Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F731E/566F347CF2A111EEA8A44F1AC4F9AE02/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.mft
File:                     ujlGsBPVR9Dpy6S7EbWKyQAcV-M.mft (raw, json)
Hash identifier:          YuKfOOn1SBlTpi68D6pWCdsciGtZrokxnKX44g8yycQ=
Subject key identifier:   D9:F5:18:20:56:2A:CE:32:29:B0:E5:85:E7:FE:4A:38:CE:70:D2:8B
Authority key identifier: BA:39:46:B0:13:D5:47:D0:E9:CB:A4:BB:11:B5:8A:C9:00:1C:57:E3
Certificate issuer:       /CN=A91F731E/serialNumber=BA3946B013D547D0E9CBA4BB11B58AC9001C57E3
Certificate serial:       0122
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F731E/566F347CF2A111EEA8A44F1AC4F9AE02/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.mft
Manifest number:          0122
Signing time:             Mon 20 Oct 2025 16:16:17 +0000
Manifest this update:     Mon 20 Oct 2025 16:16:17 +0000
Manifest next update:     Mon 27 Oct 2025 16:16:17 +0000
Files and hashes:         1: ujlGsBPVR9Dpy6S7EbWKyQAcV-M.crl (hash: bmFUZKPRviMDL5eYWfRRdZby+U7MciKIAMxtuT6XnI8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F731E/566F347CF2A111EEA8A44F1AC4F9AE02/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.crl
                          rsync://rpki.apnic.net/member_repository/A91F731E/566F347CF2A111EEA8A44F1AC4F9AE02/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 16:16:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 290 (0x122)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F731E, serialNumber=BA3946B013D547D0E9CBA4BB11B58AC9001C57E3
        Validity
            Not Before: Oct 20 16:16:17 2025 GMT
            Not After : Oct 27 16:16:17 2025 GMT
        Subject: CN=68f66051-a7c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c8:42:eb:3d:01:6e:62:0a:ba:de:49:56:87:
                    ff:d8:80:36:a3:74:3d:9c:ed:26:4a:d2:86:72:a3:
                    2d:e8:95:76:ba:51:ab:6b:27:4c:5e:a1:97:e9:04:
                    59:b9:5f:51:36:73:65:8b:57:0f:1e:9b:80:aa:6f:
                    cd:3f:4b:48:c4:f8:28:26:f8:64:bb:02:8d:34:b6:
                    bd:f0:c2:35:0c:8a:42:3f:84:3b:39:b8:79:f4:cb:
                    e3:9d:c3:31:32:e8:51:6d:87:c3:76:1e:b5:da:e7:
                    17:12:9c:17:14:9b:d2:9d:60:b9:7c:72:a1:b1:16:
                    77:1b:52:57:3c:5b:ef:22:8d:f2:d3:ef:fe:ef:4e:
                    0d:7f:37:c1:3d:24:b1:2f:9d:91:7b:e8:06:0b:64:
                    0c:f6:fe:30:b3:20:c0:56:73:c9:48:29:5f:11:34:
                    7a:0e:e0:b4:71:5d:c7:cb:b6:49:f4:99:68:35:6d:
                    cd:97:59:13:02:c0:c3:42:cb:ba:bf:8f:c1:d7:ac:
                    7c:66:61:01:30:69:eb:8b:8c:30:70:13:6f:b5:cf:
                    cc:01:82:51:97:64:0b:24:02:5c:66:2e:fb:13:ef:
                    44:80:18:9e:ea:c1:f5:10:4a:f7:a7:7d:b6:c1:d8:
                    a9:b4:8d:13:58:35:5a:df:6e:d7:18:3b:ea:dd:ad:
                    3e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:F5:18:20:56:2A:CE:32:29:B0:E5:85:E7:FE:4A:38:CE:70:D2:8B
            X509v3 Authority Key Identifier:
                keyid:BA:39:46:B0:13:D5:47:D0:E9:CB:A4:BB:11:B5:8A:C9:00:1C:57:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F731E/566F347CF2A111EEA8A44F1AC4F9AE02/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F731E/566F347CF2A111EEA8A44F1AC4F9AE02/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:14:61:05:ee:26:cd:3b:3d:bd:44:38:60:20:4f:51:3f:31:
         0f:66:ae:88:b7:c2:80:7d:6b:4b:41:0d:0c:5a:e1:e9:75:70:
         00:93:b9:48:45:5c:43:7a:e5:7a:55:d6:c0:d5:98:6d:7e:c8:
         82:69:91:98:34:6f:69:7d:23:c4:f2:2f:02:17:19:c4:24:51:
         76:78:36:28:a9:15:ab:5c:f8:fa:d5:c1:61:de:a6:ce:ca:0b:
         fb:0f:ae:a3:6c:e8:59:b1:03:19:6c:94:2a:11:88:12:55:94:
         9c:24:cc:2c:16:36:34:7b:ac:64:bf:19:dd:e2:1b:8f:78:08:
         42:8c:4a:43:ab:d5:74:a4:5f:71:5a:d1:1b:c8:69:0a:74:c6:
         3d:97:1a:fe:dc:12:27:18:55:91:bc:3c:99:07:78:d7:ab:6a:
         e8:b5:d0:fa:e7:e2:cd:26:c3:49:49:84:bb:2c:8b:e7:67:39:
         92:cd:98:1e:be:b4:8a:22:10:ef:67:20:86:5f:6d:5f:f1:b2:
         fd:05:c4:b6:19:7b:8e:b5:80:79:63:4f:63:a4:09:2e:91:d1:
         cf:6c:11:33:00:29:c0:7b:e7:2e:d1:a1:07:8f:41:9b:43:e8:
         91:c4:4f:07:bd:62:1c:b0:89:d0:b2:ea:c9:f3:42:c5:28:8b:
         f8:e8:e8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 06:25:27 2025 by rpki-client