Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/UVabSMA4kUVORphTpn25Cb7CytY.mft
File:                     UVabSMA4kUVORphTpn25Cb7CytY.mft (raw, json)
Hash identifier:          orc6MRO1V/hiYa+Yu3sb1INpvsvQMwUCuznw1uVIvA4=
Subject key identifier:   6C:D3:ED:5A:65:1D:F2:BC:E8:84:59:69:D2:24:C7:F1:34:AE:7F:55
Authority key identifier: 51:56:9B:48:C0:38:91:45:4E:46:98:53:A6:7D:B9:09:BE:C2:CA:D6
Certificate issuer:       /CN=A91C7672/serialNumber=51569B48C03891454E469853A67DB909BEC2CAD6
Certificate serial:       1C63
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UVabSMA4kUVORphTpn25Cb7CytY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/UVabSMA4kUVORphTpn25Cb7CytY.mft
Manifest number:          1C92
Signing time:             Sat 18 Oct 2025 16:31:59 +0000
Manifest this update:     Sat 18 Oct 2025 16:31:58 +0000
Manifest next update:     Sat 25 Oct 2025 16:31:58 +0000
Files and hashes:         1: UVabSMA4kUVORphTpn25Cb7CytY.crl (hash: tuKqJmqz6NnYxq9V5lVByu06l3mC6lkCFzEK8Hjcakc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/UVabSMA4kUVORphTpn25Cb7CytY.crl
                          rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/UVabSMA4kUVORphTpn25Cb7CytY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UVabSMA4kUVORphTpn25Cb7CytY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 16:31:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7267 (0x1c63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7672, serialNumber=51569B48C03891454E469853A67DB909BEC2CAD6
        Validity
            Not Before: Oct 18 16:31:58 2025 GMT
            Not After : Oct 25 16:31:58 2025 GMT
        Subject: CN=68f3c0ff-57e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f0:ec:5e:e5:eb:99:15:0f:28:02:f0:39:ff:
                    79:39:d6:21:1d:27:8d:4d:73:63:97:c3:ba:da:5a:
                    6f:3f:91:c8:5d:b3:22:c1:bd:b7:c6:d8:cc:0d:2e:
                    ee:32:95:df:65:90:ea:91:39:fe:a8:f8:35:d7:42:
                    02:01:c3:4c:2e:48:ed:2b:f2:cf:98:e1:3c:14:db:
                    5c:a9:df:8c:4c:c7:c7:e7:9a:89:1c:df:61:3d:bf:
                    46:0b:b6:f3:25:36:d4:a4:c9:59:64:32:8e:3f:14:
                    77:01:30:b1:d3:cb:bc:e1:17:3d:64:78:88:d1:e1:
                    94:68:01:b7:32:2d:c0:0b:e2:da:37:94:ff:18:75:
                    53:9b:de:1d:e9:63:59:52:2b:b7:ee:83:af:61:2f:
                    03:d7:21:8b:a1:9e:f2:b9:e9:4c:f5:6f:19:a9:e0:
                    39:41:1e:28:87:57:c4:b0:bf:c9:0e:7a:e2:8b:35:
                    06:08:3e:b6:a2:0c:be:4f:a4:88:f6:0a:f7:44:67:
                    64:96:88:ea:c6:62:5a:3f:12:1b:bd:53:fa:35:03:
                    61:d5:c9:13:11:07:a4:0d:42:f8:96:bf:48:d0:7a:
                    21:26:5c:ac:16:0a:04:55:7c:02:e8:0c:c5:93:d7:
                    c8:fa:7a:cb:21:3d:e6:8e:41:d3:25:2e:ea:f0:55:
                    b1:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:D3:ED:5A:65:1D:F2:BC:E8:84:59:69:D2:24:C7:F1:34:AE:7F:55
            X509v3 Authority Key Identifier:
                keyid:51:56:9B:48:C0:38:91:45:4E:46:98:53:A6:7D:B9:09:BE:C2:CA:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/UVabSMA4kUVORphTpn25Cb7CytY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UVabSMA4kUVORphTpn25Cb7CytY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/UVabSMA4kUVORphTpn25Cb7CytY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:a7:4a:5b:c9:ad:41:33:5c:d0:04:78:8c:f7:0d:7c:49:85:
         a8:53:d0:2f:c4:db:46:51:32:83:ce:0c:a1:91:bf:ac:3a:03:
         bf:36:52:06:28:e4:f4:64:f9:67:77:3f:dc:fe:19:66:95:d9:
         16:f4:e4:e3:a3:b4:ef:5c:4f:ad:ac:ff:90:2a:6e:99:8b:a2:
         88:78:f5:7b:28:34:f8:92:ee:7e:ec:e9:a6:a9:84:58:e1:4f:
         35:90:14:6c:0a:24:fd:64:ea:3d:77:34:f3:65:be:c9:8c:40:
         ed:ca:a1:44:10:55:ff:24:2c:15:78:4d:ea:2b:b3:11:2b:a7:
         95:13:2e:b5:84:fc:aa:d8:cf:26:d2:ce:fe:c4:5d:cc:97:4d:
         20:b7:5f:31:fc:94:96:a7:52:67:36:f4:ae:f4:30:02:05:99:
         4a:59:e7:73:7b:4d:4f:81:c2:00:45:5b:60:d1:fb:a2:a7:78:
         47:2d:9a:c8:be:eb:48:51:3f:8c:b4:50:d9:38:e6:0d:c4:3d:
         5c:84:aa:d8:e2:3c:79:94:f4:58:9f:ce:1c:88:0d:0d:8e:72:
         c5:01:97:0d:40:eb:ee:03:e1:71:18:38:9b:2c:59:de:4f:a3:
         3f:84:c9:b2:f2:1c:c1:11:f3:ab:ad:07:40:a9:a0:f2:d2:b2:
         4c:51:60:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:33:42 2025 by rpki-client