dBR67ZDG4.mft (raw, json)
Hash identifier:          9D67QXhX768WVxW6GBkiOWaxplJFSGDmdjgXRBz/5+o=
Subject key identifier:   26:51:61:3F:8D:60:B4:33:AC:C3:96:9F:BA:7D:68:0E:6D:66:C5:AB
Authority key identifier: BB:E5:0B:0D:C1:E4:A7:AF:58:09:58:D6:D7:D7:41:47:AE:D9:0C:6E
Certificate issuer:       /CN=A9130626/serialNumber=BBE50B0DC1E4A7AF580958D6D7D74147AED90C6E
Certificate serial:       0E24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-ULDcHkp69YCVjW19dBR67ZDG4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130626/310572EAAF0911E9AF7C4444C4F9AE02/u-ULDcHkp69YCVjW19dBR67ZDG4.mft
Manifest number:          17A4
Signing time:             Fri 22 Aug 2025 17:56:07 +0000
Manifest this update:     Fri 22 Aug 2025 17:56:07 +0000
Manifest next update:     Fri 29 Aug 2025 17:56:07 +0000
Files and hashes:         1: u-ULDcHkp69YCVjW19dBR67ZDG4.crl (hash: JkSRTkg9XjDsRZoXziwY+BFru6Wp6ZUG4Ol5MYsvmhU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130626/310572EAAF0911E9AF7C4444C4F9AE02/u-ULDcHkp69YCVjW19dBR67ZDG4.crl
                          rsync://rpki.apnic.net/member_repository/A9130626/310572EAAF0911E9AF7C4444C4F9AE02/u-ULDcHkp69YCVjW19dBR67ZDG4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-ULDcHkp69YCVjW19dBR67ZDG4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 17:56:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3620 (0xe24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130626, serialNumber=BBE50B0DC1E4A7AF580958D6D7D74147AED90C6E
        Validity
            Not Before: Aug 22 17:56:07 2025 GMT
            Not After : Aug 29 17:56:07 2025 GMT
        Subject: CN=68a8af37-b30d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:c3:d6:b3:2f:0e:ba:f8:fa:ab:49:91:7b:5d:
                    c4:25:d9:fe:2b:65:ef:91:ad:19:4d:30:e4:6b:72:
                    02:d5:2b:a8:dd:eb:9c:51:c4:13:a8:19:2e:61:a5:
                    b0:59:d2:a6:50:9e:29:f8:c7:6f:e1:8e:37:f4:1b:
                    20:74:1c:47:df:71:48:2b:de:11:04:9c:16:6b:de:
                    3d:e7:0b:2b:f0:10:13:04:3a:74:51:f8:de:f3:81:
                    78:4e:10:82:81:ba:93:f8:ec:a7:6e:d7:78:a5:67:
                    a9:29:cc:db:1a:35:e1:bc:96:83:25:6b:59:a1:00:
                    d6:83:6b:19:65:25:87:a3:63:06:40:6e:9b:10:30:
                    b9:79:bf:c6:bc:7d:38:ca:b0:e8:94:0d:92:2e:73:
                    83:1f:12:c0:b7:8d:ec:c1:37:ae:7a:7f:8e:76:62:
                    ca:1f:23:20:ad:cb:b8:31:b0:2b:d5:92:a0:7a:31:
                    a2:9a:76:83:b0:ae:72:ca:e4:1e:f4:09:0d:1e:66:
                    f8:58:e0:01:f5:b7:cf:31:26:35:37:5a:4e:54:c6:
                    e1:bd:b3:29:42:79:6f:e8:0a:44:a9:16:e5:8f:ef:
                    4c:4e:49:7e:7c:02:89:86:32:b8:b4:a1:cd:45:f3:
                    c8:3a:63:18:64:e9:1c:4f:dc:6a:a7:4b:fd:86:d9:
                    cc:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:51:61:3F:8D:60:B4:33:AC:C3:96:9F:BA:7D:68:0E:6D:66:C5:AB
            X509v3 Authority Key Identifier:
                keyid:BB:E5:0B:0D:C1:E4:A7:AF:58:09:58:D6:D7:D7:41:47:AE:D9:0C:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130626/310572EAAF0911E9AF7C4444C4F9AE02/u-ULDcHkp69YCVjW19dBR67ZDG4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-ULDcHkp69YCVjW19dBR67ZDG4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130626/310572EAAF0911E9AF7C4444C4F9AE02/u-ULDcHkp69YCVjW19dBR67ZDG4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:56:90:ba:f9:9c:6c:e2:40:06:e5:c1:b7:7c:3e:82:b1:74:
         ff:7a:83:60:d7:79:c4:44:ee:00:86:3c:c7:9e:88:30:32:b8:
         ef:29:a4:8e:eb:6e:1c:8e:18:67:cf:29:27:9b:c4:0d:12:45:
         44:94:6f:81:34:59:07:29:f6:f4:af:be:d8:6d:19:7a:53:0d:
         e3:92:21:d5:23:ce:90:74:20:01:6e:20:ea:78:95:cb:d2:bf:
         18:30:4f:49:e0:c1:b3:32:8c:b7:6e:b0:41:23:a6:6f:82:40:
         f3:28:49:82:f1:df:fa:db:bc:a3:eb:19:50:9c:a3:67:86:22:
         08:ca:09:01:12:19:54:17:47:2b:39:55:99:5d:52:db:1c:5e:
         64:4b:27:30:33:d4:a8:6b:01:1a:de:17:79:d6:90:27:6e:32:
         69:d0:5d:38:ed:ab:fc:af:50:75:43:f2:b1:c9:c9:f3:76:5c:
         94:26:ba:72:8d:68:fd:f1:cf:4b:ee:f1:8f:db:2b:f2:7c:12:
         a2:33:f8:9a:ed:b8:90:d5:66:77:67:20:a1:4c:b9:29:59:22:
         51:f5:92:22:8d:3a:c3:05:6e:6c:95:b9:b6:f6:90:70:3b:af:
         f2:64:ad:11:d4:96:5e:b5:6a:e1:60:b0:6e:34:79:ad:1d:3f:
         a1:1e:a8:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:23:17 2025 by rpki-client