Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7978/562BDB22EA6811EFB4135C60C4F9AE02/UAxgp_acBL6E_PPGVyPAeXDloSg.mft
File:                     UAxgp_acBL6E_PPGVyPAeXDloSg.mft (raw, json)
Hash identifier:          e6UERLsuPhQ38Rlo/sLOgx3OfAzAYih57MzMLxrhO9o=
Subject key identifier:   02:B9:FD:74:85:09:02:DC:9C:B3:09:6C:85:4A:DB:A5:3F:4B:D8:44
Authority key identifier: 50:0C:60:A7:F6:9C:04:BE:84:FC:F3:C6:57:23:C0:79:70:E5:A1:28
Certificate issuer:       /CN=A91A7978/serialNumber=500C60A7F69C04BE84FCF3C65723C07970E5A128
Certificate serial:       87
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UAxgp_acBL6E_PPGVyPAeXDloSg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7978/562BDB22EA6811EFB4135C60C4F9AE02/UAxgp_acBL6E_PPGVyPAeXDloSg.mft
Manifest number:          84
Signing time:             Sun 19 Oct 2025 09:59:47 +0000
Manifest this update:     Sun 19 Oct 2025 09:59:47 +0000
Manifest next update:     Sun 26 Oct 2025 09:59:47 +0000
Files and hashes:         1: UAxgp_acBL6E_PPGVyPAeXDloSg.crl (hash: eBsy++ltH1fSd/Yicde6POxkwbekGRQ9QMgmCjNJC40=)
                          2: 1EF560BEEA6911EF9AE7CD14C4F9AE02.roa (hash: lILeGFy8FkS3op8pqtEQAN5f/QrMhRlzhtxTRP45JV4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7978/562BDB22EA6811EFB4135C60C4F9AE02/UAxgp_acBL6E_PPGVyPAeXDloSg.crl
                          rsync://rpki.apnic.net/member_repository/A91A7978/562BDB22EA6811EFB4135C60C4F9AE02/UAxgp_acBL6E_PPGVyPAeXDloSg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UAxgp_acBL6E_PPGVyPAeXDloSg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 09:59:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135 (0x87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7978, serialNumber=500C60A7F69C04BE84FCF3C65723C07970E5A128
        Validity
            Not Before: Oct 19 09:59:47 2025 GMT
            Not After : Oct 26 09:59:47 2025 GMT
        Subject: CN=68f4b693-b91a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:62:69:73:83:e8:fb:f6:8f:94:26:6f:65:15:
                    68:bd:21:ee:cb:71:4b:3d:4a:38:c0:3c:27:1b:95:
                    07:ff:1e:a3:ed:2d:e3:0c:24:fe:91:6e:72:13:dd:
                    13:54:31:c6:44:68:85:5a:91:2b:d9:5a:25:1b:3b:
                    25:d6:7a:94:52:27:e5:94:ff:15:88:5a:60:75:96:
                    51:ef:e8:6d:3e:8e:e3:f0:36:a8:fc:76:4a:cb:6f:
                    90:7d:ec:cd:60:07:77:00:0f:53:5b:ee:18:bf:f1:
                    f9:3a:15:1d:1b:0c:93:f1:e1:9a:58:f2:91:31:71:
                    68:a2:ff:b3:03:be:de:9d:f0:ce:57:bb:82:8b:0b:
                    ae:ef:2c:12:28:23:19:18:1f:0d:ed:42:fa:1d:e6:
                    2b:3e:20:88:30:db:16:3b:b5:09:31:01:5d:0e:7c:
                    35:95:48:94:be:8b:46:8c:7f:1c:0f:5a:d9:5c:e6:
                    d4:12:89:24:e0:fb:e4:c4:e6:e3:2a:6f:91:32:0e:
                    81:43:36:e7:14:75:55:44:12:08:f5:92:ac:04:10:
                    21:fc:ac:0c:f3:86:0e:29:09:a4:3a:3b:d8:df:fc:
                    8d:12:96:24:d1:45:0e:83:fc:98:db:bc:24:d1:4e:
                    77:0a:28:79:e4:9f:06:1f:22:8e:7b:56:e4:63:93:
                    c3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:B9:FD:74:85:09:02:DC:9C:B3:09:6C:85:4A:DB:A5:3F:4B:D8:44
            X509v3 Authority Key Identifier:
                keyid:50:0C:60:A7:F6:9C:04:BE:84:FC:F3:C6:57:23:C0:79:70:E5:A1:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7978/562BDB22EA6811EFB4135C60C4F9AE02/UAxgp_acBL6E_PPGVyPAeXDloSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UAxgp_acBL6E_PPGVyPAeXDloSg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7978/562BDB22EA6811EFB4135C60C4F9AE02/UAxgp_acBL6E_PPGVyPAeXDloSg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:99:09:7e:39:77:75:91:5a:00:55:21:5f:45:88:ba:74:c8:
         de:39:07:06:25:e1:5c:ca:c1:35:1f:64:a4:1e:da:e7:81:ae:
         95:c1:6a:d7:f0:90:7c:02:89:c7:1a:dc:d8:75:8f:5f:ed:1c:
         00:7d:c0:1b:7f:60:06:c7:42:5e:36:99:0d:19:66:78:cd:12:
         2c:58:6b:bb:2d:73:c3:89:90:c5:1f:c7:4c:f2:be:f1:7e:7f:
         3b:57:7e:b1:4a:d6:04:7f:46:76:99:bb:57:bd:15:59:bb:52:
         ce:92:a5:ea:0a:3b:ec:ae:71:7e:8e:0a:c5:c7:ba:66:1d:0b:
         b7:dc:f4:63:36:66:6a:64:22:c1:1a:7a:6d:2a:c6:58:0f:19:
         b8:f3:ed:d9:70:24:65:4d:36:c8:04:53:a8:d3:c2:58:a4:d0:
         05:81:59:df:e8:9a:ae:d1:1d:68:51:e9:e7:9f:c0:40:c9:7e:
         c9:b6:e9:0a:2d:cc:7a:92:66:fa:c4:51:43:6b:6e:23:19:21:
         76:7c:a0:19:b3:c5:08:d6:61:18:3f:0b:43:16:5f:02:fb:3b:
         55:0e:4e:de:7d:ce:03:1f:54:e6:2e:41:6a:ce:2b:27:d6:3d:
         dd:be:14:3a:a7:78:d6:fe:2d:a8:c7:b9:13:3f:38:02:68:c5:
         a9:f5:25:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:55:42 2025 by rpki-client