Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.mft
File:                     UZQtJe28pR36Vs4J7TYet6JtvSU.mft (raw, json)
Hash identifier:          4C8Hok2/7EeMx6O+6UeJI8+Xgod9zVrcetaHJeLCkBc=
Subject key identifier:   70:3C:6E:DE:E5:D1:12:42:3C:2C:CE:33:D7:F4:C9:79:10:29:AA:52
Authority key identifier: 51:94:2D:25:ED:BC:A5:1D:FA:56:CE:09:ED:36:1E:B7:A2:6D:BD:25
Certificate issuer:       /CN=A912AFA4/serialNumber=51942D25EDBCA51DFA56CE09ED361EB7A26DBD25
Certificate serial:       0968
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.mft
Manifest number:          094B
Signing time:             Fri 08 Aug 2025 20:39:14 +0000
Manifest this update:     Fri 08 Aug 2025 20:39:14 +0000
Manifest next update:     Fri 15 Aug 2025 20:39:14 +0000
Files and hashes:         1: UZQtJe28pR36Vs4J7TYet6JtvSU.crl (hash: vcgOYp2ElPQ846Sb0vh0hYzUSMLdtGl0nxX3gOJmewQ=)
                          2: 11DBC0ACEB3211EFBDFC3E0FC4F9AE02.roa (hash: zYdZV0PmY995jxBgObVxrNeEKm4srCzVt7whFrsxdT8=)
                          3: 6602AEE2CD7411EFB3DC8110C4F9AE02.roa (hash: nXVtsybD/p0SClRwWP9c2+ZIMGXniljjDK2EFaKpa7A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.crl
                          rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2408 (0x968)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912AFA4, serialNumber=51942D25EDBCA51DFA56CE09ED361EB7A26DBD25
        Validity
            Not Before: Aug  8 20:39:14 2025 GMT
            Not After : Aug 15 20:39:14 2025 GMT
        Subject: CN=68966072-c92d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d8:0e:4e:fc:59:99:3c:49:a7:07:5b:13:8a:
                    3b:24:69:37:cb:45:26:8c:4f:23:a7:cf:bd:a8:e7:
                    71:bc:3d:48:42:1f:5d:8e:e8:9f:ac:e3:c3:51:c4:
                    a0:e4:6d:13:c9:fc:9d:d9:69:15:36:80:d2:ab:1d:
                    3d:8d:f3:dd:cb:d7:0c:09:18:d0:72:8a:40:cd:88:
                    86:3e:62:49:22:20:d8:3d:13:65:93:ee:2d:6e:90:
                    41:cb:e8:21:23:c3:e4:ef:57:08:80:05:cd:f1:24:
                    6f:ca:5d:63:32:a7:90:1f:50:6e:46:d1:39:71:f3:
                    69:de:21:3c:71:a8:8d:5a:14:89:a8:ae:94:17:a4:
                    8f:84:bc:cd:0d:0d:b0:f8:ea:53:6f:79:e6:85:49:
                    6f:f5:bf:8f:52:88:f0:bf:b0:bf:43:ab:dd:5f:8c:
                    73:8c:6a:57:7e:d6:2b:04:66:28:52:ae:d9:a9:21:
                    21:af:3b:9e:0e:c1:eb:15:b3:67:b8:98:11:c5:d7:
                    51:29:f1:62:1b:bc:c7:75:19:15:d5:98:ac:4b:32:
                    25:72:18:78:58:f2:9a:ef:22:fe:9e:a0:f9:fb:8e:
                    ec:45:51:82:df:ae:5b:55:80:f4:e2:aa:bc:72:90:
                    45:71:fb:f9:e5:3f:d9:98:e3:00:38:e8:6b:6f:13:
                    a5:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:3C:6E:DE:E5:D1:12:42:3C:2C:CE:33:D7:F4:C9:79:10:29:AA:52
            X509v3 Authority Key Identifier:
                keyid:51:94:2D:25:ED:BC:A5:1D:FA:56:CE:09:ED:36:1E:B7:A2:6D:BD:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:8d:cf:e8:f7:36:fd:22:f1:cb:43:d7:4e:2f:ef:a4:87:cc:
         bb:23:1b:c0:6b:d1:08:c2:aa:3d:58:08:fb:f4:95:b1:cf:1b:
         ea:4a:34:1c:2c:e7:af:59:1c:04:4d:d0:d3:59:29:82:ff:23:
         9e:c4:83:e5:e3:b1:2d:4f:86:7e:5e:e1:50:f1:a9:f5:71:6f:
         43:80:c5:6a:59:0d:7c:b6:04:09:ea:c4:17:0c:26:85:01:ea:
         9e:38:39:29:91:d3:4e:ee:61:1c:8e:9f:02:07:2d:4e:db:26:
         4a:eb:50:90:f4:ed:5a:1e:be:ad:33:62:00:c9:1d:4d:aa:31:
         63:cb:40:b1:d4:2a:26:cf:82:c8:d7:a1:2b:05:31:15:0c:ac:
         ca:72:06:8d:6c:f5:51:b6:c6:eb:cd:e0:d7:3a:dd:db:4a:70:
         78:fa:a9:ba:1e:99:f7:f8:08:fc:dc:a5:26:c5:3f:e6:aa:54:
         df:5e:6d:b7:42:1d:87:b4:1a:6b:14:3b:53:f7:11:ab:05:65:
         2e:a0:55:18:0d:a0:35:24:38:5c:93:66:4f:f1:8b:88:cf:c6:
         9b:5a:85:a0:8b:6f:52:e3:98:e0:31:5f:88:83:cd:0a:ca:e9:
         a1:66:c9:bb:6e:34:a8:b6:b3:93:95:04:0c:8a:bd:38:a8:87:
         4b:22:d9:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:13:45 2025 by rpki-client