Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.mft
File:                     UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.mft (raw, json)
Hash identifier:          QQztuiGnqkXv9Ek4JaAfX3g5CZSUTFY/YAA9Yq/KaIU=
Subject key identifier:   80:02:6D:65:46:ED:70:6B:F0:7C:B4:44:89:07:2D:4A:2B:51:C1:A0
Authority key identifier: 50:FB:B4:03:64:34:73:F9:91:27:36:26:27:7A:92:2C:07:06:AC:57
Certificate issuer:       /CN=A9137242/serialNumber=50FBB403643473F991273626277A922C0706AC57
Certificate serial:       0DB4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.mft
Manifest number:          1586
Signing time:             Sat 18 Oct 2025 18:34:11 +0000
Manifest this update:     Sat 18 Oct 2025 18:34:11 +0000
Manifest next update:     Sat 25 Oct 2025 18:34:11 +0000
Files and hashes:         1: UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.crl (hash: AzbAQuEERU0WOnl6/2wnEE/XyaOt/t01IGzSFkSkZ40=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.crl
                          rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 18:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3508 (0xdb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137242, serialNumber=50FBB403643473F991273626277A922C0706AC57
        Validity
            Not Before: Oct 18 18:34:11 2025 GMT
            Not After : Oct 25 18:34:11 2025 GMT
        Subject: CN=68f3dda3-8dcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3a:fd:f7:b9:7c:98:ed:14:4a:58:ef:00:3f:
                    e9:d6:ce:35:64:83:b1:d5:df:32:ec:c5:8e:f6:a8:
                    94:b9:9a:f7:8d:78:48:0d:c3:2e:9a:3a:ba:47:dd:
                    48:ab:00:18:ac:b7:2f:5f:46:42:6e:2f:b3:d1:1f:
                    36:f5:dc:ac:cb:38:69:df:5d:d4:dc:92:d9:18:16:
                    05:86:90:17:5c:ef:92:88:89:14:93:95:a7:96:5c:
                    35:32:25:63:fa:dc:fa:13:50:44:80:65:fb:4e:06:
                    3b:bf:24:c8:3b:f2:19:28:2d:a6:ab:d7:f2:fc:fd:
                    e5:98:08:89:46:c8:6b:64:d1:72:4d:54:9b:f6:fa:
                    db:0d:5e:ba:a2:5b:d4:04:aa:68:75:fc:65:79:3e:
                    d9:22:e2:5c:ab:08:e7:4a:6b:d8:a5:a0:13:35:e6:
                    e5:7c:f9:b7:c0:25:3f:ab:a3:04:6b:e1:3c:3c:a2:
                    87:2c:0d:da:76:78:8c:d9:a2:03:e5:7a:3f:de:c4:
                    7a:00:ac:e9:94:25:56:03:00:2d:1d:5f:e4:26:e3:
                    e9:47:db:9c:98:5f:b8:13:f3:71:71:7b:33:e7:69:
                    32:56:7a:09:79:5b:82:3e:20:46:b6:e6:99:6a:46:
                    a4:1a:70:db:43:14:eb:68:b3:9a:0b:d1:ef:bf:34:
                    24:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:02:6D:65:46:ED:70:6B:F0:7C:B4:44:89:07:2D:4A:2B:51:C1:A0
