Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft
File:                     UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft (raw, json)
Hash identifier:          3tYq2WkPh8v/zen4ODVv6C/ggEnNh1RySCXFdo5qNvc=
Subject key identifier:   DF:28:65:B9:5E:F7:FD:7A:FD:87:8E:87:8A:1A:C3:88:7C:C0:A9:C4
Authority key identifier: 51:89:2B:E5:B0:B4:AB:C6:02:54:45:F4:03:9F:C7:95:D8:BA:58:E2
Certificate issuer:       /CN=A9139A90/serialNumber=51892BE5B0B4ABC6025445F4039FC795D8BA58E2
Certificate serial:       DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UYkr5bC0q8YCVEX0A5_Hldi6WOI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft
Manifest number:          DB
Signing time:             Sat 23 Aug 2025 05:41:01 +0000
Manifest this update:     Sat 23 Aug 2025 05:41:00 +0000
Manifest next update:     Sat 30 Aug 2025 05:41:00 +0000
Files and hashes:         1: UYkr5bC0q8YCVEX0A5_Hldi6WOI.crl (hash: HGlBzkZb9ef1wRM6pkuRe2GHkLilXLTRX1dj3cWWEO0=)
                          2: 8B584EC2337D11EF9D71B72DC4F9AE02.roa (hash: yZ1LidZrlFrNTxapIhIsCTEZZK7lTYC0s/4RKHkPEsg=)
                          3: AE977DF8337E11EFB3CCD72FC4F9AE02.roa (hash: OJdZE6RjgM3Hz2T07Mg2BJv0nC0BL01Q/08oABlyEMA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.crl
                          rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UYkr5bC0q8YCVEX0A5_Hldi6WOI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 05:41:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 223 (0xdf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139A90, serialNumber=51892BE5B0B4ABC6025445F4039FC795D8BA58E2
        Validity
            Not Before: Aug 23 05:41:00 2025 GMT
            Not After : Aug 30 05:41:00 2025 GMT
        Subject: CN=68a9546c-0a13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:cc:5c:ad:9a:d8:68:18:fb:30:2f:e0:f1:04:
                    7a:a8:9e:cd:98:bf:f8:be:37:2a:17:5a:61:dc:88:
                    ac:64:5f:7c:fa:a8:87:35:19:49:d7:83:39:60:bb:
                    e1:be:85:a9:c1:23:8c:0b:2b:73:cc:5b:21:21:5c:
                    26:b4:34:ff:6a:ce:9d:1b:cf:63:ff:13:5d:9e:36:
                    b3:55:26:e4:99:64:e1:3b:79:c1:ae:71:c0:a3:12:
                    a1:e0:71:e5:c5:fa:48:22:31:c7:f6:10:30:5a:f1:
                    c4:1f:01:38:cb:d6:4a:b7:38:c2:2f:45:cf:89:a0:
                    d9:ff:4f:eb:f4:38:92:ba:1a:8b:d4:85:31:32:7e:
                    32:03:f1:be:23:55:ba:97:97:c7:ff:49:1d:27:9f:
                    f7:9b:ca:6f:fb:cf:ca:eb:8a:06:d2:6f:80:38:7a:
                    fc:16:7c:02:22:0e:8a:a0:ac:7b:82:fb:17:43:e7:
                    2f:1f:e5:ad:97:07:b0:d9:9e:dd:f4:82:1a:e2:f3:
                    00:3f:e9:2a:20:6e:00:a7:db:b1:d1:85:9a:94:7c:
                    3d:d3:5a:2a:7c:04:05:56:67:d7:be:b3:6f:b1:49:
                    b4:5d:a7:48:6a:7f:93:64:a5:87:9e:bd:6b:33:24:
                    d7:cb:45:d0:e0:c6:34:46:e4:ff:83:8b:7f:64:bf:
                    ac:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:28:65:B9:5E:F7:FD:7A:FD:87:8E:87:8A:1A:C3:88:7C:C0:A9:C4
            X509v3 Authority Key Identifier:
                keyid:51:89:2B:E5:B0:B4:AB:C6:02:54:45:F4:03:9F:C7:95:D8:BA:58:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UYkr5bC0q8YCVEX0A5_Hldi6WOI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:59:17:bd:2a:5f:21:1f:89:45:e6:7b:22:1c:47:1a:28:92:
         07:44:4c:0b:87:2f:ae:67:24:c2:84:4a:24:e8:32:34:78:b4:
         ec:37:84:f6:f6:ef:57:04:5f:56:a5:5b:27:8c:47:c6:58:14:
         72:9c:84:9d:91:9c:95:fd:6a:07:b2:b6:50:1b:ca:94:9f:ff:
         62:d9:51:5f:68:a5:1e:7a:92:b9:80:a3:95:64:b7:2a:2c:8d:
         91:f7:61:66:51:48:55:a9:4d:d3:3c:fc:22:6f:12:76:4b:9f:
         70:9e:7f:3e:fa:fb:c0:7e:7d:10:8c:72:d3:fb:9c:1e:41:66:
         66:18:31:38:60:d4:e5:c2:c1:a0:8b:34:94:51:65:45:64:a6:
         7f:a2:7c:62:36:a3:32:2c:d4:27:a5:b0:03:02:d9:f3:37:a7:
         82:bb:28:b2:cf:1e:96:14:ef:bc:66:b5:46:16:22:02:bb:60:
         10:bc:95:01:32:47:25:ae:6d:d7:11:ef:77:fa:4c:98:3e:e7:
         5d:40:c8:fe:8d:74:54:1b:1b:f6:0b:82:77:07:8f:d1:b3:cc:
         b6:72:66:83:a9:be:85:1c:75:c9:eb:58:a5:36:66:18:ff:c5:
         1a:af:11:9a:1c:42:26:c1:0b:f6:9a:41:e9:61:81:fc:51:6c:
         16:dc:a9:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:36:05 2025 by rpki-client