Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140467/9AA980D6F1E011EA8D4A9E32C4F9AE02/uMMvxNeTGtQkFAcwaguZasjJn-s.mft
File:                     uMMvxNeTGtQkFAcwaguZasjJn-s.mft (raw, json)
Hash identifier:          BdFkcuNBhnPaE+qRPvIcBETJoLb5+UOboZZLd6agKFM=
Subject key identifier:   EF:BC:E6:9B:DC:64:5B:16:8D:F2:9D:2A:75:07:98:C7:CE:20:C9:35
Authority key identifier: B8:C3:2F:C4:D7:93:1A:D4:24:14:07:30:6A:0B:99:6A:C8:C9:9F:EB
Certificate issuer:       /CN=A9140467/serialNumber=B8C32FC4D7931AD4241407306A0B996AC8C99FEB
Certificate serial:       0814
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uMMvxNeTGtQkFAcwaguZasjJn-s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140467/9AA980D6F1E011EA8D4A9E32C4F9AE02/uMMvxNeTGtQkFAcwaguZasjJn-s.mft
Manifest number:          0807
Signing time:             Fri 22 Aug 2025 21:04:49 +0000
Manifest this update:     Fri 22 Aug 2025 21:04:49 +0000
Manifest next update:     Fri 29 Aug 2025 21:04:49 +0000
Files and hashes:         1: uMMvxNeTGtQkFAcwaguZasjJn-s.crl (hash: nLdZO7loJyXG4QXElRtyFGyBWjN9s7VgSJ/6GRBxIxU=)
                          2: 02E60C72F1E211EAA2361B34C4F9AE02.roa (hash: af5uMeHzt9MTz6ZREM+PIjD4gLSqGSG2u3tqcHLex6c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140467/9AA980D6F1E011EA8D4A9E32C4F9AE02/uMMvxNeTGtQkFAcwaguZasjJn-s.crl
                          rsync://rpki.apnic.net/member_repository/A9140467/9AA980D6F1E011EA8D4A9E32C4F9AE02/uMMvxNeTGtQkFAcwaguZasjJn-s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uMMvxNeTGtQkFAcwaguZasjJn-s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 21:04:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2068 (0x814)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140467, serialNumber=B8C32FC4D7931AD4241407306A0B996AC8C99FEB
        Validity
            Not Before: Aug 22 21:04:49 2025 GMT
            Not After : Aug 29 21:04:49 2025 GMT
        Subject: CN=68a8db71-d084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:df:52:ed:77:3b:84:27:64:fb:cc:19:ac:a9:
                    a5:6c:d9:71:f9:8e:eb:dd:33:4b:b5:ec:55:79:9e:
                    92:46:20:6d:ce:c5:79:d0:20:b7:0d:cb:46:36:be:
                    dc:64:ae:af:d0:dc:c2:43:de:91:61:d9:4b:78:5d:
                    52:cd:6c:d1:c4:ca:a1:5a:8f:c6:02:50:03:a6:ed:
                    9c:de:cc:8f:61:0b:08:1a:cb:46:e8:be:cb:b9:80:
                    bf:ae:91:12:19:93:dc:cf:34:28:2a:5d:b6:73:90:
                    8f:84:d2:bf:5f:18:d8:4b:c9:c5:ef:0a:77:4f:4c:
                    f7:22:4a:98:1a:61:e9:36:f7:33:87:83:72:8f:03:
                    3a:cc:1c:11:96:f5:3e:d8:f7:16:3b:b9:ca:3b:88:
                    f3:02:5a:bd:42:6f:d4:8c:03:d1:f1:2c:56:5b:6f:
                    02:d8:09:5a:86:66:60:f6:ae:1b:bf:3b:60:12:d3:
                    c0:15:a1:4b:c1:c3:c1:c0:18:f4:20:e3:9f:58:05:
                    b1:93:cf:e5:33:90:95:22:93:2e:8b:fb:ba:6e:5d:
                    3d:b7:80:2f:b6:ac:c7:72:cf:34:80:f3:70:b4:95:
                    fc:72:52:b8:f7:b4:4d:b8:42:40:b6:83:32:c7:39:
                    23:2d:64:8b:41:cc:d8:6a:b6:4e:c1:29:3a:e7:45:
                    a5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:BC:E6:9B:DC:64:5B:16:8D:F2:9D:2A:75:07:98:C7:CE:20:C9:35
            X509v3 Authority Key Identifier:
                keyid:B8:C3:2F:C4:D7:93:1A:D4:24:14:07:30:6A:0B:99:6A:C8:C9:9F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140467/9AA980D6F1E011EA8D4A9E32C4F9AE02/uMMvxNeTGtQkFAcwaguZasjJn-s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uMMvxNeTGtQkFAcwaguZasjJn-s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140467/9AA980D6F1E011EA8D4A9E32C4F9AE02/uMMvxNeTGtQkFAcwaguZasjJn-s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:05:82:89:ae:03:c8:1b:64:90:19:a5:60:95:06:0f:ef:3a:
         27:de:32:4f:76:0a:3c:21:e4:bd:0d:b4:74:a4:5c:49:d1:49:
         1d:3d:b9:a5:79:66:ca:ac:88:5c:5a:51:76:80:16:fe:0c:08:
         60:44:de:b6:5e:a3:ba:42:84:cf:55:fd:8c:3e:14:88:58:74:
         17:70:3e:ce:69:63:ba:aa:11:b2:e0:eb:be:fe:85:c9:e9:ca:
         eb:80:84:f5:f0:ee:7b:22:a8:41:45:22:e3:d7:96:bf:91:c5:
         6a:29:6a:9b:dc:e1:1b:6c:57:04:00:8e:ea:27:57:cc:e3:d5:
         4a:b4:f0:d2:3e:83:db:d5:e2:ee:2e:e3:2d:ab:2a:ec:cd:87:
         2f:ed:85:2a:f7:54:65:96:21:74:b7:58:24:d4:76:f2:8d:d3:
         35:04:d6:0c:10:92:33:f0:6a:16:13:f6:96:85:37:5c:44:a1:
         9e:66:3d:f1:cb:34:84:28:db:ad:ea:a2:46:17:37:92:fc:69:
         27:24:02:81:0c:b4:80:95:ec:c7:bd:c6:37:f4:45:3e:96:f1:
         53:c0:31:9c:cb:c7:60:51:13:73:8d:a7:f2:ef:fa:34:a5:97:
         3c:a0:10:7f:f4:2f:6d:99:9c:6a:f8:1b:5a:43:25:20:ad:e4:
         a7:af:d4:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:39:24 2025 by rpki-client