Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft
File:                     uokBTrxJS2f9iz-C6LOO9vbFck0.mft (raw, json)
Hash identifier:          nu+6TmxO3dx1zfoUzKh74K62WZPXBPLjpFJEgQswo3A=
Subject key identifier:   D5:52:42:D8:2B:AB:43:F4:E9:34:D4:6A:DD:68:B0:3C:5E:D3:59:6A
Authority key identifier: BA:89:01:4E:BC:49:4B:67:FD:8B:3F:82:E8:B3:8E:F6:F6:C5:72:4D
Certificate issuer:       /CN=A91C4EC7/serialNumber=BA89014EBC494B67FD8B3F82E8B38EF6F6C5724D
Certificate serial:       0150
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uokBTrxJS2f9iz-C6LOO9vbFck0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft
Manifest number:          014A
Signing time:             Sun 19 Oct 2025 07:08:49 +0000
Manifest this update:     Sun 19 Oct 2025 07:08:48 +0000
Manifest next update:     Sun 26 Oct 2025 07:08:48 +0000
Files and hashes:         1: uokBTrxJS2f9iz-C6LOO9vbFck0.crl (hash: dDnwNo80fIu9edK7yUKbxazWQWq0xqW6gsRUGSAHYLs=)
                          2: ED352AAEBFE511EEBB3B4D25C4F9AE02.roa (hash: Cg10Lh1/jWjaqO5EBHv5C6vMK3khuwZ/+iMJMpvh7AE=)
                          3: 7FC61EDC2E1D11EF933E9981C4F9AE02.roa (hash: lJjM0vXxFGkR8fpKRXKFywWPgH/0gbH+qkVNiWKRaAw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.crl
                          rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uokBTrxJS2f9iz-C6LOO9vbFck0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 07:08:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 336 (0x150)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C4EC7, serialNumber=BA89014EBC494B67FD8B3F82E8B38EF6F6C5724D
        Validity
            Not Before: Oct 19 07:08:48 2025 GMT
            Not After : Oct 26 07:08:48 2025 GMT
        Subject: CN=68f48e81-769f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:61:fd:32:3e:1f:28:39:d5:1e:17:a1:28:31:
                    6d:bd:a5:36:64:0e:5c:c5:2d:c6:03:f4:53:f2:a1:
                    21:76:4f:6d:3f:7d:b2:bb:bd:36:44:d9:51:76:52:
                    fa:23:33:5e:de:75:8d:6c:61:9c:22:c5:20:7f:f1:
                    eb:27:1a:d3:00:bf:31:74:c4:88:e0:98:d8:8b:86:
                    4f:a6:ee:47:cf:30:1a:8a:bc:61:62:c4:fc:70:60:
                    4c:5b:dd:8c:9f:ea:e7:6c:ad:45:66:af:27:07:ef:
                    56:d6:3e:1f:d6:b1:7e:ac:fb:a7:9c:85:96:45:4d:
                    03:f9:32:96:28:b9:32:cd:53:19:dd:c0:89:7f:79:
                    5e:48:b6:df:c1:d9:5a:87:ab:1a:32:ae:14:3b:5d:
                    9e:48:0b:65:97:64:63:50:d0:07:ca:a3:e9:03:70:
                    a8:70:aa:1b:ca:6d:90:e6:66:40:cc:b1:44:34:aa:
                    ad:44:57:38:5b:43:dd:14:05:77:bf:1d:da:16:c7:
                    57:f0:03:26:0d:72:92:b1:5d:fe:ce:0c:ca:1f:79:
                    f0:c1:9c:66:9f:6c:5b:b7:35:8e:19:2a:04:75:2a:
                    1c:c9:d8:f7:f2:ab:b4:89:6b:a3:70:e4:f4:34:41:
                    45:93:b1:02:dc:6c:2b:24:c1:15:18:52:8f:2f:e6:
                    39:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:52:42:D8:2B:AB:43:F4:E9:34:D4:6A:DD:68:B0:3C:5E:D3:59:6A
            X509v3 Authority Key Identifier:
                keyid:BA:89:01:4E:BC:49:4B:67:FD:8B:3F:82:E8:B3:8E:F6:F6:C5:72:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uokBTrxJS2f9iz-C6LOO9vbFck0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:2a:dd:0d:6d:ca:3a:cf:19:8c:1d:1a:e2:7c:0e:ce:82:9a:
         fa:43:63:2a:77:b1:b4:1b:af:72:0b:60:67:44:d9:5b:bf:53:
         e4:3f:98:4f:e2:a8:17:bf:bc:de:a8:d2:a7:4d:08:56:7e:9f:
         a3:9d:fe:a5:3a:53:6f:b3:df:03:cf:aa:2f:61:35:a2:65:61:
         4d:62:3b:09:7d:f4:36:40:80:3c:14:16:ff:ce:d8:5b:40:46:
         0e:e3:b0:38:a1:af:b3:ec:9b:94:6a:cb:a8:24:f0:e7:5c:24:
         3c:f8:84:52:be:49:04:d6:cb:14:dc:b3:4d:9a:34:8a:a1:cd:
         ba:2d:f8:bd:30:99:dc:21:fb:d4:71:ff:c9:60:44:49:0a:7f:
         f2:b4:bd:e3:7b:99:c2:37:3d:eb:82:04:e6:29:b5:bb:9e:15:
         7d:f3:89:c7:67:80:c2:8e:0e:44:68:db:2d:c9:ea:c6:74:5d:
         14:c0:68:a9:2e:6c:8b:b9:61:e3:f2:01:60:12:9d:4c:98:56:
         ea:4f:17:50:49:2e:5b:fb:99:e8:8c:a0:af:ba:43:51:9f:46:
         93:f1:5e:25:56:62:b3:40:b5:16:b2:97:60:e3:6f:e9:47:c6:
         28:de:59:2a:d0:3b:5c:05:7d:c0:79:62:c2:04:38:69:fe:d0:
         7f:ac:f8:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:55:04 2025 by rpki-client