Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.mft
File:                     uaC-_5KvfN4ZAIUFLx9PH5K9pPI.mft (raw, json)
Hash identifier:          y4kgK3R26BtzKdSpU/W23ERaBddIBTqwHkAhMai0UTQ=
Subject key identifier:   68:8D:9C:47:5A:65:13:A5:BB:F4:2F:38:73:AE:65:0C:04:1E:8F:D7
Authority key identifier: B9:A0:BE:FF:92:AF:7C:DE:19:00:85:05:2F:1F:4F:1F:92:BD:A4:F2
Certificate issuer:       /CN=A9133E16/serialNumber=B9A0BEFF92AF7CDE190085052F1F4F1F92BDA4F2
Certificate serial:       08F7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.mft
Manifest number:          08F7
Signing time:             Wed 02 Jul 2025 20:37:07 +0000
Manifest this update:     Wed 02 Jul 2025 20:37:06 +0000
Manifest next update:     Wed 09 Jul 2025 20:37:06 +0000
Files and hashes:         1: uaC-_5KvfN4ZAIUFLx9PH5K9pPI.crl (hash: 5CfNt92JkKav41My3x2yw41/Z39vEttbLA0MYHje7KM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.crl
                          rsync://rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 20:37:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2295 (0x8f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133E16, serialNumber=B9A0BEFF92AF7CDE190085052F1F4F1F92BDA4F2
        Validity
            Not Before: Jul  2 20:37:06 2025 GMT
            Not After : Jul  9 20:37:06 2025 GMT
        Subject: CN=68659872-73aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ed:8c:47:51:66:f4:7f:00:1d:ab:48:aa:1c:
                    17:3d:c0:29:81:cb:b0:63:50:9a:45:1a:d8:b5:35:
                    f8:53:91:e1:49:3c:c2:3b:6c:6d:7f:65:eb:72:f8:
                    81:82:b8:ea:34:16:de:aa:bf:2d:95:8f:e3:36:d3:
                    48:6d:e9:98:8d:e3:ca:f9:a7:f4:55:8f:96:46:ed:
                    67:50:4b:7c:d2:71:39:c3:27:4a:96:a3:cc:4c:1a:
                    37:2c:95:8f:9d:88:51:33:3f:ab:05:ac:1d:e7:0f:
                    28:74:46:3b:dc:40:50:8c:32:33:d3:0d:b7:d2:9c:
                    63:c7:e7:30:5d:f9:42:1d:69:15:d5:16:7f:99:3c:
                    3d:9f:dd:03:ff:db:d2:98:55:75:33:f7:ac:09:b5:
                    6b:f8:3c:24:f3:84:a8:e9:f6:40:27:c9:82:cc:fc:
                    37:97:ae:98:3f:5d:35:7d:dd:1a:06:30:d4:d6:d3:
                    53:98:45:99:eb:00:e1:ce:af:35:5b:64:e1:e7:ae:
                    bf:f7:89:fe:4d:47:7f:78:52:0e:5f:a2:a4:5b:42:
                    1c:ed:fd:05:22:7e:2e:88:3e:21:5d:2f:20:80:14:
                    30:3e:dc:82:d8:f9:fd:40:e5:59:44:fa:dc:82:7b:
                    d1:bb:73:2f:a6:a4:27:7e:83:69:6b:30:37:59:91:
                    d6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:8D:9C:47:5A:65:13:A5:BB:F4:2F:38:73:AE:65:0C:04:1E:8F:D7
            X509v3 Authority Key Identifier:
                keyid:B9:A0:BE:FF:92:AF:7C:DE:19:00:85:05:2F:1F:4F:1F:92:BD:A4:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:05:a4:42:d1:9d:88:42:88:4a:79:63:4a:df:57:06:08:54:
         ed:2f:77:8a:7b:22:2a:e7:88:95:d6:89:95:7a:d6:2d:eb:0e:
         fb:90:b4:f3:46:e5:e8:3b:1f:db:2a:6b:eb:d8:ee:80:ad:d7:
         6d:0a:a6:5a:8d:e9:04:d1:fc:4a:7d:35:8e:a9:f9:3d:cd:e2:
         dd:6f:8a:3e:3d:3d:a6:2f:be:74:33:3a:99:25:e9:f3:77:8a:
         76:ce:10:fc:2c:df:4a:c4:8e:5c:21:b8:46:f6:29:27:0a:f4:
         af:f5:f2:17:0d:ae:f4:2d:96:4d:6e:dd:a7:67:5d:fa:1c:b1:
         8b:78:98:64:72:2a:d9:8f:2c:49:3f:1d:89:5f:a3:28:b9:27:
         e8:bd:3c:47:d2:f2:b2:73:28:35:e2:f6:08:af:2c:bf:c6:a4:
         df:a0:d7:02:c1:94:16:62:7d:ca:35:25:7c:f7:07:45:62:6e:
         a7:ba:10:76:48:44:9c:c7:8c:26:3a:4c:66:51:0f:36:88:f5:
         e0:f0:62:ce:f5:c3:af:68:6b:24:f2:2a:18:bc:3c:db:c1:1b:
         d2:3c:be:a5:97:1c:45:7b:0a:27:9f:d5:cb:8f:3e:66:c3:01:
         d2:00:6c:3a:f0:95:09:2e:28:b0:99:8c:70:e8:58:40:d4:d4:
         9f:6a:dd:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 23:02:22 2025 by rpki-client