Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.mft
File:                     uhYFabkV4kxq5sJIlNBPnUo5FpI.mft (raw, json)
Hash identifier:          wBAGXlXYdhol1ROkbQ7KZ30X3gTfNvDDg34vP4SakU8=
Subject key identifier:   DF:3C:B7:80:7D:BF:AB:BF:44:9B:98:9F:55:B9:0C:45:7D:72:3A:C8
Authority key identifier: BA:16:05:69:B9:15:E2:4C:6A:E6:C2:48:94:D0:4F:9D:4A:39:16:92
Certificate issuer:       /CN=A912CDCB/serialNumber=BA160569B915E24C6AE6C24894D04F9D4A391692
Certificate serial:       04FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uhYFabkV4kxq5sJIlNBPnUo5FpI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.mft
Manifest number:          04F5
Signing time:             Sun 10 Aug 2025 23:48:40 +0000
Manifest this update:     Sun 10 Aug 2025 23:48:39 +0000
Manifest next update:     Sun 17 Aug 2025 23:48:39 +0000
Files and hashes:         1: uhYFabkV4kxq5sJIlNBPnUo5FpI.crl (hash: RM3px8D77MI4jHg50E0MOx2tlttLBRD0mr9+YCjwyqY=)
                          2: DAF98AAA20F111EC89E7D668C4F9AE02.roa (hash: RIj5d7qyUoWph1Jio4J8GkYeyIP1U8prnBb8m/i4EDY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.crl
                          rsync://rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uhYFabkV4kxq5sJIlNBPnUo5FpI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1274 (0x4fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912CDCB, serialNumber=BA160569B915E24C6AE6C24894D04F9D4A391692
        Validity
            Not Before: Aug 10 23:48:39 2025 GMT
            Not After : Aug 17 23:48:39 2025 GMT
        Subject: CN=68992fd8-d564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:75:66:47:ab:96:a3:36:b7:f6:1b:34:cc:c9:
                    02:60:48:02:f9:68:49:9d:1c:05:32:78:30:36:3d:
                    1d:47:c5:0f:74:14:16:92:05:a6:08:56:5e:f5:f6:
                    94:50:ab:e4:81:5f:ee:c4:7c:f9:40:62:ff:68:59:
                    6c:5e:d5:c6:f0:24:ed:f5:1a:d1:f2:d5:52:d7:06:
                    ab:6d:f8:4b:20:80:a9:85:87:13:1c:47:19:09:48:
                    6c:42:f9:16:8d:37:f7:ed:ba:cd:44:c1:cf:e5:38:
                    cc:45:cb:a0:15:56:16:2f:fe:e6:fa:21:ef:ef:3d:
                    fa:f2:25:45:76:2e:21:c9:84:9d:e7:f3:9f:f9:57:
                    c4:c3:af:92:fa:a8:2a:f5:ed:20:7f:76:23:cc:5f:
                    a2:36:d6:82:06:03:a7:5a:b3:ac:ce:1d:7e:2a:b0:
                    0b:25:a2:2a:3a:a7:77:00:33:d9:22:ae:b0:4f:59:
                    0d:85:d3:16:1e:47:50:b4:7a:d2:c7:52:f2:e4:46:
                    88:80:e8:95:8d:7b:7c:ba:46:6b:6b:cb:87:af:7c:
                    b7:b0:77:d7:67:3a:de:14:ac:6f:e0:04:eb:7c:95:
                    65:4e:48:49:1f:e1:bc:44:70:72:27:22:c8:84:ff:
                    9d:23:eb:0c:fa:04:2d:81:51:4a:35:e0:74:9e:9d:
                    44:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:3C:B7:80:7D:BF:AB:BF:44:9B:98:9F:55:B9:0C:45:7D:72:3A:C8
            X509v3 Authority Key Identifier:
                keyid:BA:16:05:69:B9:15:E2:4C:6A:E6:C2:48:94:D0:4F:9D:4A:39:16:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uhYFabkV4kxq5sJIlNBPnUo5FpI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:e8:b2:9f:c7:4f:c3:54:81:54:7c:41:9d:00:b6:d0:f5:a3:
         65:70:82:25:eb:fe:0e:2e:9a:7c:fe:e4:48:78:9a:4b:7f:bd:
         8c:4d:fd:81:ad:2b:89:da:bb:1c:9a:c1:f6:94:79:7c:88:03:
         c4:b2:ff:ab:55:0b:3b:c0:b7:f3:c2:84:e9:dd:f6:62:f2:99:
         c1:88:b4:4d:93:18:00:da:5d:e6:52:e7:73:ca:41:89:95:82:
         74:d7:4a:38:35:83:57:b3:b7:f5:e5:fd:b9:b5:1e:e7:e4:d8:
         b0:c0:b2:be:c4:e8:ed:0d:01:d3:2e:01:4f:af:ab:aa:ba:ed:
         04:7a:87:22:48:42:7d:ee:59:92:67:58:3f:e3:e6:99:56:c7:
         69:dd:ae:ef:4d:5c:f4:35:4e:df:09:14:00:78:59:43:ec:63:
         c9:bb:e1:e4:0d:c0:30:3a:5e:6a:5a:48:7d:c3:f5:4b:44:76:
         e8:ab:50:61:18:3c:27:18:e0:c0:39:26:04:14:31:6c:23:48:
         67:df:00:63:dc:6a:10:11:2a:0c:99:a5:21:ce:c6:40:53:16:
         00:65:4e:e0:1d:dc:a3:10:3c:a5:35:5a:60:40:b2:04:4c:37:
         02:99:74:f8:b5:46:0d:fb:1d:f2:87:27:ba:65:a3:b9:33:46:
         e3:10:9f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:27:08 2025 by rpki-client