Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.mft
File:                     uPYcq7kRnWw3aF8KvjSu4moCF-Y.mft (raw, json)
Hash identifier:          HwTA4Cc+lYo7ZqlundEI+BGYeT/7MUwncXh4JpufjPA=
Subject key identifier:   B5:04:8F:E7:62:63:E9:08:98:43:46:BD:EE:92:9B:17:26:67:EF:D5
Authority key identifier: B8:F6:1C:AB:B9:11:9D:6C:37:68:5F:0A:BE:34:AE:E2:6A:02:17:E6
Certificate issuer:       /CN=A919D72D/serialNumber=B8F61CABB9119D6C37685F0ABE34AEE26A0217E6
Certificate serial:       067D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPYcq7kRnWw3aF8KvjSu4moCF-Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.mft
Manifest number:          0677
Signing time:             Sun 19 Oct 2025 00:01:48 +0000
Manifest this update:     Sun 19 Oct 2025 00:01:48 +0000
Manifest next update:     Sun 26 Oct 2025 00:01:48 +0000
Files and hashes:         1: uPYcq7kRnWw3aF8KvjSu4moCF-Y.crl (hash: WW7CI68tq2QRJVHMyVw0j9/CfJGzc7XFcLhV7qd4yGk=)
                          2: 00C79724968F11EB9A79630BC4F9AE02.roa (hash: Y2zv5qoN2STM8iOeHa24FYyQDvrtP06yfpXTjv2gJRo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.crl
                          rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPYcq7kRnWw3aF8KvjSu4moCF-Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 00:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1661 (0x67d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D72D, serialNumber=B8F61CABB9119D6C37685F0ABE34AEE26A0217E6
        Validity
            Not Before: Oct 19 00:01:48 2025 GMT
            Not After : Oct 26 00:01:48 2025 GMT
        Subject: CN=68f42a6c-d3a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:56:cc:5f:9e:92:11:63:52:90:95:f7:61:04:
                    dc:6c:bb:d2:c6:0d:4b:9a:00:13:d3:52:94:11:85:
                    57:39:e0:d9:75:f4:39:7f:ba:be:cd:3f:9b:66:73:
                    f0:c7:c3:0c:30:e1:f4:ef:d0:bb:19:b3:a9:90:e2:
                    a2:64:8b:bf:e8:8b:23:44:14:fa:2b:5f:12:61:f6:
                    8c:47:14:1d:35:c0:c2:87:db:98:84:a8:17:e1:95:
                    2d:91:0b:72:b5:af:bf:95:d8:ab:65:ee:c8:38:6c:
                    28:04:07:45:f3:dc:91:fe:42:00:6b:95:15:85:b5:
                    26:e9:f0:1d:8b:5e:c5:e9:d9:ef:34:44:86:f8:82:
                    bb:24:e2:c2:43:24:93:ef:9b:cc:08:5d:b4:0f:8d:
                    97:6f:75:38:95:6f:60:46:62:93:7b:1c:32:f9:ee:
                    92:ef:7f:0c:b8:2a:de:40:84:7f:26:3f:29:11:8f:
                    cd:ed:12:a7:c3:2f:0c:3c:b4:58:e1:92:bd:d9:ce:
                    f2:fc:3b:24:6d:58:ed:5b:ac:92:50:e7:92:40:4d:
                    a8:fc:5e:9f:c9:e8:64:88:d1:fe:3e:be:24:ec:5f:
                    58:ea:fe:c1:0a:66:1c:fd:6b:a9:51:8e:55:8e:1b:
                    12:f2:8f:cf:e6:7f:0c:0e:82:c9:ca:54:05:73:ea:
                    c4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:04:8F:E7:62:63:E9:08:98:43:46:BD:EE:92:9B:17:26:67:EF:D5
            X509v3 Authority Key Identifier:
                keyid:B8:F6:1C:AB:B9:11:9D:6C:37:68:5F:0A:BE:34:AE:E2:6A:02:17:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPYcq7kRnWw3aF8KvjSu4moCF-Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:55:c7:a6:83:ba:f2:bd:30:a9:50:11:5b:7e:14:34:b3:aa:
         e0:9a:ec:37:e8:d5:26:7e:24:0f:cc:0f:f6:f7:2b:d3:40:41:
         ad:26:eb:75:8d:c1:e2:75:2e:a0:75:c3:4e:b7:d9:f7:34:9d:
         84:e9:1c:93:5e:11:2f:16:dd:ba:0a:bc:7c:50:51:5d:f2:b1:
         75:64:f8:85:a5:43:29:ae:0d:9a:26:76:ef:bb:04:c6:13:72:
         9d:b7:4b:0a:dc:c6:37:c8:e8:e8:3a:07:5a:8a:e0:8b:34:eb:
         e5:94:e0:d9:8f:aa:85:4f:d1:f7:18:c3:fc:4d:eb:ef:ea:49:
         80:02:24:e9:1c:18:89:67:eb:a8:73:0b:0e:5f:c2:9c:91:ab:
         41:16:bc:46:68:7d:c4:cc:28:6f:9f:6a:f5:75:04:1b:fa:d8:
         d0:4d:ee:50:cf:4b:3a:41:54:a8:70:da:0e:d5:28:38:31:48:
         83:97:29:d7:a6:7c:83:f9:38:a4:27:4e:fc:66:16:6d:3a:5c:
         99:b6:9d:09:71:95:7d:88:24:4b:b0:b2:37:5c:48:8d:fb:29:
         ff:46:42:a7:8a:a1:55:77:0a:19:e1:9b:4e:11:1f:4f:d0:d6:
         a1:69:4e:e0:9d:bd:2f:c4:f9:15:2e:49:e5:0c:0c:67:92:c5:
         e7:10:a6:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:47:42 2025 by rpki-client