Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.mft
File:                     UDJy2j7wq-3pU5x-JDobhoaxYfs.mft (raw, json)
Hash identifier:          eG3ZZgUceTvMWWNystmLEFiW7V080y71XI19TqnH0cA=
Subject key identifier:   BA:FC:F9:C7:EA:50:43:2B:5A:1E:6F:24:F5:FA:1E:36:51:BA:08:50
Authority key identifier: 50:32:72:DA:3E:F0:AB:ED:E9:53:9C:7E:24:3A:1B:86:86:B1:61:FB
Certificate issuer:       /CN=A9146906/serialNumber=503272DA3EF0ABEDE9539C7E243A1B8686B161FB
Certificate serial:       0112
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDJy2j7wq-3pU5x-JDobhoaxYfs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.mft
Manifest number:          010C
Signing time:             Sat 23 Aug 2025 05:09:08 +0000
Manifest this update:     Sat 23 Aug 2025 05:09:08 +0000
Manifest next update:     Sat 30 Aug 2025 05:09:08 +0000
Files and hashes:         1: UDJy2j7wq-3pU5x-JDobhoaxYfs.crl (hash: f8OinyFSXmFjIIR1GH4usl0if1JcHVykEvlrvg0vnpE=)
                          2: C32999EE391F11EFBFAB6D66C4F9AE02.roa (hash: g8qMHMQ112lEc0CBX6z9UVtKL/qr3OF4595+543HHj8=)
                          3: C3A77BE8391F11EFBFAB6D66C4F9AE02.roa (hash: 7nB9PKLpginNAvHpyeXPNO88VYIsFeVoJ8sBAHLSABo=)
                          4: DADBB0C033A411EF8E99B625C4F9AE02.roa (hash: GE9if/qMDXWukB3XSTMftXVRzAVJimyZd4NP7/FslLk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.crl
                          rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDJy2j7wq-3pU5x-JDobhoaxYfs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 05:09:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 274 (0x112)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146906, serialNumber=503272DA3EF0ABEDE9539C7E243A1B8686B161FB
        Validity
            Not Before: Aug 23 05:09:08 2025 GMT
            Not After : Aug 30 05:09:08 2025 GMT
        Subject: CN=68a94cf4-ff57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:81:1d:87:00:28:0f:c8:ba:5a:d3:01:78:2e:
                    33:1d:74:59:da:9a:de:e5:a3:6f:53:48:73:52:92:
                    fd:f9:76:87:8a:44:de:ab:83:2d:32:71:1a:c1:41:
                    eb:c0:45:4d:c5:bf:ab:a4:d9:38:d7:ee:1a:99:a3:
                    0f:5a:82:a5:d9:15:3b:4d:d1:77:2d:cd:41:43:e3:
                    29:e3:4a:c6:cf:cb:58:ed:bf:e0:16:26:df:91:d3:
                    8a:0f:0c:b8:31:45:bb:e3:91:96:7f:48:4a:9e:fd:
                    20:39:41:67:80:b5:d9:08:d8:08:f1:f4:63:ee:4b:
                    f8:6a:bf:5e:3a:e4:c4:5a:3e:32:0b:b4:70:86:08:
                    60:72:3d:ca:93:4e:94:51:b8:25:37:b1:5a:b4:e9:
                    fd:29:5f:40:9d:b7:c9:d6:50:8a:73:54:50:64:c1:
                    89:31:60:81:38:b2:b7:0b:60:df:dc:92:68:aa:f3:
                    3b:4b:db:8b:8d:3c:1e:3d:06:4a:5a:55:43:83:85:
                    cc:0c:fe:df:7f:e6:1f:c0:fd:9c:7f:a5:b2:f9:12:
                    41:8d:31:fc:c4:78:92:9a:3a:de:10:c1:c7:e1:3e:
                    af:93:f7:a0:87:05:ab:ac:4f:09:16:27:72:e3:61:
                    68:41:34:85:2f:ad:a2:95:f4:29:66:31:70:0d:bd:
                    a1:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:FC:F9:C7:EA:50:43:2B:5A:1E:6F:24:F5:FA:1E:36:51:BA:08:50
            X509v3 Authority Key Identifier:
                keyid:50:32:72:DA:3E:F0:AB:ED:E9:53:9C:7E:24:3A:1B:86:86:B1:61:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDJy2j7wq-3pU5x-JDobhoaxYfs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:88:17:7a:39:ae:91:20:74:7e:5e:e0:b7:9a:60:37:0e:04:
         19:d8:26:b7:0e:11:b7:77:ab:8f:70:19:35:00:de:94:c5:97:
         ce:97:31:d4:4e:17:b6:78:3a:86:98:fc:80:5c:c3:c5:55:c6:
         f9:53:9c:3d:20:22:ab:03:4f:20:0e:76:19:b8:ca:2e:1d:26:
         39:5d:eb:65:65:00:ea:6a:e9:0a:2e:eb:a0:55:d9:35:bf:72:
         2a:59:16:9c:b0:53:c6:a3:0c:57:5e:c2:b7:64:a4:ba:cf:2c:
         5a:ae:c6:62:35:16:41:12:18:d1:a9:44:3b:b3:09:ba:c9:97:
         8f:ff:c8:76:0e:b5:9b:a9:5a:95:f6:ac:9a:8d:0d:1e:22:30:
         48:71:bb:13:c2:2f:95:cf:91:48:a5:98:0e:e5:69:5b:44:98:
         91:95:02:cb:97:10:4e:c0:25:02:9c:a8:59:cc:99:09:d0:5f:
         85:25:c0:8c:91:6e:af:27:f7:b9:ad:81:2a:c7:6a:10:25:e9:
         70:bf:35:63:72:dc:ed:be:bb:0e:c5:61:11:6e:58:0b:9b:b7:
         d4:07:b9:6b:a9:da:51:b5:e8:13:82:85:b7:f7:97:a9:26:4d:
         73:70:ba:df:71:76:15:d9:73:d4:8c:55:6f:40:48:68:57:e3:
         71:21:60:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:16:10 2025 by rpki-client