Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.mft
File:                     uaC-_5KvfN4ZAIUFLx9PH5K9pPI.mft (raw, json)
Hash identifier:          aJW+owm5UtWoaY5rbplqWWYo8h3bdkDYfp8+VLHAJ0k=
Subject key identifier:   27:BD:1F:4B:BF:83:66:58:1B:70:38:DA:40:36:D2:49:72:02:68:8F
Authority key identifier: B9:A0:BE:FF:92:AF:7C:DE:19:00:85:05:2F:1F:4F:1F:92:BD:A4:F2
Certificate issuer:       /CN=A9133E16/serialNumber=B9A0BEFF92AF7CDE190085052F1F4F1F92BDA4F2
Certificate serial:       092F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.mft
Manifest number:          092F
Signing time:             Mon 20 Oct 2025 21:05:34 +0000
Manifest this update:     Mon 20 Oct 2025 21:05:33 +0000
Manifest next update:     Mon 27 Oct 2025 21:05:33 +0000
Files and hashes:         1: uaC-_5KvfN4ZAIUFLx9PH5K9pPI.crl (hash: WF8vyJhqSfbUS6j9rSlJPWKlMXdt45axWNwfxYx70v8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.crl
                          rsync://rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 19:55:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2351 (0x92f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133E16, serialNumber=B9A0BEFF92AF7CDE190085052F1F4F1F92BDA4F2
        Validity
            Not Before: Oct 20 21:05:33 2025 GMT
            Not After : Oct 27 21:05:33 2025 GMT
        Subject: CN=68f6a41d-409b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f0:0c:54:cc:64:16:c2:c6:19:df:99:9f:dd:
                    49:f7:9c:bd:5e:c4:d6:b6:a9:bb:05:4b:87:04:52:
                    2b:6a:ed:62:07:0c:b5:89:14:0c:5b:bc:54:cd:a7:
                    40:31:10:bb:65:8e:99:86:08:ce:75:a8:5c:6f:6c:
                    e4:fd:67:a7:b0:ee:f0:eb:aa:ec:55:17:86:48:ae:
                    97:bd:4e:89:75:73:10:b8:3b:0a:2d:ab:da:34:42:
                    d8:d2:57:06:e9:c6:de:3f:c9:5c:88:66:f6:8f:6c:
                    bf:51:9c:e9:b0:29:87:a5:d5:11:a7:48:f9:c3:e7:
                    b3:9c:86:06:d3:a0:a1:f4:05:12:65:f5:78:df:64:
                    c1:35:18:23:8c:d8:30:d8:d1:16:01:ff:cf:ef:13:
                    60:fb:6e:fc:12:ae:a7:67:cc:a1:ce:15:c0:8f:03:
                    04:f5:af:3f:b7:6d:a3:ae:4f:34:2f:4d:1f:2a:34:
                    cd:06:46:d0:a9:2a:61:cb:84:8b:63:94:18:23:bd:
                    27:e3:74:94:80:11:6f:69:58:fd:8d:a4:7e:f8:f5:
                    f8:dc:76:ab:f8:d3:7d:7c:71:39:9a:72:9f:5a:ed:
                    6d:b4:1d:a6:92:02:b8:38:75:b4:e4:28:aa:e1:4a:
                    63:99:4b:f1:47:e9:f1:53:f0:87:ba:4c:59:4b:3c:
                    cf:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:BD:1F:4B:BF:83:66:58:1B:70:38:DA:40:36:D2:49:72:02:68:8F
            X509v3 Authority Key Identifier:
                keyid:B9:A0:BE:FF:92:AF:7C:DE:19:00:85:05:2F:1F:4F:1F:92:BD:A4:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:ea:4b:e1:36:27:85:b1:69:15:62:cd:7b:fc:64:7b:c3:61:
         ab:82:71:cb:43:10:f7:c7:43:3d:06:09:27:ce:f2:f9:b9:11:
         f7:13:dc:0a:c9:b0:cb:32:cf:78:dd:29:9d:e0:b9:11:29:a3:
         69:d4:90:3f:8c:63:24:38:6c:44:4a:03:65:c9:f5:c8:d6:e2:
         46:df:61:ed:0e:66:69:85:78:d7:88:d6:2a:c7:2a:6b:a6:ce:
         44:a5:62:f4:6c:06:4b:4d:d9:f8:8f:8a:ae:f6:8c:0f:a7:63:
         bd:c7:50:26:66:9a:e6:aa:14:88:79:e5:08:5e:44:3d:c0:1b:
         d2:7a:44:7a:86:24:33:4b:98:10:b3:74:07:a5:f2:1a:9f:bf:
         a5:11:49:f3:10:ae:f7:72:ca:71:ab:fe:9a:02:c9:23:79:ab:
         ac:08:cd:4b:cd:7e:66:76:b2:3f:25:21:5f:66:88:69:a6:e3:
         32:e7:ad:9e:4a:f9:42:b9:22:ea:cb:f4:1c:22:ea:81:fd:d1:
         f4:30:ed:44:00:7c:cc:90:fa:5a:75:57:3c:fa:13:30:c5:d1:
         20:68:94:bc:6c:13:8f:ed:b3:4c:8e:96:2b:02:49:79:dd:12:
         23:eb:23:4b:52:60:de:70:98:13:b4:08:db:2f:c0:b4:33:d7:
         93:80:fe:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:04:44 2025 by rpki-client