Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA735/C7F441C6639B11EF9B4D2A5DC4F9AE02/uzvV1-GZJNhitqQb80x_27vpHG0.mft
File:                     uzvV1-GZJNhitqQb80x_27vpHG0.mft (raw, json)
Hash identifier:          /8EOlLZlVIFCkZHhnNdlsquskasRDveN5jbhh5oNOCA=
Subject key identifier:   FA:32:25:0E:52:01:B7:58:5E:97:CD:7A:BC:84:5B:0B:13:72:0D:70
Authority key identifier: BB:3B:D5:D7:E1:99:24:D8:62:B6:A4:1B:F3:4C:7F:DB:BB:E9:1C:6D
Certificate issuer:       /CN=A91CA735/serialNumber=BB3BD5D7E19924D862B6A41BF34C7FDBBBE91C6D
Certificate serial:       E0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uzvV1-GZJNhitqQb80x_27vpHG0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CA735/C7F441C6639B11EF9B4D2A5DC4F9AE02/uzvV1-GZJNhitqQb80x_27vpHG0.mft
Manifest number:          DD
Signing time:             Sun 19 Oct 2025 08:38:05 +0000
Manifest this update:     Sun 19 Oct 2025 08:38:05 +0000
Manifest next update:     Sun 26 Oct 2025 08:38:05 +0000
Files and hashes:         1: uzvV1-GZJNhitqQb80x_27vpHG0.crl (hash: eGXu3LifWmSMgSO0SuCOMx4GgaxepZG3h0Ujn/Yzwgs=)
                          2: 385E3308639D11EFB668775FC4F9AE02.roa (hash: TCYXclRvYYtZUxQ5mRKUajDIcjauKFDG/zZisgUfCFk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CA735/C7F441C6639B11EF9B4D2A5DC4F9AE02/uzvV1-GZJNhitqQb80x_27vpHG0.crl
                          rsync://rpki.apnic.net/member_repository/A91CA735/C7F441C6639B11EF9B4D2A5DC4F9AE02/uzvV1-GZJNhitqQb80x_27vpHG0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uzvV1-GZJNhitqQb80x_27vpHG0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 08:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 224 (0xe0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CA735, serialNumber=BB3BD5D7E19924D862B6A41BF34C7FDBBBE91C6D
        Validity
            Not Before: Oct 19 08:38:05 2025 GMT
            Not After : Oct 26 08:38:05 2025 GMT
        Subject: CN=68f4a36d-1468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:da:8a:3c:78:28:a4:2c:ca:31:d9:77:3c:4f:
                    58:26:86:37:4e:ce:f5:fe:d9:0e:ef:09:7d:98:e5:
                    f9:46:11:84:6d:3e:09:6d:ef:f1:b4:6e:8e:ce:f5:
                    8a:30:7a:9e:03:4f:2d:ea:0a:21:3c:ed:49:6f:f7:
                    df:9b:9b:61:a1:23:07:d6:68:d5:37:91:5c:0c:cb:
                    41:b3:8a:ac:06:9e:c5:a2:3b:c6:d2:fc:c8:43:97:
                    53:27:c2:2b:8b:46:17:90:cb:4b:b7:4e:9c:85:90:
                    72:e7:08:87:6c:5d:a2:1d:ab:fa:6a:9b:a5:1f:d7:
                    eb:9e:e5:e9:b6:dd:98:6c:8b:83:7d:47:33:27:b2:
                    c9:7d:62:89:9f:df:d6:de:e9:7d:1f:25:44:fe:3b:
                    1d:58:dd:2d:bf:5c:7b:af:25:81:50:0e:fa:69:4e:
                    9e:4c:3c:f7:b8:f6:9d:dc:fd:65:12:c0:bf:86:db:
                    54:6e:56:b1:0e:3f:b4:55:4a:5a:fa:e8:fa:11:cf:
                    cc:c1:aa:45:b2:b9:b4:d5:d8:80:1c:68:6f:47:24:
                    94:00:ed:26:15:4e:a1:18:2b:c1:8e:c7:0e:ca:b0:
                    01:2f:1d:c5:3f:67:4b:f4:3c:81:da:7c:ed:06:cb:
                    44:ae:1d:79:f8:91:8a:21:88:d8:7c:d0:65:0f:df:
                    fd:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:32:25:0E:52:01:B7:58:5E:97:CD:7A:BC:84:5B:0B:13:72:0D:70
            X509v3 Authority Key Identifier:
                keyid:BB:3B:D5:D7:E1:99:24:D8:62:B6:A4:1B:F3:4C:7F:DB:BB:E9:1C:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CA735/C7F441C6639B11EF9B4D2A5DC4F9AE02/uzvV1-GZJNhitqQb80x_27vpHG0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uzvV1-GZJNhitqQb80x_27vpHG0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA735/C7F441C6639B11EF9B4D2A5DC4F9AE02/uzvV1-GZJNhitqQb80x_27vpHG0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:36:3e:0b:52:3c:29:75:ba:e7:f0:db:c9:2a:39:7f:40:f3:
         61:a3:ef:fa:62:2e:34:49:bb:6a:e2:3d:d7:e4:97:2b:a3:1a:
         67:24:35:b0:f5:5a:84:aa:c4:36:70:d1:8c:a4:9e:66:9c:23:
         4e:62:ab:06:6b:9f:23:90:dd:1c:9d:c7:fa:83:2c:2c:9d:1d:
         b4:3c:4c:8e:c4:c3:5d:f9:a6:cc:96:49:d1:fa:35:70:44:8a:
         39:1b:20:77:5b:80:db:44:57:99:04:53:64:19:b0:f0:90:d3:
         e6:e9:ad:bb:44:a9:66:06:6c:59:4e:3d:90:6e:f7:23:10:32:
         ce:d6:87:d7:9d:e2:c9:d2:4d:18:a0:8f:dc:86:4e:34:7a:53:
         97:a0:1a:d3:57:91:9d:d2:c4:c2:dc:8a:3d:b5:3a:5b:91:f3:
         6d:b8:53:6b:63:9c:84:f0:d4:39:0f:3d:b2:21:ee:08:d3:ec:
         5f:e8:c2:fe:0c:8e:75:0d:89:d3:c0:a5:a3:1c:f7:b8:7b:e0:
         7f:c1:36:07:89:d9:43:04:67:3a:23:df:d4:8f:d8:00:58:f4:
         49:39:1c:6e:ba:09:8b:a2:5c:3e:98:72:83:85:f4:f8:d6:b4:
         30:bc:73:b2:e2:b5:85:f4:5f:6f:bf:ce:99:dc:fd:6e:54:e1:
         48:50:04:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:25:44 2025 by rpki-client