Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C068/B353B03E8CB811F082C92E63C4F9AE02/uwkZbg9n4YLXixffG0JXXCWC_70.mft
File:                     uwkZbg9n4YLXixffG0JXXCWC_70.mft (raw, json)
Hash identifier:          OIAYCh8D2V67Km2ZJgQgbdTngsamXlHSLmrY4nplj6M=
Subject key identifier:   10:81:45:C8:B4:8E:7E:34:CA:35:A2:05:7B:E3:D4:54:99:0C:9A:00
Authority key identifier: BB:09:19:6E:0F:67:E1:82:D7:8B:17:DF:1B:42:57:5C:25:82:FF:BD
Certificate issuer:       /CN=A919C068/serialNumber=BB09196E0F67E182D78B17DF1B42575C2582FFBD
Certificate serial:       16
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwkZbg9n4YLXixffG0JXXCWC_70.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C068/B353B03E8CB811F082C92E63C4F9AE02/uwkZbg9n4YLXixffG0JXXCWC_70.mft
Manifest number:          16
Signing time:             Sun 19 Oct 2025 11:26:44 +0000
Manifest this update:     Sun 19 Oct 2025 11:26:43 +0000
Manifest next update:     Sun 26 Oct 2025 11:26:43 +0000
Files and hashes:         1: uwkZbg9n4YLXixffG0JXXCWC_70.crl (hash: Izp7Z7Wh8n48ARIC84UcK/XzpeOnM6FwDqfnjlza7uQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C068/B353B03E8CB811F082C92E63C4F9AE02/uwkZbg9n4YLXixffG0JXXCWC_70.crl
                          rsync://rpki.apnic.net/member_repository/A919C068/B353B03E8CB811F082C92E63C4F9AE02/uwkZbg9n4YLXixffG0JXXCWC_70.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwkZbg9n4YLXixffG0JXXCWC_70.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 11:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C068, serialNumber=BB09196E0F67E182D78B17DF1B42575C2582FFBD
        Validity
            Not Before: Oct 19 11:26:43 2025 GMT
            Not After : Oct 26 11:26:43 2025 GMT
        Subject: CN=68f4caf3-efed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:db:49:6d:78:24:1d:64:aa:30:3f:fb:f8:72:
                    65:21:be:01:79:12:a1:bb:7d:4a:f6:f6:45:be:26:
                    25:f0:d5:d6:f0:b8:2c:57:65:23:ba:c1:36:8d:80:
                    92:9c:1e:a7:18:aa:a2:f4:28:9e:a5:f4:6c:65:b7:
                    3f:fe:fa:58:39:c3:2b:61:b0:dc:6f:11:f7:48:4c:
                    9b:00:9d:7b:62:5a:e8:c2:a8:e8:54:5f:54:e7:78:
                    9e:15:96:be:4a:c8:9b:c0:00:a3:f4:0b:b8:7b:66:
                    ad:8c:ef:64:3d:ee:71:26:ad:70:f3:0c:25:4e:f3:
                    03:84:ee:3e:4a:8d:e8:a0:64:67:63:e0:4d:b8:ee:
                    87:f5:20:59:1b:39:85:7f:54:84:c0:e2:bb:53:80:
                    8d:ea:d5:b8:58:1a:37:64:33:4f:af:ff:d7:99:24:
                    8b:02:6a:61:00:e8:c9:d4:33:e6:3e:51:41:f7:67:
                    6e:39:7a:58:ed:1d:95:67:02:de:a6:0c:11:11:a8:
                    d0:b2:f2:34:35:47:0b:01:3c:bf:34:0f:fc:21:da:
                    f7:ad:fc:cd:17:9a:8d:01:08:eb:3d:58:32:13:5e:
                    72:db:ee:56:9f:fa:98:8c:0f:4c:22:1e:6a:5b:01:
                    1e:9a:1e:dc:c4:0f:d4:e8:c8:81:01:5c:6c:16:07:
                    af:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:81:45:C8:B4:8E:7E:34:CA:35:A2:05:7B:E3:D4:54:99:0C:9A:00
            X509v3 Authority Key Identifier:
                keyid:BB:09:19:6E:0F:67:E1:82:D7:8B:17:DF:1B:42:57:5C:25:82:FF:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C068/B353B03E8CB811F082C92E63C4F9AE02/uwkZbg9n4YLXixffG0JXXCWC_70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwkZbg9n4YLXixffG0JXXCWC_70.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C068/B353B03E8CB811F082C92E63C4F9AE02/uwkZbg9n4YLXixffG0JXXCWC_70.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:f7:4a:c2:80:48:c2:7c:7a:cd:79:3d:9e:14:cd:d5:c4:be:
         51:d4:65:53:78:b4:03:42:74:bd:82:12:3e:12:97:dc:02:d2:
         bb:1f:27:2d:58:19:93:0f:3c:a6:bf:b8:72:c3:47:75:7e:a1:
         b2:6f:a2:d8:0f:57:36:37:99:76:7a:74:cd:2b:1d:39:f0:d5:
         18:68:0c:2d:06:81:78:0f:d9:25:24:71:72:f9:2a:ae:84:39:
         0e:aa:33:7b:d8:b6:89:a7:bc:b0:c9:00:8d:d2:d2:7d:44:7e:
         5f:56:96:eb:8b:c2:3a:25:ff:7e:fc:0a:76:e0:35:71:9d:b7:
         83:73:2f:cd:7b:b3:4e:f9:cf:b3:4a:7f:fc:f0:dd:29:82:7e:
         66:68:55:58:43:01:83:0b:c1:33:d1:cb:1b:00:77:95:aa:a4:
         fa:8f:90:36:d2:7a:26:d8:3f:c0:50:f7:97:0b:6e:0b:5f:65:
         34:2b:f4:7b:89:fd:63:11:d5:29:44:66:ff:e7:ff:b0:35:75:
         ec:d2:01:fb:3a:0b:5b:e0:f5:c0:20:e1:e5:50:3e:80:39:99:
         c8:9c:1a:31:9d:a0:67:1c:58:3b:25:12:b3:39:ca:4a:e1:bd:
         99:bb:80:7c:0f:be:71:bf:10:73:6e:22:c2:c1:d4:be:14:6b:
         57:e7:d9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:10:39 2025 by rpki-client