Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F731E/566F347CF2A111EEA8A44F1AC4F9AE02/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.mft
File:                     ujlGsBPVR9Dpy6S7EbWKyQAcV-M.mft (raw, json)
Hash identifier:          NHB3BM6DQsVJxUaqoZ81OChgBGc1N6mj5ytqUzq0YlQ=
Subject key identifier:   08:03:6F:50:1C:5C:AB:B5:62:83:1C:DD:F1:7F:23:CB:EE:53:87:01
Authority key identifier: BA:39:46:B0:13:D5:47:D0:E9:CB:A4:BB:11:B5:8A:C9:00:1C:57:E3
Certificate issuer:       /CN=A91F731E/serialNumber=BA3946B013D547D0E9CBA4BB11B58AC9001C57E3
Certificate serial:       E9
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F731E/566F347CF2A111EEA8A44F1AC4F9AE02/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.mft
Manifest number:          E9
Signing time:             Wed 02 Jul 2025 16:09:37 +0000
Manifest this update:     Wed 02 Jul 2025 16:09:37 +0000
Manifest next update:     Wed 09 Jul 2025 16:09:37 +0000
Files and hashes:         1: ujlGsBPVR9Dpy6S7EbWKyQAcV-M.crl (hash: F815kdSaa5FmToHarhuBHS7N0HNhpGrYYIP6BZUIV2M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F731E/566F347CF2A111EEA8A44F1AC4F9AE02/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.crl
                          rsync://rpki.apnic.net/member_repository/A91F731E/566F347CF2A111EEA8A44F1AC4F9AE02/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 16:09:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 233 (0xe9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F731E, serialNumber=BA3946B013D547D0E9CBA4BB11B58AC9001C57E3
        Validity
            Not Before: Jul  2 16:09:37 2025 GMT
            Not After : Jul  9 16:09:37 2025 GMT
        Subject: CN=686559c1-fcd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a8:90:52:d4:a3:96:1f:96:0f:4b:40:31:f3:
                    37:2f:0a:7d:d8:19:ee:fa:5f:22:13:14:b9:41:ec:
                    de:0d:d1:74:bb:4a:db:02:53:18:ab:65:75:78:ab:
                    42:0a:2b:10:fa:07:e7:03:ba:28:9b:38:8f:f5:f9:
                    a0:74:60:8b:33:81:65:dc:ef:d3:ab:0d:1e:58:ba:
                    ef:29:21:34:4f:66:67:05:4c:b8:a2:50:81:a4:20:
                    f0:26:f1:f8:16:4e:79:6f:dd:8a:cb:bc:23:e1:1a:
                    78:77:0c:1a:3d:a0:b3:b9:00:92:92:fb:17:6d:cc:
                    08:16:95:6e:a9:67:74:9b:3b:c3:1b:ad:05:af:db:
                    a6:f2:03:57:d7:04:70:89:71:64:a4:62:a3:a1:28:
                    1a:5f:7a:11:9d:6b:7b:97:8d:18:71:23:34:79:6b:
                    de:ac:8f:ad:5f:e8:f3:af:9d:aa:86:fb:3f:2e:86:
                    5c:06:93:c8:5b:c8:9d:59:e1:b2:f2:c5:c7:62:45:
                    23:20:d9:a2:17:95:f9:19:d3:37:ec:8f:a3:e8:46:
                    11:eb:43:c5:ac:56:c5:ab:fd:69:1d:0b:b9:df:40:
                    20:00:62:78:12:b9:6d:54:67:2b:a0:e4:38:8a:37:
                    ed:07:12:e7:0b:02:6d:b1:5e:14:10:79:6d:88:c7:
                    f1:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:03:6F:50:1C:5C:AB:B5:62:83:1C:DD:F1:7F:23:CB:EE:53:87:01
            X509v3 Authority Key Identifier:
                keyid:BA:39:46:B0:13:D5:47:D0:E9:CB:A4:BB:11:B5:8A:C9:00:1C:57:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F731E/566F347CF2A111EEA8A44F1AC4F9AE02/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F731E/566F347CF2A111EEA8A44F1AC4F9AE02/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:5d:92:1a:dc:79:32:27:db:9f:7c:80:ee:9b:a4:4e:56:ac:
         b5:f4:d8:e2:6b:9b:0a:6d:a6:f7:80:50:1c:b1:0d:24:31:03:
         01:5b:7f:c9:d2:2d:23:be:ba:87:c8:28:1f:be:70:12:07:8c:
         e2:d5:e2:23:0d:cb:de:72:b4:f8:38:0d:47:c5:85:ee:fc:96:
         00:45:fd:2e:90:d0:cf:38:db:7d:01:5b:a3:6b:02:de:e5:74:
         03:ec:5d:fd:7b:5b:93:98:59:8c:d5:b7:f8:f2:ed:6c:c5:e3:
         32:ab:9f:bf:07:fd:02:9a:55:0e:a1:65:41:e4:43:df:0e:3d:
         ee:7a:c5:14:a7:d8:b5:03:7f:3c:b1:41:ff:0a:bb:4d:f2:d7:
         fd:f1:7d:32:6a:35:e5:ca:d7:36:03:90:be:fd:8a:76:7b:a6:
         3c:55:aa:06:5b:63:b6:9e:e0:af:64:01:07:09:ab:14:3b:a1:
         05:27:3d:8d:fc:f2:5a:8b:b2:d8:b2:07:df:e1:86:35:16:3c:
         54:12:22:bf:ef:82:30:6e:a4:43:99:57:eb:4b:77:00:7c:8a:
         1b:3e:67:02:a9:d6:2e:13:3e:8b:e9:9c:c0:46:33:8d:13:2a:
         98:fa:71:75:67:73:25:09:87:97:70:a6:0d:6b:77:70:80:3e:
         66:6a:a2:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 06:07:43 2025 by rpki-client