Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft
File:                     UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft (raw, json)
Hash identifier:          +4JE/cUvbHDM/fRldHc0Xbv4LXSGlC32aQweZDT08oU=
Subject key identifier:   5E:96:19:FD:35:72:2C:7E:5E:BF:25:CC:F1:3B:48:75:C4:F6:15:11
Authority key identifier: 51:89:2B:E5:B0:B4:AB:C6:02:54:45:F4:03:9F:C7:95:D8:BA:58:E2
Certificate issuer:       /CN=A9139A90/serialNumber=51892BE5B0B4ABC6025445F4039FC795D8BA58E2
Certificate serial:       FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UYkr5bC0q8YCVEX0A5_Hldi6WOI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft
Manifest number:          F8
Signing time:             Sun 19 Oct 2025 08:07:48 +0000
Manifest this update:     Sun 19 Oct 2025 08:07:47 +0000
Manifest next update:     Sun 26 Oct 2025 08:07:47 +0000
Files and hashes:         1: UYkr5bC0q8YCVEX0A5_Hldi6WOI.crl (hash: EjmT3NX3nPKcIplvaf/IGbtspkR8JvUIirlObpVF0dw=)
                          2: 8B584EC2337D11EF9D71B72DC4F9AE02.roa (hash: yZ1LidZrlFrNTxapIhIsCTEZZK7lTYC0s/4RKHkPEsg=)
                          3: AE977DF8337E11EFB3CCD72FC4F9AE02.roa (hash: OJdZE6RjgM3Hz2T07Mg2BJv0nC0BL01Q/08oABlyEMA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.crl
                          rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UYkr5bC0q8YCVEX0A5_Hldi6WOI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 08:07:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 252 (0xfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139A90, serialNumber=51892BE5B0B4ABC6025445F4039FC795D8BA58E2
        Validity
            Not Before: Oct 19 08:07:47 2025 GMT
            Not After : Oct 26 08:07:47 2025 GMT
        Subject: CN=68f49c54-f8b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:80:f7:9e:50:74:fa:43:da:db:3a:77:a0:d5:
                    c6:b9:69:72:84:73:87:96:d7:dd:5f:2f:77:a1:30:
                    b8:92:13:e7:36:0b:f5:42:24:be:98:9f:6c:35:16:
                    8b:aa:12:c1:dd:a6:04:f7:4c:c2:0e:90:56:66:6c:
                    99:6d:b5:d4:93:62:be:8e:c0:53:c6:e7:ff:2a:61:
                    00:8d:d7:9f:96:8e:14:c7:25:e6:69:f1:d5:28:24:
                    d5:d1:ad:48:7a:be:9e:7d:db:7f:02:8d:74:1c:ce:
                    d0:56:73:e1:23:4c:28:da:f5:09:55:ad:a2:55:bd:
                    a9:c3:5a:86:dc:50:8c:19:04:a2:5b:bf:97:eb:9e:
                    6c:e4:e1:e2:e0:c6:23:4e:ba:89:78:0a:2f:bc:d8:
                    ac:ea:de:74:1b:89:13:95:8b:16:7e:bc:14:de:2b:
                    86:09:40:6c:0e:49:8a:18:4e:b1:3d:94:cc:1d:7d:
                    53:55:47:7f:18:90:67:db:f5:4c:45:9e:be:3b:dc:
                    db:88:a2:68:13:10:72:1b:89:da:4f:06:c7:67:06:
                    f3:63:66:e5:88:2f:d1:65:02:c7:5c:4b:ba:61:61:
                    70:79:c9:ee:be:eb:2b:83:e5:a8:6b:c2:81:0d:35:
                    0e:d4:60:2b:ac:d6:89:d1:5c:85:ed:90:4e:25:4e:
                    4e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:96:19:FD:35:72:2C:7E:5E:BF:25:CC:F1:3B:48:75:C4:F6:15:11
            X509v3 Authority Key Identifier:
                keyid:51:89:2B:E5:B0:B4:AB:C6:02:54:45:F4:03:9F:C7:95:D8:BA:58:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UYkr5bC0q8YCVEX0A5_Hldi6WOI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:9e:2d:91:d5:0d:3b:80:7f:a4:54:5b:af:fe:6b:c9:54:5b:
         26:87:14:a8:24:b0:48:8e:6f:67:b2:89:4a:a2:91:eb:90:44:
         eb:f5:24:31:5d:72:33:27:94:c8:ac:23:36:a9:9d:c1:4e:55:
         a1:e8:d2:3e:c2:65:41:8d:f0:ee:bc:98:a6:b1:3b:fd:72:36:
         d9:ff:0d:90:74:4b:1b:13:f6:a2:1b:af:9f:a3:7b:c0:95:76:
         9c:23:91:76:41:c4:bb:6a:0d:b8:bc:1d:c0:b9:bb:56:42:0e:
         bf:c2:be:65:19:41:53:51:98:46:e5:68:77:2e:c2:67:cb:2c:
         de:99:2f:87:78:a2:7d:8d:61:94:b5:e5:35:0a:1d:56:eb:35:
         20:41:57:9b:03:3a:88:83:a9:9b:09:4e:39:ed:af:cf:8b:af:
         dd:0e:2f:1f:42:57:e6:8c:c0:bc:c0:88:0c:92:25:08:fc:67:
         7a:2d:85:38:63:33:a5:1c:b8:fa:92:60:1a:d8:95:e2:32:a0:
         4b:a5:07:7f:bb:f2:a6:35:cd:65:5c:33:44:22:4a:d7:7b:bb:
         f3:d3:7c:6b:ba:ca:a5:ff:a4:72:a2:a6:fb:0c:70:5a:80:79:
         dd:93:8c:70:cd:f7:b5:04:78:4a:e3:69:5c:bc:44:cc:70:d4:
         5a:f5:cf:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:44:23 2025 by rpki-client