Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91790ED/0ABB86429D1B11E9BDD6E574C4F9AE02/UHRCEm0jxuW-SuMZdJsnbhcum1w.mft
File:                     UHRCEm0jxuW-SuMZdJsnbhcum1w.mft (raw, json)
Hash identifier:          C6AquXD2xIHneNYwzpy+p0M15OFfMyzNWYx+3kCodSQ=
Subject key identifier:   39:61:1B:51:C4:C3:E3:FD:4F:65:3C:C8:8B:EE:42:1D:B6:76:9C:12
Authority key identifier: 50:74:42:12:6D:23:C6:E5:BE:4A:E3:19:74:9B:27:6E:17:2E:9B:5C
Certificate issuer:       /CN=A91790ED/serialNumber=507442126D23C6E5BE4AE319749B276E172E9B5C
Certificate serial:       0E92
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHRCEm0jxuW-SuMZdJsnbhcum1w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91790ED/0ABB86429D1B11E9BDD6E574C4F9AE02/UHRCEm0jxuW-SuMZdJsnbhcum1w.mft
Manifest number:          0E92
Signing time:             Sat 18 Oct 2025 18:17:45 +0000
Manifest this update:     Sat 18 Oct 2025 18:17:45 +0000
Manifest next update:     Sat 25 Oct 2025 18:17:45 +0000
Files and hashes:         1: UHRCEm0jxuW-SuMZdJsnbhcum1w.crl (hash: wQR1GuhL8OaTdrmxKgvBMDvHTy5F6zKNKH09Rp3wVqE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91790ED/0ABB86429D1B11E9BDD6E574C4F9AE02/UHRCEm0jxuW-SuMZdJsnbhcum1w.crl
                          rsync://rpki.apnic.net/member_repository/A91790ED/0ABB86429D1B11E9BDD6E574C4F9AE02/UHRCEm0jxuW-SuMZdJsnbhcum1w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHRCEm0jxuW-SuMZdJsnbhcum1w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 18:17:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3730 (0xe92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91790ED, serialNumber=507442126D23C6E5BE4AE319749B276E172E9B5C
        Validity
            Not Before: Oct 18 18:17:45 2025 GMT
            Not After : Oct 25 18:17:45 2025 GMT
        Subject: CN=68f3d9c9-9927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:11:4d:e9:0f:9d:8d:19:99:00:05:d2:84:6d:
                    6a:23:05:02:14:ed:e8:6f:87:52:ac:23:53:b3:0d:
                    4c:c3:e6:e8:bf:2e:4c:18:6b:29:fc:c5:c1:d4:ea:
                    d0:6c:98:66:12:42:9d:65:07:03:cb:81:ef:78:5a:
                    68:9d:83:82:b4:b0:ce:02:2b:28:f9:f3:b8:54:7e:
                    cd:c4:7c:c4:02:05:bd:2b:59:bb:0d:9c:12:ba:41:
                    79:e3:0a:8c:bd:c0:73:b5:5e:66:ee:48:2e:b7:f7:
                    f4:ea:c7:5f:a1:44:1b:09:9c:06:55:0e:91:e0:99:
                    f2:f9:b2:d7:66:f9:19:1a:3d:68:1a:4d:69:7a:99:
                    77:37:f3:92:3a:b9:28:4b:b6:17:c7:47:44:4e:76:
                    96:b7:9d:da:cc:f2:61:10:15:dc:9e:c5:4a:e8:b4:
                    b1:ca:11:93:8a:14:5d:42:bc:d5:d3:18:5b:05:a6:
                    07:d3:a0:61:4a:cc:9f:60:55:d6:e8:74:41:2b:06:
                    90:4d:eb:ae:59:48:5a:00:a0:cf:c2:93:7c:85:e0:
                    42:3b:15:ee:c9:66:05:ae:64:26:a7:b7:27:5b:a9:
                    b3:b1:b7:dd:2e:86:3a:67:b5:23:84:9f:ac:fc:ee:
                    3f:be:ae:f4:d7:a0:81:40:bc:ee:40:2c:39:8e:54:
                    3d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:61:1B:51:C4:C3:E3:FD:4F:65:3C:C8:8B:EE:42:1D:B6:76:9C:12
            X509v3 Authority Key Identifier:
                keyid:50:74:42:12:6D:23:C6:E5:BE:4A:E3:19:74:9B:27:6E:17:2E:9B:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91790ED/0ABB86429D1B11E9BDD6E574C4F9AE02/UHRCEm0jxuW-SuMZdJsnbhcum1w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHRCEm0jxuW-SuMZdJsnbhcum1w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91790ED/0ABB86429D1B11E9BDD6E574C4F9AE02/UHRCEm0jxuW-SuMZdJsnbhcum1w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:12:02:87:0b:92:52:4b:87:da:73:56:7d:cb:74:93:ab:6a:
         73:a7:a7:9f:a5:1d:6d:cd:56:f9:d5:6e:f4:b5:aa:c3:35:41:
         80:53:06:f9:c2:a7:fc:5b:5b:71:c1:29:b0:e0:8a:48:25:29:
         f4:4c:ec:aa:0c:e1:08:9d:dd:40:24:3b:ae:3f:b4:ae:cd:36:
         84:5d:32:29:a9:76:8f:5d:0c:1d:d0:53:d2:b9:e8:75:3b:eb:
         4c:42:1f:2e:8a:63:f2:24:4e:fa:68:b8:45:a5:4b:9a:56:f2:
         d7:d7:c9:3e:15:98:e5:79:26:4a:0d:52:a9:b9:13:21:b7:e3:
         6c:fc:9e:35:05:f8:fe:51:1d:3a:38:e3:d8:f7:65:53:9a:82:
         9f:1f:b4:1a:e0:e2:b9:1a:ad:ba:1f:b9:97:72:af:b1:0f:2b:
         24:5e:3b:03:57:71:b0:b5:62:41:17:e1:72:5d:d2:3b:81:15:
         c3:19:86:6a:0a:1d:7d:14:69:18:ff:ce:02:83:4f:8d:a3:2b:
         a4:ac:e6:9d:d3:e9:a3:23:be:0b:da:ec:9f:56:50:40:8e:5e:
         de:88:0f:e4:ba:5f:b1:47:53:28:90:26:ae:a8:86:ac:a6:00:
         73:f3:07:86:ce:59:44:bf:e8:d0:31:58:0f:0b:92:34:c9:7a:
         80:de:fa:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:48:59 2025 by rpki-client