Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913AFD2/BB01A792590911EBA69D202AC4F9AE02/uDJLQvvF8hOdeQHkF94hA5slJdw.mft
File:                     uDJLQvvF8hOdeQHkF94hA5slJdw.mft (raw, json)
Hash identifier:          vmnT2/ld46Df++O9UA9cT+itkuRcPsjen61ucviOM9A=
Subject key identifier:   5A:D3:05:19:D5:39:7F:5D:82:67:93:1F:A7:9E:2C:76:15:AF:E5:68
Authority key identifier: B8:32:4B:42:FB:C5:F2:13:9D:79:01:E4:17:DE:21:03:9B:25:25:DC
Certificate issuer:       /CN=A913AFD2/serialNumber=B8324B42FBC5F2139D7901E417DE21039B2525DC
Certificate serial:       0700
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uDJLQvvF8hOdeQHkF94hA5slJdw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913AFD2/BB01A792590911EBA69D202AC4F9AE02/uDJLQvvF8hOdeQHkF94hA5slJdw.mft
Manifest number:          06F9
Signing time:             Fri 22 Aug 2025 22:05:44 +0000
Manifest this update:     Fri 22 Aug 2025 22:05:43 +0000
Manifest next update:     Fri 29 Aug 2025 22:05:43 +0000
Files and hashes:         1: uDJLQvvF8hOdeQHkF94hA5slJdw.crl (hash: ajR23wdcdUDhCqlXB9q6EkDtXMX6VyxJrdRSxDEjwLs=)
                          2: A74A1698590A11EB9ECF402AC4F9AE02.roa (hash: 4eRzOG2I//7TY5ChgdSvpUtnnyrP9LtDGhTYUfmfKh0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913AFD2/BB01A792590911EBA69D202AC4F9AE02/uDJLQvvF8hOdeQHkF94hA5slJdw.crl
                          rsync://rpki.apnic.net/member_repository/A913AFD2/BB01A792590911EBA69D202AC4F9AE02/uDJLQvvF8hOdeQHkF94hA5slJdw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uDJLQvvF8hOdeQHkF94hA5slJdw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 22:05:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1792 (0x700)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913AFD2, serialNumber=B8324B42FBC5F2139D7901E417DE21039B2525DC
        Validity
            Not Before: Aug 22 22:05:43 2025 GMT
            Not After : Aug 29 22:05:43 2025 GMT
        Subject: CN=68a8e9b7-bd86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:de:cd:1a:a8:4c:a7:20:51:d5:ce:30:98:41:
                    f6:b0:c1:e0:ff:df:36:34:c3:14:65:b5:23:d5:da:
                    0f:a7:11:dd:7f:18:06:3c:74:e2:34:cc:4d:c2:6a:
                    a9:db:ca:7c:a9:0e:e3:b1:c5:24:e4:3d:b7:27:4f:
                    8f:71:a5:ac:44:3c:3a:02:0d:c0:73:a1:a8:8a:51:
                    01:8e:c8:f7:be:83:89:0a:a1:c2:eb:6a:48:48:e2:
                    61:fd:57:a5:5c:fb:67:91:a5:d4:02:40:ca:57:77:
                    48:13:5f:fa:fe:cd:30:64:c0:9f:d0:39:c1:0b:b2:
                    fd:1e:f6:b2:ef:d0:70:5a:39:5f:c5:17:cd:be:bb:
                    0a:98:68:47:6c:6c:01:f2:f9:ee:21:6b:59:d9:60:
                    f7:a0:04:ca:ff:7d:8e:20:03:9c:c1:8b:d7:b2:6c:
                    8e:d1:c9:e4:63:41:da:b4:f2:7f:91:78:f6:40:7f:
                    3c:fc:84:46:ea:61:0c:13:cd:d0:38:61:51:52:0d:
                    9c:3b:9e:b1:d4:3c:e4:2d:9b:c8:d4:fa:3f:cf:1d:
                    64:0c:d6:a9:89:0d:df:14:99:4c:5f:f7:e0:42:18:
                    36:ad:27:8d:e9:ad:83:cc:7a:4e:67:ba:20:59:04:
                    74:9d:94:1b:3a:4a:1a:7a:8a:b1:44:86:b5:a2:0d:
                    ae:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:D3:05:19:D5:39:7F:5D:82:67:93:1F:A7:9E:2C:76:15:AF:E5:68
            X509v3 Authority Key Identifier:
                keyid:B8:32:4B:42:FB:C5:F2:13:9D:79:01:E4:17:DE:21:03:9B:25:25:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913AFD2/BB01A792590911EBA69D202AC4F9AE02/uDJLQvvF8hOdeQHkF94hA5slJdw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uDJLQvvF8hOdeQHkF94hA5slJdw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AFD2/BB01A792590911EBA69D202AC4F9AE02/uDJLQvvF8hOdeQHkF94hA5slJdw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:e8:e2:2e:a2:ad:d9:73:50:42:91:f3:6f:0c:43:ff:70:09:
         87:1c:b3:cf:1a:d3:69:cd:b5:76:8a:92:ae:65:d3:9a:ee:a0:
         d8:d1:40:52:7a:c5:4f:8f:c4:71:4d:49:e7:d7:b4:71:6d:8e:
         9c:84:54:0a:cd:90:33:70:67:83:97:9f:dc:6b:69:41:bc:8c:
         dd:f2:19:ec:a1:7e:40:51:a1:82:9d:f1:a6:41:56:11:92:e1:
         0b:60:53:9f:6b:fb:07:42:60:d6:b1:9a:81:bf:6f:f9:47:d9:
         6d:8c:af:d6:91:bb:a1:5f:c7:51:83:0e:ae:0b:e7:13:9c:e2:
         91:38:42:21:69:a6:de:e0:53:98:41:fc:cb:95:79:ec:7a:01:
         36:32:d4:fa:80:0b:d2:0e:05:5a:9e:41:64:b9:64:9a:2f:de:
         2f:51:2d:98:11:fd:38:42:98:70:58:78:b6:2b:b1:66:14:71:
         e3:60:e8:67:c3:25:d0:a9:21:45:59:63:ae:cc:50:34:b8:9d:
         2e:ad:ee:87:9f:6c:3e:49:e8:cb:b5:a8:7d:32:cc:7f:b9:60:
         bf:c7:5a:27:c2:a9:67:50:63:90:2b:b1:8e:9c:2b:cb:a6:0b:
         6a:d3:fc:35:82:66:a5:ba:6f:fa:52:7a:de:2d:c4:38:97:6f:
         5e:b7:4b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:15:40 2025 by rpki-client