Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.mft
File:                     uxh7m1B2e7e7wih3IL02wLjQaJY.mft (raw, json)
Hash identifier:          u5KHra2UnXxxLZ+kz9v5/7rTyXN30Zinh9upoj+nqt0=
Subject key identifier:   F6:F1:76:1F:A3:A6:37:BB:77:B2:F6:A4:DB:42:D9:CE:9F:16:2C:4E
Authority key identifier: BB:18:7B:9B:50:76:7B:B7:BB:C2:28:77:20:BD:36:C0:B8:D0:68:96
Certificate issuer:       /CN=A9191E43/serialNumber=BB187B9B50767BB7BBC2287720BD36C0B8D06896
Certificate serial:       02F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uxh7m1B2e7e7wih3IL02wLjQaJY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.mft
Manifest number:          02F6
Signing time:             Tue 01 Jul 2025 01:55:05 +0000
Manifest this update:     Tue 01 Jul 2025 01:55:05 +0000
Manifest next update:     Tue 08 Jul 2025 01:55:05 +0000
Files and hashes:         1: uxh7m1B2e7e7wih3IL02wLjQaJY.crl (hash: rPWRxMesK/Ko1+r2hYoUrp0Bj1Mv6RuAKy1KuxpyDtg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.crl
                          rsync://rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uxh7m1B2e7e7wih3IL02wLjQaJY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Jul 2025 01:55:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 758 (0x2f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191E43, serialNumber=BB187B9B50767BB7BBC2287720BD36C0B8D06896
        Validity
            Not Before: Jul  1 01:55:05 2025 GMT
            Not After : Jul  8 01:55:05 2025 GMT
        Subject: CN=68633ff9-cfe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:21:82:1f:de:fe:9a:02:17:1e:17:34:1e:5d:
                    ff:58:ba:80:93:c1:53:b9:f9:ab:ec:79:0d:6f:26:
                    9f:58:3a:ce:fd:fe:e9:7d:a5:8d:21:72:a2:6d:55:
                    34:cc:76:11:af:0c:2d:68:6d:b3:7e:a1:cf:1e:fa:
                    1f:f6:3b:52:63:99:49:81:94:41:15:59:98:43:f7:
                    6f:0b:8b:33:54:cb:08:06:c7:13:c3:63:c6:b9:af:
                    be:04:86:2a:9a:28:24:0a:26:fd:f9:9b:e6:16:92:
                    63:1b:fb:81:ad:26:9f:be:20:8e:42:1d:1f:58:2f:
                    1d:88:da:46:82:9d:e8:bd:41:b6:4e:02:8b:52:92:
                    11:88:f6:6b:18:7d:f2:4a:b1:b7:c9:12:af:f3:30:
                    86:7b:d7:f1:15:31:88:b9:e4:e1:53:c3:89:11:c5:
                    ca:63:a3:37:b0:94:b4:7c:d4:56:42:76:c5:39:40:
                    9a:54:7c:85:b0:0f:af:8d:3b:ad:c1:ae:88:b4:ef:
                    db:c2:ee:8e:c9:0d:05:37:87:83:4a:bd:d2:25:40:
                    db:ee:80:6a:a1:38:1f:88:8a:ad:39:2a:d8:59:20:
                    1e:89:ee:2b:19:e3:68:ec:10:b5:67:bf:31:bb:b8:
                    64:75:5e:8a:b4:1d:8b:a7:c2:22:65:1b:69:e6:18:
                    8a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:F1:76:1F:A3:A6:37:BB:77:B2:F6:A4:DB:42:D9:CE:9F:16:2C:4E
            X509v3 Authority Key Identifier:
                keyid:BB:18:7B:9B:50:76:7B:B7:BB:C2:28:77:20:BD:36:C0:B8:D0:68:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uxh7m1B2e7e7wih3IL02wLjQaJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:66:32:dc:85:09:26:be:ce:40:75:5e:0e:67:88:a0:7f:30:
         1d:e8:19:f9:41:4e:30:4b:98:c4:ab:14:dc:3a:53:c4:66:3c:
         04:d9:0f:dc:f8:17:a9:38:66:63:f1:ff:19:11:55:24:4d:41:
         37:41:41:18:81:b9:4a:d8:8c:83:13:c3:38:9c:b9:71:f1:bd:
         f4:cf:b2:0f:6f:42:cc:2f:35:51:88:34:f0:ee:fe:38:47:09:
         76:e9:88:60:b9:87:58:41:f6:39:51:da:b7:fe:df:ff:f5:b2:
         0c:bb:d3:72:92:5f:54:fe:49:97:89:35:26:7f:e5:1b:e2:e5:
         d6:d4:98:6e:e6:d7:b0:ac:08:0b:51:81:fe:61:0b:9c:18:d3:
         aa:05:21:a0:52:a0:5e:56:25:d2:1e:b2:76:bd:11:88:50:88:
         9a:0d:26:8d:bd:ba:28:6f:60:35:92:29:78:3a:06:d9:3d:7a:
         7e:21:06:a4:54:a0:4a:9d:99:f1:aa:21:5d:73:bb:e3:79:d0:
         00:a7:fe:3f:42:c9:80:11:9f:e3:0a:fe:4b:46:cc:8e:2d:e8:
         7e:fd:aa:2e:05:40:1e:b2:b5:fb:15:43:d4:57:37:d6:87:aa:
         1b:05:87:b6:87:df:6f:b6:ff:32:0b:58:a7:77:2a:19:c1:7c:
         43:16:e1:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 02:05:15 2025 by rpki-client