Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft
File:                     kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft (raw, json)
Hash identifier:          UTrc5N1FxWbJjRZmmK/7Jieeh/8uf5Gavx2mdNAdHlM=
Subject key identifier:   29:C5:68:CA:54:1F:34:2A:C5:F6:38:28:5E:07:A4:D7:6D:91:26:17
Authority key identifier: 91:46:B7:82:EB:82:46:7B:19:D8:B4:1D:1C:C4:0E:BF:04:89:90:66
Certificate issuer:       /CN=A9155806/serialNumber=9146B782EB82467B19D8B41D1CC40EBF04899066
Certificate serial:       B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUa3guuCRnsZ2LQdHMQOvwSJkGY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft
Manifest number:          B2
Signing time:             Sat 23 Aug 2025 06:15:21 +0000
Manifest this update:     Sat 23 Aug 2025 06:15:20 +0000
Manifest next update:     Sat 30 Aug 2025 06:15:20 +0000
Files and hashes:         1: kUa3guuCRnsZ2LQdHMQOvwSJkGY.crl (hash: Vhml2OQVYmAzANfHNomSGuGCI85Kl+lEcon4EmcwM1c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.crl
                          rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUa3guuCRnsZ2LQdHMQOvwSJkGY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 06:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 178 (0xb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155806, serialNumber=9146B782EB82467B19D8B41D1CC40EBF04899066
        Validity
            Not Before: Aug 23 06:15:20 2025 GMT
            Not After : Aug 30 06:15:20 2025 GMT
        Subject: CN=68a95c79-0460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:00:fb:54:59:5a:e7:ba:46:d5:96:f6:1a:8a:
                    d8:e6:eb:3a:d9:0a:33:7a:86:fc:d8:d8:bf:64:80:
                    30:66:55:f7:35:92:58:2b:90:76:4d:2e:bd:93:da:
                    15:f5:6b:78:91:ab:67:cc:47:01:fc:99:e6:15:c5:
                    39:f9:f9:e6:02:c2:02:22:70:9d:b7:c5:fb:34:e9:
                    20:30:16:02:78:e1:8f:4d:4a:fa:0d:bc:c3:92:98:
                    79:f3:27:86:cb:6a:79:9a:ca:30:0e:b3:bf:2a:1c:
                    fe:9d:7d:51:98:2c:b5:50:77:bd:f6:cc:8a:78:9b:
                    85:07:eb:09:5f:07:df:d9:36:38:5b:a7:6c:d6:60:
                    c1:55:26:1e:ef:10:ed:0b:56:37:84:87:35:b1:47:
                    ba:4c:5e:ea:c8:41:eb:cf:09:de:45:7b:4c:50:29:
                    4b:84:c6:88:ff:25:ae:16:e7:88:7e:05:ac:90:72:
                    79:5c:a7:02:25:9e:b0:f4:e4:95:73:61:98:ff:74:
                    5b:06:f5:1e:b5:e7:44:93:a3:6e:47:ec:14:b8:34:
                    e9:52:2b:22:5d:09:9f:b5:da:84:0b:f7:08:d0:6e:
                    96:b8:8d:7f:f8:70:e4:35:1d:80:2d:89:ee:78:a8:
                    49:43:73:f9:66:d3:15:c3:c3:4d:68:aa:48:84:8c:
                    76:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:C5:68:CA:54:1F:34:2A:C5:F6:38:28:5E:07:A4:D7:6D:91:26:17
            X509v3 Authority Key Identifier:
                keyid:91:46:B7:82:EB:82:46:7B:19:D8:B4:1D:1C:C4:0E:BF:04:89:90:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUa3guuCRnsZ2LQdHMQOvwSJkGY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:d4:b2:1d:48:94:b5:8f:9c:c4:27:77:4d:46:f1:bd:18:a0:
         81:2a:6e:eb:ce:64:cb:c1:e6:85:bf:e4:66:64:ac:c2:94:46:
         57:ea:17:6c:20:96:fd:11:47:91:c2:47:af:f2:28:5b:83:99:
         b5:a3:75:76:f5:6c:f8:a0:34:62:f2:38:bf:6c:84:d1:67:e7:
         95:3e:1b:e5:42:39:c3:b7:54:77:cb:15:34:e4:ce:26:48:6b:
         20:89:25:b9:5d:db:91:52:e2:0d:82:61:48:52:97:66:53:9e:
         43:97:fc:0d:08:86:c7:a1:c1:7c:51:06:bf:e0:b6:e9:74:33:
         9a:71:fe:13:7e:ca:12:20:fe:33:6f:a3:bf:b9:07:40:36:40:
         f4:5d:e3:37:d7:3a:63:da:03:ba:32:82:31:d7:7c:97:a1:a7:
         93:11:1a:65:9e:ce:a3:f7:fa:03:e3:d9:ce:00:6d:85:92:fe:
         e9:58:30:76:0b:09:e8:6d:4d:4f:32:3d:3b:73:7e:a4:7b:2c:
         7c:a4:1e:15:ae:57:80:53:08:81:55:4e:ed:90:3e:0f:d2:c4:
         a2:bc:e3:aa:7c:54:db:1b:cc:97:61:d5:da:5e:47:2e:7d:91:
         37:bd:67:87:ce:32:ce:77:44:d3:73:b5:f2:45:e2:8a:df:9b:
         91:97:89:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:27:46 2025 by rpki-client