Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft
File:                     3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft (raw, json)
Hash identifier:          Akn30rV0LDmM6s4du450qB2yRsV0yBJdPA0s/0aGuNE=
Subject key identifier:   97:64:ED:2C:91:D8:FC:32:23:C7:B6:3A:89:4A:55:15:AB:16:C6:D1
Authority key identifier: DD:49:30:E3:E4:2D:FE:3B:FF:F4:81:B1:79:77:0D:1A:B1:57:5B:C3
Certificate issuer:       /CN=A9186214/serialNumber=DD4930E3E42DFE3BFFF481B179770D1AB1575BC3
Certificate serial:       2A41
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft
Manifest number:          2A41
Signing time:             Fri 22 Aug 2025 15:37:47 +0000
Manifest this update:     Fri 22 Aug 2025 15:37:47 +0000
Manifest next update:     Fri 29 Aug 2025 15:37:47 +0000
Files and hashes:         1: 3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.crl (hash: rOzIsjtQQ2z14vEI6oKbA/9XUJOKJolwARPq2A38kyc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 15:37:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10817 (0x2a41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214, serialNumber=DD4930E3E42DFE3BFFF481B179770D1AB1575BC3
        Validity
            Not Before: Aug 22 15:37:47 2025 GMT
            Not After : Aug 29 15:37:47 2025 GMT
        Subject: CN=68a88ecb-b413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:fb:bd:69:1e:52:14:e6:3b:0e:60:f2:4f:55:
                    a7:8a:f2:f4:92:60:b6:3f:ac:8a:4c:79:b6:7c:ea:
                    49:a1:e5:29:45:75:70:a9:00:cd:33:f5:64:ae:fc:
                    59:04:2a:d9:47:d6:14:c4:05:1a:ed:18:8f:07:7f:
                    25:9c:a3:b2:65:d7:4c:10:2a:59:52:88:5f:cf:1b:
                    61:2d:19:34:e0:3f:3c:fe:88:70:41:8f:3d:da:8f:
                    1b:66:d9:95:88:11:81:2c:d0:93:15:22:59:54:2b:
                    fa:b9:1f:9d:f3:91:b2:72:b8:54:4f:b9:0b:ec:e5:
                    73:5a:9f:90:6d:30:db:97:19:18:55:c1:6c:fb:b1:
                    60:5a:5a:bc:7d:12:df:43:bd:bc:cf:0c:f3:d0:07:
                    b6:a3:10:74:7e:83:40:7d:72:8f:f8:19:eb:a7:82:
                    3e:b8:ac:46:ff:66:d6:1f:a4:f3:21:80:ad:83:f7:
                    76:c0:32:1a:61:38:d4:35:1c:ee:d3:be:d2:23:1f:
                    35:af:f0:2f:54:2c:45:12:1d:c1:39:43:b5:81:4f:
                    0e:b7:3e:ef:2a:5f:29:a9:09:0c:88:18:4c:e7:c9:
                    fa:f5:37:e0:a7:69:09:9e:07:e1:26:30:d2:63:da:
                    1c:5a:5f:ab:d6:5f:f1:86:2c:32:51:ca:a3:27:50:
                    44:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:64:ED:2C:91:D8:FC:32:23:C7:B6:3A:89:4A:55:15:AB:16:C6:D1
            X509v3 Authority Key Identifier:
                keyid:DD:49:30:E3:E4:2D:FE:3B:FF:F4:81:B1:79:77:0D:1A:B1:57:5B:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:76:99:ed:8a:fa:75:78:f6:63:3a:94:4d:e4:c5:dc:8c:a8:
         2a:12:47:76:2a:0f:da:44:94:37:87:53:d0:33:d5:ec:84:d6:
         de:6d:5c:17:9c:a8:84:ab:87:c7:ca:18:71:ba:71:d0:c9:bd:
         15:6f:a3:95:b3:34:a4:b0:c5:2b:d7:05:6f:4b:89:59:6b:92:
         35:97:8f:4d:84:3a:80:1e:2c:0b:d1:42:98:7d:cd:d4:cb:f4:
         96:e7:7e:e1:65:53:65:4f:28:de:8a:ff:8b:38:40:0a:83:78:
         72:0b:7d:ef:5d:f4:0d:79:fd:b5:39:53:90:24:d7:ea:42:57:
         1b:bb:a1:68:97:66:c9:73:d7:35:7b:d2:49:9c:77:14:33:fd:
         45:a2:38:8f:31:60:d9:6c:0e:93:39:69:cc:ab:65:03:69:92:
         9c:8d:bb:15:43:36:f0:e5:a7:6b:fc:2d:fb:7e:5b:ed:3b:ca:
         47:56:84:4b:65:66:d5:43:63:99:e4:c8:a5:78:98:84:65:34:
         27:f2:41:a7:15:c4:17:3d:e4:ee:de:4a:d6:ed:c2:e1:5f:ae:
         9f:56:15:08:35:49:19:f6:27:8e:88:70:b2:bc:3f:3e:e4:af:
         35:a2:ed:6a:e7:93:f3:f1:84:50:ea:32:cc:52:1b:02:93:fa:
         0d:8f:4e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:34 2025 by rpki-client