Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.mft
File:                     uXp_AVpzYHTfOERcmAdDeCGdKZU.mft (raw, json)
Hash identifier:          cUZNKc5ThmTwZWFjNB8DtNkvOaLZX+tiTzXYAwLRo9c=
Subject key identifier:   EA:C1:58:05:84:AF:82:4F:CE:BF:95:93:38:C6:76:94:0E:AD:B6:0C
Authority key identifier: B9:7A:7F:01:5A:73:60:74:DF:38:44:5C:98:07:43:78:21:9D:29:95
Certificate issuer:       /CN=A91320D4/serialNumber=B97A7F015A736074DF38445C98074378219D2995
Certificate serial:       0149
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXp_AVpzYHTfOERcmAdDeCGdKZU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.mft
Manifest number:          0147
Signing time:             Sun 19 Oct 2025 07:06:49 +0000
Manifest this update:     Sun 19 Oct 2025 07:06:48 +0000
Manifest next update:     Sun 26 Oct 2025 07:06:48 +0000
Files and hashes:         1: uXp_AVpzYHTfOERcmAdDeCGdKZU.crl (hash: yQaUpUOvUSYeMsfgzQufgOTBI4fbd6ySmRo5i/uLKyA=)
                          2: BAB65090BD7811EEB634A117C4F9AE02.roa (hash: rOfi7pLc2YXhQ9Pw2aUr9rz0+D/rY6Ijcu5KC1k/f/s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.crl
                          rsync://rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXp_AVpzYHTfOERcmAdDeCGdKZU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 07:06:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 329 (0x149)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91320D4, serialNumber=B97A7F015A736074DF38445C98074378219D2995
        Validity
            Not Before: Oct 19 07:06:48 2025 GMT
            Not After : Oct 26 07:06:48 2025 GMT
        Subject: CN=68f48e09-72de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ed:a8:86:0c:8d:dd:57:b4:5d:31:7b:a5:c8:
                    52:ae:b7:74:4c:92:89:3b:f3:ac:bd:1e:dd:f7:20:
                    d9:d2:df:43:84:50:64:0f:0b:12:14:a7:ed:01:e6:
                    c3:39:eb:d8:53:46:53:98:71:95:fe:6a:d4:c3:c8:
                    34:83:58:39:38:10:30:42:3a:05:e5:9f:b3:4a:2b:
                    59:62:a3:78:ac:1b:ca:b4:e5:8e:77:4a:4f:73:c6:
                    bd:81:57:85:46:29:8a:8a:df:ed:dd:9b:e5:f1:d9:
                    b6:5b:3f:87:50:0b:1e:aa:d7:b6:68:fc:b9:cd:b1:
                    a6:f5:fe:93:35:7f:3d:a2:50:68:2b:1c:03:90:f9:
                    0a:a2:65:3f:3a:47:f4:65:a1:84:54:de:59:bc:5c:
                    ac:3d:f7:8c:bd:46:31:07:25:c0:d2:d8:89:a4:ac:
                    fc:9e:ca:1a:cf:2f:a6:24:d9:5f:71:14:8e:ae:75:
                    1a:b9:46:77:b2:38:7d:d1:0d:a7:b2:8a:da:aa:8d:
                    fe:2b:af:4e:bd:ba:67:a3:3d:9a:37:8c:51:49:09:
                    2e:04:9d:f3:cc:08:5d:01:e3:13:75:95:5b:2e:c5:
                    35:9d:62:49:42:8e:6c:12:b6:d9:2e:75:72:98:1b:
                    a9:4a:e7:ce:c2:01:37:d2:44:c3:b1:9b:c6:b5:7c:
                    25:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:C1:58:05:84:AF:82:4F:CE:BF:95:93:38:C6:76:94:0E:AD:B6:0C
            X509v3 Authority Key Identifier:
                keyid:B9:7A:7F:01:5A:73:60:74:DF:38:44:5C:98:07:43:78:21:9D:29:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXp_AVpzYHTfOERcmAdDeCGdKZU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:64:b7:1a:b2:4a:e6:2d:20:f0:6b:e1:97:73:e9:bb:c5:e1:
         d4:a8:06:7e:a1:51:89:4e:94:66:d1:90:1c:68:19:78:9f:29:
         55:12:08:8b:44:fd:1f:da:30:ad:69:12:0a:86:0d:99:03:4e:
         ea:1d:a9:42:15:34:53:89:04:72:4e:78:8a:96:65:51:25:54:
         c7:7a:14:f2:b4:dd:d0:be:ba:06:bb:40:f1:3f:73:3c:bb:34:
         00:af:50:eb:dd:3f:6b:df:65:ee:e5:e8:28:b9:24:d3:ff:a5:
         c9:d9:ac:a8:40:06:da:6d:e5:71:24:93:6b:f3:7d:8d:be:e5:
         c8:21:0d:82:63:0f:e6:57:93:3c:b6:de:93:b5:1c:12:e2:a4:
         d7:ef:2d:b2:f0:63:48:49:27:dc:5c:f6:cb:f3:ca:ec:16:2d:
         8e:df:9e:4a:13:6f:7d:e8:e0:ab:d8:c3:15:d3:59:97:98:af:
         6e:62:9a:3e:f7:b5:a9:f6:f7:04:8c:b5:22:2a:2f:87:f6:f2:
         d5:60:b6:ee:e3:76:af:ac:b1:32:02:01:39:e6:a9:81:bf:4a:
         d3:01:ec:4d:18:7e:d2:65:1e:e2:7f:03:d7:3b:96:c2:6b:a9:
         f7:7b:b4:f6:91:fa:20:11:b0:94:36:11:c5:8a:54:28:40:36:
         33:61:29:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 06:57:54 2025 by rpki-client