Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4413/20002C12236711ED97C2EF27C4F9AE02/u4g-aByWIiVDBg6XnT6Chuq2iok.mft
File:                     u4g-aByWIiVDBg6XnT6Chuq2iok.mft (raw, json)
Hash identifier:          8hKpSBTNMF8t0HK0LivNkJKVIUIh6wVOeML65mY4ri0=
Subject key identifier:   6B:45:50:44:33:DB:4E:D0:A6:D6:16:C5:B2:DC:A2:DA:3D:E9:F8:A3
Authority key identifier: BB:88:3E:68:1C:96:22:25:43:06:0E:97:9D:3E:82:86:EA:B6:8A:89
Certificate issuer:       /CN=A91A4413/serialNumber=BB883E681C96222543060E979D3E8286EAB68A89
Certificate serial:       026E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4g-aByWIiVDBg6XnT6Chuq2iok.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4413/20002C12236711ED97C2EF27C4F9AE02/u4g-aByWIiVDBg6XnT6Chuq2iok.mft
Manifest number:          026A
Signing time:             Sat 23 Aug 2025 01:58:08 +0000
Manifest this update:     Sat 23 Aug 2025 01:58:08 +0000
Manifest next update:     Sat 30 Aug 2025 01:58:08 +0000
Files and hashes:         1: u4g-aByWIiVDBg6XnT6Chuq2iok.crl (hash: Ld8vQaS7fypn0dUuCQfe8P54BuwQkncIvJ9tSVgvtZ0=)
                          2: 3D3C7DC8236A11ED8018D62BC4F9AE02.roa (hash: ulvwJEE9TrSCR3alPiPFyCbLR3kKPVNTCzyUzxRhzpM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4413/20002C12236711ED97C2EF27C4F9AE02/u4g-aByWIiVDBg6XnT6Chuq2iok.crl
                          rsync://rpki.apnic.net/member_repository/A91A4413/20002C12236711ED97C2EF27C4F9AE02/u4g-aByWIiVDBg6XnT6Chuq2iok.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4g-aByWIiVDBg6XnT6Chuq2iok.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 01:58:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 622 (0x26e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4413, serialNumber=BB883E681C96222543060E979D3E8286EAB68A89
        Validity
            Not Before: Aug 23 01:58:08 2025 GMT
            Not After : Aug 30 01:58:08 2025 GMT
        Subject: CN=68a92030-2011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ee:fd:a4:3d:01:40:af:73:0e:a0:c2:b1:60:
                    04:c7:69:8b:dd:c8:7e:0b:34:1f:f5:38:b2:09:81:
                    4b:96:3f:aa:0d:11:ca:58:f0:17:78:dc:c9:a0:81:
                    c6:fc:df:7f:f7:f0:0a:46:0b:8e:32:61:27:f8:d2:
                    d0:b7:71:8f:a9:3d:4e:2e:dc:65:b6:cb:a9:f8:b9:
                    84:b8:10:cd:a4:8b:f6:9f:41:d6:19:e2:aa:4d:9f:
                    43:df:3a:14:16:16:20:34:59:08:40:9c:c5:86:06:
                    02:68:aa:ef:53:d9:c8:25:30:b2:f0:c0:bd:68:53:
                    1f:65:fa:57:a8:71:3a:cc:7e:25:de:8c:47:f1:e8:
                    1c:b8:ad:59:f9:bd:d3:c9:d0:4e:89:84:d8:eb:31:
                    71:d3:c9:52:5b:86:b3:6e:a5:7c:64:6d:a7:29:e4:
                    7e:10:fe:b4:b0:5c:0e:0d:9f:be:a1:ca:56:65:17:
                    a3:e4:ff:a1:a5:aa:ca:b9:ff:75:34:6d:c0:58:d1:
                    9c:39:7c:51:04:25:eb:f4:a2:80:20:a2:fa:1b:ad:
                    bc:14:76:c0:e2:c3:53:41:84:e2:fb:84:59:52:a9:
                    8f:b8:c3:22:63:1a:f9:7c:4a:b3:a0:cc:2e:fd:fc:
                    ff:03:4b:03:d9:c2:6d:e4:df:73:02:05:d1:19:74:
                    d2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:45:50:44:33:DB:4E:D0:A6:D6:16:C5:B2:DC:A2:DA:3D:E9:F8:A3
            X509v3 Authority Key Identifier:
                keyid:BB:88:3E:68:1C:96:22:25:43:06:0E:97:9D:3E:82:86:EA:B6:8A:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4413/20002C12236711ED97C2EF27C4F9AE02/u4g-aByWIiVDBg6XnT6Chuq2iok.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4g-aByWIiVDBg6XnT6Chuq2iok.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4413/20002C12236711ED97C2EF27C4F9AE02/u4g-aByWIiVDBg6XnT6Chuq2iok.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:cc:c6:f3:e8:1e:60:65:b9:bd:a2:aa:e0:e2:15:f1:d4:cf:
         7f:da:15:1b:50:0f:ba:55:05:d5:ef:c2:2d:35:fc:5b:93:0e:
         10:46:56:d2:33:48:5e:61:5f:c3:4f:07:10:0d:3c:c7:3b:52:
         32:cc:2a:4e:25:71:27:f6:bc:a6:40:67:10:94:7d:0e:5c:c7:
         f1:c6:00:f0:cc:4d:4e:a9:a3:90:58:e1:f9:94:8a:28:94:e0:
         67:b7:76:34:b9:f7:4f:da:7d:54:89:fc:6b:01:cd:f7:06:bc:
         92:32:5e:fb:c3:92:e7:e1:e7:f2:ff:0d:59:d6:dc:09:2b:73:
         e0:f9:00:b8:c6:41:95:09:be:b2:23:fb:12:b7:6f:d5:aa:94:
         24:c3:7c:ff:3c:31:84:76:0e:a5:7c:7a:6c:13:35:01:17:d2:
         d8:41:56:95:68:e3:a9:15:b7:95:4f:59:d4:80:f4:68:77:77:
         a2:3c:f0:26:29:eb:14:dc:6b:f0:85:11:97:05:1e:c5:4c:07:
         d0:5b:3c:9f:2c:4d:05:9e:60:a1:f0:d4:00:67:ad:87:df:9b:
         a7:a3:70:e5:5e:e8:b0:6f:52:95:e8:81:47:ef:00:98:1e:8d:
         49:9c:ea:6d:3f:ba:5d:7f:ad:1a:8c:e7:9e:10:ab:f5:77:31:
         a9:40:50:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:46:33 2025 by rpki-client