Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154388/38457CF68C3711EF80901C2EC4F9AE02/uyoPSTIeCAsicL0MjZuNS3k7EEQ.mft
File:                     uyoPSTIeCAsicL0MjZuNS3k7EEQ.mft (raw, json)
Hash identifier:          9GLxFLBaDTpaXGh7IpR/LnkYQ8akh0gunH4o94xUyzE=
Subject key identifier:   D7:BB:49:F0:B3:1B:5B:07:C3:6F:FA:A2:03:6A:1C:5B:0A:02:CA:9D
Authority key identifier: BB:2A:0F:49:32:1E:08:0B:22:70:BD:0C:8D:9B:8D:4B:79:3B:10:44
Certificate issuer:       /CN=A9154388/serialNumber=BB2A0F49321E080B2270BD0C8D9B8D4B793B1044
Certificate serial:       A0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uyoPSTIeCAsicL0MjZuNS3k7EEQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154388/38457CF68C3711EF80901C2EC4F9AE02/uyoPSTIeCAsicL0MjZuNS3k7EEQ.mft
Manifest number:          A0
Signing time:             Sat 23 Aug 2025 06:30:17 +0000
Manifest this update:     Sat 23 Aug 2025 06:30:16 +0000
Manifest next update:     Sat 30 Aug 2025 06:30:16 +0000
Files and hashes:         1: uyoPSTIeCAsicL0MjZuNS3k7EEQ.crl (hash: pw+EfUUHQ1HU5CiuiiAQYMMS0GR2AfHZ13QXzicwqmI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154388/38457CF68C3711EF80901C2EC4F9AE02/uyoPSTIeCAsicL0MjZuNS3k7EEQ.crl
                          rsync://rpki.apnic.net/member_repository/A9154388/38457CF68C3711EF80901C2EC4F9AE02/uyoPSTIeCAsicL0MjZuNS3k7EEQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uyoPSTIeCAsicL0MjZuNS3k7EEQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 06:30:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160 (0xa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154388, serialNumber=BB2A0F49321E080B2270BD0C8D9B8D4B793B1044
        Validity
            Not Before: Aug 23 06:30:16 2025 GMT
            Not After : Aug 30 06:30:16 2025 GMT
        Subject: CN=68a95ff8-1d5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:13:4e:4f:30:98:e6:7a:00:26:ec:6b:d3:73:
                    b3:6e:ff:4b:00:13:7e:fc:cf:7d:f1:8a:24:41:16:
                    c9:8c:6b:1e:f1:53:0b:a3:ba:8b:51:25:bc:ec:f6:
                    45:d3:45:9a:af:59:ca:52:88:3a:7d:56:aa:8f:7b:
                    e3:af:13:d5:22:67:c8:a7:4f:13:c6:dd:94:8b:e9:
                    cf:43:fb:b8:cb:1a:09:f6:cf:72:34:b1:8e:47:72:
                    5f:c7:a4:b8:da:42:57:65:b1:5f:f0:67:df:fc:ec:
                    84:db:12:2a:07:e3:a8:f3:73:7b:c0:9f:ee:54:cd:
                    49:30:83:97:cb:89:32:cf:f1:db:d6:0c:eb:42:4a:
                    49:21:84:c4:1d:60:28:ab:e9:bb:b5:0c:23:20:be:
                    1d:aa:91:84:41:d9:f3:cf:a6:d6:6e:50:be:ab:b9:
                    49:46:67:c7:8c:02:b8:5b:fc:b9:e2:ad:c5:f5:f9:
                    d9:6e:3f:53:a2:d6:bf:6c:67:e2:85:8f:7b:d8:d3:
                    4d:61:73:32:aa:43:c3:60:1a:6b:a5:5a:a1:d8:60:
                    a7:87:8f:68:07:17:9f:fc:ef:1b:07:c6:4f:df:6c:
                    84:64:30:15:7a:8b:29:08:79:b6:48:3c:47:e1:bf:
                    5a:4a:b9:50:79:d7:db:2b:f2:bf:c2:26:ca:96:f8:
                    65:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:BB:49:F0:B3:1B:5B:07:C3:6F:FA:A2:03:6A:1C:5B:0A:02:CA:9D
            X509v3 Authority Key Identifier:
                keyid:BB:2A:0F:49:32:1E:08:0B:22:70:BD:0C:8D:9B:8D:4B:79:3B:10:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154388/38457CF68C3711EF80901C2EC4F9AE02/uyoPSTIeCAsicL0MjZuNS3k7EEQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uyoPSTIeCAsicL0MjZuNS3k7EEQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154388/38457CF68C3711EF80901C2EC4F9AE02/uyoPSTIeCAsicL0MjZuNS3k7EEQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:45:59:58:b5:ef:5b:05:f2:4d:a8:6e:44:4b:87:e0:c5:be:
         3d:5a:5f:90:53:f5:03:b5:a7:f1:9e:ae:97:69:e9:d8:77:d4:
         67:8c:71:e8:06:13:7a:f9:82:8d:f4:3a:9e:df:a8:26:ae:01:
         a1:e2:3e:c5:50:56:09:20:dd:1d:8f:fa:78:e4:10:b8:a4:3d:
         e8:c6:5a:78:68:57:27:93:78:50:ff:21:76:4f:48:bf:9a:4c:
         52:03:79:83:c1:bd:fb:96:81:3f:be:43:b2:aa:6e:89:23:ac:
         f7:73:30:12:3f:62:5c:7d:9b:31:68:90:dc:5e:dd:29:60:26:
         6a:39:bd:cf:80:5b:75:96:c6:25:b2:9a:b4:60:68:fc:ec:0d:
         19:25:34:97:f8:92:86:9e:94:ab:63:05:fa:e8:b2:f5:4c:73:
         1a:a0:e8:14:91:44:ff:47:58:74:97:4c:39:49:35:f4:c1:76:
         d7:17:57:d7:7f:50:dc:23:4e:13:73:26:b5:91:e2:6a:c8:c1:
         29:9f:66:91:cf:f9:fd:bd:cb:2f:ee:90:4f:69:fe:4e:1f:fb:
         d5:dd:f7:97:22:78:09:b1:e0:b7:9b:fe:04:d0:e9:12:17:91:
         2f:99:f3:f1:2c:a0:f2:59:1d:47:05:a7:ba:8c:f2:a7:b8:71:
         b4:8b:fd:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:28:29 2025 by rpki-client