Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft
File:                     3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft (raw, json)
Hash identifier:          spSow9sqxChdN7B4DN4Ls+erfZ3fkk7+AlMmhvnVY6w=
Subject key identifier:   6B:BE:15:75:ED:E8:89:24:45:A0:4A:AC:99:42:2E:29:AE:E8:03:24
Authority key identifier: DD:49:30:E3:E4:2D:FE:3B:FF:F4:81:B1:79:77:0D:1A:B1:57:5B:C3
Certificate issuer:       /CN=A9186214/serialNumber=DD4930E3E42DFE3BFFF481B179770D1AB1575BC3
Certificate serial:       2A25
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft
Manifest number:          2A25
Signing time:             Wed 02 Jul 2025 15:41:49 +0000
Manifest this update:     Wed 02 Jul 2025 15:41:48 +0000
Manifest next update:     Wed 09 Jul 2025 15:41:48 +0000
Files and hashes:         1: 3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.crl (hash: DaRfWbOzXK4UIvmiKkc50LMIfVuazy9BHCT7qFRlHO4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 15:41:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10789 (0x2a25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214, serialNumber=DD4930E3E42DFE3BFFF481B179770D1AB1575BC3
        Validity
            Not Before: Jul  2 15:41:48 2025 GMT
            Not After : Jul  9 15:41:48 2025 GMT
        Subject: CN=6865533d-321e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ca:05:e8:8a:c3:b8:76:72:48:d5:8a:3e:a5:
                    e7:5e:f5:78:18:43:01:77:7c:ad:6b:5e:bd:95:cb:
                    50:b4:b3:69:6c:d4:81:2b:ed:96:ce:26:e2:5f:5b:
                    29:1d:4a:58:17:ea:fd:14:7f:8a:fb:4a:aa:2e:b6:
                    53:ce:ef:14:1b:0c:20:da:80:5f:b7:0a:bb:17:a3:
                    94:7b:a9:d5:7b:67:4f:85:1b:76:4f:5d:25:1d:45:
                    48:75:17:f3:65:9a:39:f1:21:e2:3a:cd:7d:53:37:
                    3c:24:c0:47:d0:f1:07:f0:96:c0:80:7c:0a:5a:84:
                    a9:cc:96:b4:87:21:ab:d2:ab:d3:83:be:47:a3:fd:
                    fe:67:9c:31:99:44:7c:42:65:45:67:0d:98:4f:8f:
                    31:cd:60:b0:bd:9c:b0:0f:b0:be:bd:93:6a:9e:77:
                    01:2b:cf:03:3e:3d:2a:eb:67:b3:4f:b0:e8:e1:91:
                    cc:02:eb:f7:2e:c3:95:9f:d4:17:dd:d7:ca:36:53:
                    2d:f4:8d:69:89:c5:58:1c:24:5a:f1:0e:a2:29:43:
                    4d:8a:13:2a:05:61:16:fc:23:4a:5b:7f:45:c7:12:
                    b3:67:94:48:a2:9e:b7:bd:01:70:17:14:88:01:9d:
                    fd:86:ff:ef:aa:3b:8a:4b:50:0e:0e:13:42:14:4f:
                    94:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:BE:15:75:ED:E8:89:24:45:A0:4A:AC:99:42:2E:29:AE:E8:03:24
            X509v3 Authority Key Identifier:
                keyid:DD:49:30:E3:E4:2D:FE:3B:FF:F4:81:B1:79:77:0D:1A:B1:57:5B:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:83:e8:29:79:8d:f4:11:fa:02:b8:13:48:95:1a:3c:60:ee:
         06:d7:1b:7a:7e:e2:4e:f0:d0:6a:80:cf:89:1f:bf:02:20:f8:
         33:fc:51:53:19:f3:9b:ec:03:fd:89:f8:d7:6e:eb:b2:41:12:
         00:d1:84:2e:95:03:6a:a1:c3:de:cb:de:9a:32:bb:ca:59:56:
         dd:d7:af:7c:27:31:94:9a:66:61:6a:00:1d:ad:8e:17:31:1a:
         64:15:48:69:ff:de:3d:ad:d6:63:05:2f:d7:ee:e8:4c:8b:71:
         c8:5c:db:0d:15:43:64:0f:11:19:91:43:13:eb:b7:98:ed:01:
         25:9a:dc:be:14:49:90:80:9f:c4:1f:7e:f0:73:95:14:1a:fa:
         19:c7:21:ae:35:be:1c:16:90:e5:5e:32:02:a9:0d:dd:ca:a0:
         8d:0c:7f:e9:34:16:7c:a5:89:46:be:64:4e:bf:63:8b:f8:28:
         ea:c5:3d:85:42:dc:e8:34:0d:11:e4:f3:7e:99:80:68:d3:87:
         fd:36:64:f1:73:cb:19:6c:7d:93:70:10:0d:45:83:52:e0:bd:
         b9:c0:ba:87:1a:5e:29:87:02:52:1a:7e:e0:9e:bf:54:10:43:
         67:51:3a:b6:b1:f1:18:61:8d:b9:ab:7e:d8:2e:97:35:ff:fb:
         38:62:ba:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 22:52:48 2025 by rpki-client