Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/UVabSMA4kUVORphTpn25Cb7CytY.mft
File:                     UVabSMA4kUVORphTpn25Cb7CytY.mft (raw, json)
Hash identifier:          XOz7AP6Ws+o/rbzv7vx2jYVda2Uw7ChW16kKCO/ygV0=
Subject key identifier:   B6:4A:93:ED:04:B7:9F:06:2E:E7:49:10:BF:8F:CF:44:F6:D0:02:87
Authority key identifier: 51:56:9B:48:C0:38:91:45:4E:46:98:53:A6:7D:B9:09:BE:C2:CA:D6
Certificate issuer:       /CN=A91C7672/serialNumber=51569B48C03891454E469853A67DB909BEC2CAD6
Certificate serial:       1C46
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UVabSMA4kUVORphTpn25Cb7CytY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/UVabSMA4kUVORphTpn25Cb7CytY.mft
Manifest number:          1C58
Signing time:             Fri 22 Aug 2025 16:17:53 +0000
Manifest this update:     Fri 22 Aug 2025 16:17:53 +0000
Manifest next update:     Fri 29 Aug 2025 16:17:53 +0000
Files and hashes:         1: UVabSMA4kUVORphTpn25Cb7CytY.crl (hash: xOdwe2H1K5r34JO7jCzk5B3GDN4E51JPi6iYBpKrGtc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/UVabSMA4kUVORphTpn25Cb7CytY.crl
                          rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/UVabSMA4kUVORphTpn25Cb7CytY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UVabSMA4kUVORphTpn25Cb7CytY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 16:17:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7238 (0x1c46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7672, serialNumber=51569B48C03891454E469853A67DB909BEC2CAD6
        Validity
            Not Before: Aug 22 16:17:53 2025 GMT
            Not After : Aug 29 16:17:53 2025 GMT
        Subject: CN=68a89831-c347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6c:6d:e2:0e:16:90:6c:3b:d8:bd:d1:3e:29:
                    13:58:07:2b:c5:70:d8:ea:9f:58:fa:59:06:a6:33:
                    78:3c:b4:b0:8b:6f:2d:79:9a:a4:0b:d5:76:80:3c:
                    5b:c4:b7:82:9f:70:d6:09:51:94:2b:3e:7b:91:80:
                    ad:82:7a:35:be:68:51:23:3e:66:69:a8:bc:d2:e7:
                    ad:c4:fc:e0:6c:ea:b2:e6:59:7a:b3:db:32:d0:bc:
                    cf:1c:72:fc:51:8e:30:4d:ff:ed:1c:74:07:d5:39:
                    b6:43:5b:49:15:c1:71:0b:99:b5:6e:42:fc:4e:12:
                    b4:95:28:d8:a0:97:f5:71:0e:0f:3f:1f:3d:62:e8:
                    0f:23:87:96:8e:5a:ef:28:25:c7:0d:21:dd:e9:2c:
                    27:51:0a:20:a1:c5:36:ff:78:5d:00:6d:28:57:1e:
                    bc:04:43:00:92:e8:9f:71:59:ca:f5:3d:40:f6:0f:
                    6a:a7:2a:db:96:31:3c:d7:a1:bf:52:26:b9:29:7c:
                    1b:38:bb:cb:44:6b:ce:37:d3:02:d4:56:9f:3a:f2:
                    df:4c:69:11:dd:3f:f7:b7:1d:6e:bb:12:7b:65:16:
                    34:4d:db:b2:da:40:66:ff:51:24:72:e7:06:80:51:
                    f3:d0:7d:7a:93:7d:57:64:85:72:38:82:f7:04:fe:
                    b7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:4A:93:ED:04:B7:9F:06:2E:E7:49:10:BF:8F:CF:44:F6:D0:02:87
            X509v3 Authority Key Identifier:
                keyid:51:56:9B:48:C0:38:91:45:4E:46:98:53:A6:7D:B9:09:BE:C2:CA:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/UVabSMA4kUVORphTpn25Cb7CytY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UVabSMA4kUVORphTpn25Cb7CytY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/UVabSMA4kUVORphTpn25Cb7CytY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:50:de:f0:91:59:d1:5b:f7:c2:5c:4a:8a:bf:5b:56:8a:7a:
         e4:2b:48:f3:6e:56:61:99:1b:82:05:3a:c2:34:f7:c4:12:05:
         66:90:ec:d6:01:47:e8:1d:88:e3:47:3e:5a:0e:6c:86:1b:ef:
         3a:f3:82:08:89:82:c5:78:83:76:d0:f7:6a:d2:f8:0e:91:c1:
         84:21:61:20:60:43:15:26:16:8e:66:02:c2:b2:52:5b:fc:6e:
         e8:be:38:cd:e3:8c:10:e9:25:6c:8e:76:7d:24:80:a4:cd:26:
         5d:59:6f:f3:a2:28:df:a8:87:a4:60:21:c9:8f:87:95:5a:c3:
         71:9d:11:15:42:dd:10:36:7d:38:aa:fc:78:4e:f6:bd:56:59:
         79:ae:22:31:6b:60:14:ca:85:dd:6b:cd:bc:f5:75:5c:5d:d5:
         c0:57:e4:f7:48:e8:71:2e:af:eb:60:35:de:2f:40:1f:fc:5d:
         9f:ee:26:ec:84:6b:4c:ad:6a:26:30:7a:b2:3f:d7:15:ef:a6:
         6a:c3:54:9b:36:fd:61:01:b2:1e:ab:4a:c7:65:37:2d:26:0f:
         c6:7c:24:58:c1:52:61:0f:c7:81:50:39:5a:15:2c:0b:e9:62:
         6e:2a:c9:64:9e:42:62:d7:b4:6a:ac:8f:b8:4b:d2:8b:a6:3b:
         35:66:4a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:24:09 2025 by rpki-client