Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913EF9C/C4FEC288D3EA11EFA66C4760C4F9AE02/uIC429cILNkYtiF73qCXWEWR290.mft
File:                     uIC429cILNkYtiF73qCXWEWR290.mft (raw, json)
Hash identifier:          ryPd9RVBbMNHhpM0ZGiRsVmItyQE2M9LXfZY4xQUqFM=
Subject key identifier:   AA:7D:43:0F:6E:FB:C4:35:5E:AC:31:6F:8B:B8:2C:76:26:03:E5:D9
Authority key identifier: B8:80:B8:DB:D7:08:2C:D9:18:B6:21:7B:DE:A0:97:58:45:91:DB:DD
Certificate issuer:       /CN=A913EF9C/serialNumber=B880B8DBD7082CD918B6217BDEA097584591DBDD
Certificate serial:       92
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uIC429cILNkYtiF73qCXWEWR290.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913EF9C/C4FEC288D3EA11EFA66C4760C4F9AE02/uIC429cILNkYtiF73qCXWEWR290.mft
Manifest number:          90
Signing time:             Sun 19 Oct 2025 09:47:18 +0000
Manifest this update:     Sun 19 Oct 2025 09:47:18 +0000
Manifest next update:     Sun 26 Oct 2025 09:47:18 +0000
Files and hashes:         1: uIC429cILNkYtiF73qCXWEWR290.crl (hash: zOnH/zlsX92vWhh1nGPTgUz0UrPMB9r9UTiSUPKHNtU=)
                          2: 08476846D3EC11EFBFE6E864C4F9AE02.roa (hash: rxJJmD5OYbq6xF7owInMRKSqMF5l2EY96R9IaFA9M1E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913EF9C/C4FEC288D3EA11EFA66C4760C4F9AE02/uIC429cILNkYtiF73qCXWEWR290.crl
                          rsync://rpki.apnic.net/member_repository/A913EF9C/C4FEC288D3EA11EFA66C4760C4F9AE02/uIC429cILNkYtiF73qCXWEWR290.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uIC429cILNkYtiF73qCXWEWR290.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 09:47:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 146 (0x92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913EF9C, serialNumber=B880B8DBD7082CD918B6217BDEA097584591DBDD
        Validity
            Not Before: Oct 19 09:47:18 2025 GMT
            Not After : Oct 26 09:47:18 2025 GMT
        Subject: CN=68f4b3a6-c382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:80:76:25:ac:03:4d:f6:41:0a:82:93:a4:23:
                    9f:8f:6f:55:d5:3a:09:f9:92:53:09:5c:c3:ca:29:
                    13:ac:b3:6a:84:03:a6:04:5f:83:51:5b:7d:49:52:
                    1a:e4:a8:d5:8a:af:7b:8a:79:4f:6a:42:08:48:29:
                    0d:fa:6d:88:94:0c:b4:8d:bd:3e:4d:34:f8:a6:eb:
                    67:54:f3:ec:b4:da:ff:64:8a:b1:3f:fc:63:8c:2c:
                    e8:8b:5b:71:ef:cc:b9:32:36:4e:59:8b:7a:af:62:
                    74:9d:db:2b:1a:b2:33:d3:e6:d2:7a:bc:fc:29:7d:
                    bc:3e:9e:3a:92:ba:2a:1e:e6:dc:87:b5:f1:17:1e:
                    ef:09:2e:3b:2d:1a:ca:10:8c:8d:85:b3:76:9b:85:
                    3c:90:08:9f:b2:29:37:b8:8f:98:c1:4a:d7:42:34:
                    6b:a5:64:d7:35:2e:82:fa:90:14:b9:32:6c:ee:6a:
                    26:be:84:5b:71:d6:be:64:c6:df:09:f4:86:bc:73:
                    04:90:c8:f9:5c:f0:c0:80:f2:ce:bd:3f:cb:13:6f:
                    8c:17:6b:6f:57:60:5f:fd:63:b0:c7:8e:68:99:b7:
                    da:d7:18:6d:05:c9:81:0b:af:80:60:f9:59:1c:c4:
                    c5:b4:5e:00:ba:da:c1:ee:89:7c:33:d8:54:c3:b3:
                    22:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:7D:43:0F:6E:FB:C4:35:5E:AC:31:6F:8B:B8:2C:76:26:03:E5:D9
            X509v3 Authority Key Identifier:
                keyid:B8:80:B8:DB:D7:08:2C:D9:18:B6:21:7B:DE:A0:97:58:45:91:DB:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913EF9C/C4FEC288D3EA11EFA66C4760C4F9AE02/uIC429cILNkYtiF73qCXWEWR290.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uIC429cILNkYtiF73qCXWEWR290.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EF9C/C4FEC288D3EA11EFA66C4760C4F9AE02/uIC429cILNkYtiF73qCXWEWR290.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:0d:bf:84:e4:69:e5:50:e9:33:3b:a1:55:49:0a:5e:51:6e:
         34:05:95:dc:f1:76:e5:a3:f3:ad:9e:1e:e5:17:d7:f0:f7:43:
         cb:72:c3:65:a2:35:a6:31:9f:e2:1f:0c:41:9c:16:ca:51:0e:
         97:b9:92:d0:e4:d5:ef:3e:cf:1c:70:bc:34:fe:dd:19:90:63:
         45:72:d6:7a:42:b5:b0:16:ce:be:14:0b:43:f0:56:3c:b0:d7:
         21:ce:c4:1c:91:bd:cf:4e:ac:46:94:17:b8:ae:85:14:3e:f9:
         c7:7f:3a:28:04:75:23:56:be:b1:6e:c3:9d:aa:51:fe:2f:08:
         fa:e9:3b:c3:45:f8:d3:96:cb:08:0e:66:f6:c4:d2:8f:6d:6d:
         5d:84:a7:e9:fa:77:e3:c2:98:11:2c:40:6f:86:13:b1:03:b0:
         01:99:e2:4c:de:24:f3:d9:39:5d:b6:46:9f:e7:a2:5f:58:ad:
         69:df:ea:4f:37:95:97:34:f3:44:1b:36:bc:25:d2:84:60:c4:
         a7:f7:42:44:c7:8e:f8:37:16:0c:2f:3f:dd:e3:47:54:8a:c6:
         36:32:d4:68:94:c8:f8:1c:99:ce:e4:ac:ba:1b:f8:29:16:68:
         34:70:8d:dd:04:42:73:11:af:57:41:f4:b7:98:be:7b:b5:d0:
         be:eb:f6:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 10:42:15 2025 by rpki-client