Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.mft
File:                     ukny4CpjXdB19WQWbxEfX63lp8s.mft (raw, json)
Hash identifier:          eSBzx5OTDUYdO4CWX5zpIah+rVpU/d/1sxk5Ao7yFzw=
Subject key identifier:   DD:03:F6:12:AA:36:5C:E5:A5:FF:91:AF:F3:4A:2C:96:00:AD:14:D1
Authority key identifier: BA:49:F2:E0:2A:63:5D:D0:75:F5:64:16:6F:11:1F:5F:AD:E5:A7:CB
Certificate issuer:       /CN=A916988B/serialNumber=BA49F2E02A635DD075F564166F111F5FADE5A7CB
Certificate serial:       06B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukny4CpjXdB19WQWbxEfX63lp8s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.mft
Manifest number:          069B
Signing time:             Fri 22 Aug 2025 22:26:48 +0000
Manifest this update:     Fri 22 Aug 2025 22:26:48 +0000
Manifest next update:     Fri 29 Aug 2025 22:26:48 +0000
Files and hashes:         1: ukny4CpjXdB19WQWbxEfX63lp8s.crl (hash: +vf1t6pQfwx3f/x3muL4F3yW1ktT1ectWkUqkDHiJNg=)
                          2: 74C0B54E62BD11F0ACD7497FC4F9AE02.roa (hash: YrkXkz/yu0G19ivHemFgEHMeNLmhc/fcMSP5ZLKhRqw=)
                          3: D1B6FD008D6D11EB9DB49A32C4F9AE02.roa (hash: B5LAg04dviX2z0y/fP3YPZo7B9FlYxyAimnZWCXnG6o=)
                          4: D24316B48D6D11EB9DB49A32C4F9AE02.roa (hash: bQSq5ulDmleOdsxLvtgc5ASW2V63/ouOWZ5o5ZVuoR4=)
                          5: D2CFD4468D6D11EB9DB49A32C4F9AE02.roa (hash: +78td8DudFE3NBUUSYhesW8UdPg8DBg2PU3GJp9moVc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.crl
                          rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukny4CpjXdB19WQWbxEfX63lp8s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 22:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1714 (0x6b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916988B, serialNumber=BA49F2E02A635DD075F564166F111F5FADE5A7CB
        Validity
            Not Before: Aug 22 22:26:48 2025 GMT
            Not After : Aug 29 22:26:48 2025 GMT
        Subject: CN=68a8eea8-495b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c5:f9:9a:d4:fc:c0:56:af:fa:d5:be:b3:dc:
                    52:29:fb:00:ee:d4:7a:c4:11:fc:77:c2:37:eb:1b:
                    85:97:d2:e6:68:2a:b9:21:09:f0:81:aa:69:ed:74:
                    0c:32:5e:ff:30:3d:5d:ad:eb:5d:69:62:9d:cd:80:
                    bb:c4:a5:27:15:f3:76:bc:8d:55:23:89:f0:06:ad:
                    79:ec:09:e8:ad:33:1e:a1:19:0f:8a:38:41:4a:0c:
                    dc:86:3f:2c:4b:34:46:6b:57:78:aa:a8:ec:ba:7f:
                    ec:79:9d:3a:7d:99:3d:34:ed:4b:b5:b9:9b:d6:a8:
                    1e:03:79:5d:44:e0:e3:b8:78:24:2a:0e:64:b4:35:
                    f9:3d:6d:3a:39:63:d2:15:d4:3b:4d:25:c3:ba:93:
                    f7:9e:28:b1:f5:9d:80:43:54:06:09:de:b3:30:0d:
                    64:dc:fa:76:2f:81:0b:dc:b4:f1:98:56:3e:c2:d0:
                    f3:83:a0:df:a3:03:89:6e:41:70:b6:90:64:b9:eb:
                    37:1a:93:2e:ea:ab:03:f8:96:57:b8:f7:36:9b:6c:
                    15:9c:ea:c0:60:00:42:0f:9c:7c:b6:da:7a:25:b1:
                    57:9f:ba:18:46:4c:74:b8:f8:7d:e7:e8:d7:dc:98:
                    b9:06:2e:1a:53:0a:31:92:5c:0d:f8:40:c5:30:35:
                    82:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:03:F6:12:AA:36:5C:E5:A5:FF:91:AF:F3:4A:2C:96:00:AD:14:D1
            X509v3 Authority Key Identifier:
                keyid:BA:49:F2:E0:2A:63:5D:D0:75:F5:64:16:6F:11:1F:5F:AD:E5:A7:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukny4CpjXdB19WQWbxEfX63lp8s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:cf:1b:3e:df:65:f6:8d:ff:9b:1f:8d:8d:b9:5f:9e:32:46:
         9c:c1:9d:27:e8:05:45:9f:26:5b:eb:26:e0:a4:bc:cb:fc:e7:
         fb:8b:5a:8d:40:e6:9f:60:3c:43:8f:69:fa:24:3f:42:03:e3:
         3f:a0:48:4b:a2:a9:3f:61:90:ec:7b:3a:b3:0c:0a:65:f5:fd:
         ab:d7:09:9a:67:79:ff:85:3b:b3:58:c1:f0:75:d8:f6:4a:e1:
         26:35:e7:64:0b:e4:8e:18:bf:7e:75:8d:f5:84:16:6d:e0:fc:
         3e:2f:9b:92:f8:5f:a7:66:d7:8f:65:6c:c4:a2:e3:c4:48:f7:
         9f:7f:71:20:79:72:2c:ae:e9:de:32:5f:9f:51:56:25:7a:01:
         d7:6b:57:f3:c6:83:37:26:23:1b:7f:4a:67:e0:2e:10:2f:f5:
         f3:1c:a6:1b:de:43:56:42:8a:ea:1e:ae:c6:c6:3a:b5:52:a4:
         5f:b6:39:53:19:cf:ce:d2:9e:1d:16:0d:fe:ed:c0:a7:47:c4:
         a2:5c:67:99:79:c9:72:01:32:2a:cd:26:a8:53:ba:c7:fe:3f:
         e1:44:f8:09:03:0e:8f:b2:9e:b7:4b:91:d6:3e:0b:3b:bf:47:
         3e:f1:af:f9:71:08:7b:fb:30:80:7b:77:ea:ac:b3:86:36:ed:
         7c:92:a7:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:25:49 2025 by rpki-client