            X509v3 Authority Key Identifier:
                keyid:50:FB:B4:03:64:34:73:F9:91:27:36:26:27:7A:92:2C:07:06:AC:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:3f:80:9d:df:64:19:bf:67:c0:36:f9:ed:24:d9:94:c7:28:
         9c:e7:97:e1:d2:c4:a9:58:a4:0c:44:da:aa:ad:6f:28:e6:d7:
         fb:7d:ac:06:5f:95:ed:4e:b7:fa:03:e5:f2:11:54:4d:d1:0d:
         4d:37:79:0d:fb:95:6f:24:0c:d1:cd:9a:dc:38:39:1d:ab:78:
         ae:5f:47:4f:a4:c9:21:e0:20:ab:ee:d5:86:1c:20:13:12:a0:
         4c:de:1f:6c:7d:59:08:f9:e3:83:93:dd:3e:de:95:c7:9d:84:
         5d:53:b0:d5:ec:9d:9d:0f:12:83:b5:20:16:f5:28:d2:1d:e0:
         fc:9d:66:8c:05:81:21:04:95:a0:76:f0:34:80:f1:7d:de:f7:
         51:f8:db:0b:b8:02:f2:66:f2:16:8a:bb:3c:bc:5d:1b:be:6f:
         05:06:1d:54:6c:0f:16:42:cc:b4:e6:4a:c3:4e:8d:5f:97:8a:
         63:19:b2:0c:f3:7b:f5:91:bd:fc:7f:21:f3:93:ff:92:33:80:
         69:78:47:af:a6:3f:f0:cd:b2:25:ea:05:b0:3e:16:be:ee:74:
         a1:4e:d3:e5:9c:2c:dd:90:cc:0c:21:cb:df:c6:79:f3:7e:c0:
         7e:06:00:e6:e5:89:79:ea:97:1c:48:05:d6:da:94:c6:da:2b:
         e2:11:26:b5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzcyNDIxMTAvBgNVBAUTKDUwRkJCNDAzNjQzNDczRjk5MTI3MzYyNjI3N0E5MjJD
MDcwNkFDNTcwHhcNMjUxMDE4MTgzNDExWhcNMjUxMDI1MTgzNDExWjAYMRYwFAYD
VQQDEw02OGYzZGRhMy04ZGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxTr997l8mO0USljvAD/p1s41ZIOx1d8y7MWO9qiUuZr3jXhIDcMumjq6R91I
qwAYrLcvX0ZCbi+z0R829dysyzhp313U3JLZGBYFhpAXXO+SiIkUk5Wnllw1MiVj
+tz6E1BEgGX7TgY7vyTIO/IZKC2mq9fy/P3lmAiJRshrZNFyTVSb9vrbDV66olvU
BKpodfxleT7ZIuJcqwjnSmvYpaATNeblfPm3wCU/q6MEa+E8PKKHLA3adniM2aID
5Xo/3sR6AKzplCVWAwAtHV/kJuPpR9ucmF+4E/NxcXsz52kyVnoJeVuCPiBGtuaZ
akakGnDbQxTraLOaC9HvvzQkMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIACbWVG
7XBr8Hy0RIkHLUorUcGgMB8GA1UdIwQYMBaAFFD7tANkNHP5kSc2Jid6kiwHBqxX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzI0Mi8wQjYwODc5NkNB
MzQxMUU5QkM3NjkwNTVDNEY5QUUwMi9VUHUwQTJRMGNfbVJKelltSjNxU0xBY0dy
RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VQdTBBMlEwY19tUkp6WW1KM3FTTEFjR3JGYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NzI0Mi8wQjYwODc5NkNBMzQxMUU5QkM3NjkwNTVDNEY5QUUwMi9VUHUwQTJRMGNf
bVJKelltSjNxU0xBY0dyRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCQP4Cd32QZv2fANvntJNmUxyic55fh0sSpWKQMRNqqrW8o5tf7fawG
X5XtTrf6A+XyEVRN0Q1NN3kN+5VvJAzRzZrcODkdq3iuX0dPpMkh4CCr7tWGHCAT
EqBM3h9sfVkI+eODk90+3pXHnYRdU7DV7J2dDxKDtSAW9SjSHeD8nWaMBYEhBJWg
dvA0gPF93vdR+NsLuALyZvIWirs8vF0bvm8FBh1UbA8WQsy05krDTo1fl4pjGbIM
83v1kb38fyHzk/+SM4BpeEevpj/wzbIl6gWwPha+7nShTtPlnCzdkMwMIcvfxnnz
fsB+BgDm5Yl56pccSAXW2pTG2iviESa1
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:43:55 2025 by rpki-client