Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130626/310572EAAF0911E9AF7C4444C4F9AE02/u-ULDcHkp69YCVjW19dBR67ZDG4.mft
File:                     u-ULDcHkp69YCVjW19dBR67ZDG4.mft (raw, json)
Hash identifier:          CPwjJFMHfecQRZSeOAn36XGGRt2eA+BjS7N3vzrTGRk=
Subject key identifier:   8A:08:7A:75:44:E7:A2:FE:F4:59:F4:CD:4E:EF:CB:40:8F:B2:DF:E7
Authority key identifier: BB:E5:0B:0D:C1:E4:A7:AF:58:09:58:D6:D7:D7:41:47:AE:D9:0C:6E
Certificate issuer:       /CN=A9130626/serialNumber=BBE50B0DC1E4A7AF580958D6D7D74147AED90C6E
Certificate serial:       0E1D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-ULDcHkp69YCVjW19dBR67ZDG4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130626/310572EAAF0911E9AF7C4444C4F9AE02/u-ULDcHkp69YCVjW19dBR67ZDG4.mft
Manifest number:          1796
Signing time:             Fri 08 Aug 2025 18:02:16 +0000
Manifest this update:     Fri 08 Aug 2025 18:02:15 +0000
Manifest next update:     Fri 15 Aug 2025 18:02:15 +0000
Files and hashes:         1: u-ULDcHkp69YCVjW19dBR67ZDG4.crl (hash: 0zmiCzPEYTkyxpSSpcZ9gj+3rppv726gtaPlPi5nuG0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130626/310572EAAF0911E9AF7C4444C4F9AE02/u-ULDcHkp69YCVjW19dBR67ZDG4.crl
                          rsync://rpki.apnic.net/member_repository/A9130626/310572EAAF0911E9AF7C4444C4F9AE02/u-ULDcHkp69YCVjW19dBR67ZDG4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-ULDcHkp69YCVjW19dBR67ZDG4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3613 (0xe1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130626, serialNumber=BBE50B0DC1E4A7AF580958D6D7D74147AED90C6E
        Validity
            Not Before: Aug  8 18:02:15 2025 GMT
            Not After : Aug 15 18:02:15 2025 GMT
        Subject: CN=68963ba8-ee3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ca:99:22:46:51:36:32:d7:13:75:73:13:d3:
                    85:8f:97:4a:68:50:f1:20:a2:4c:2b:5d:83:5d:c2:
                    4b:9b:60:a5:ac:82:18:6d:12:0f:ea:37:56:eb:6c:
                    d1:5d:9a:60:b5:90:e0:d1:5d:e6:0b:7a:cc:40:75:
                    24:e2:93:29:22:24:32:a3:77:c9:7a:ca:9a:b8:16:
                    5b:78:7d:23:9f:85:c3:22:22:b6:95:d7:34:42:d3:
                    9f:00:35:73:fc:ab:6c:c6:a9:ff:34:7b:18:5f:56:
                    53:0d:6f:aa:c3:a4:40:39:ef:c6:04:f5:40:da:22:
                    47:78:19:7e:75:81:47:0d:a2:03:a6:4e:60:10:1f:
                    18:f1:6e:77:75:0b:62:6d:92:9f:df:25:c3:59:3b:
                    86:5b:a6:a3:12:df:00:74:61:f6:1c:79:2a:78:09:
                    c2:21:78:ef:ba:f8:12:30:a6:1d:fb:e8:e4:66:9f:
                    0c:65:34:6e:d9:44:96:15:14:b7:ac:0e:33:fd:25:
                    84:47:73:5d:93:07:f8:2b:af:5e:ad:47:47:56:5e:
                    2a:9c:6e:17:60:a3:dc:22:ff:7c:35:78:67:00:57:
                    d7:40:30:b3:e2:5f:b3:02:16:74:97:48:6c:d5:25:
                    3f:ea:33:ae:85:c1:b4:ce:0f:a4:a4:34:47:ca:d4:
                    67:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:08:7A:75:44:E7:A2:FE:F4:59:F4:CD:4E:EF:CB:40:8F:B2:DF:E7
            X509v3 Authority Key Identifier:
                keyid:BB:E5:0B:0D:C1:E4:A7:AF:58:09:58:D6:D7:D7:41:47:AE:D9:0C:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130626/310572EAAF0911E9AF7C4444C4F9AE02/u-ULDcHkp69YCVjW19dBR67ZDG4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-ULDcHkp69YCVjW19dBR67ZDG4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130626/310572EAAF0911E9AF7C4444C4F9AE02/u-ULDcHkp69YCVjW19dBR67ZDG4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:44:d5:9c:47:75:e6:35:6d:13:2b:d7:0a:b8:53:83:b7:76:
         70:26:c6:0a:57:1d:a9:94:9e:c0:e8:f7:83:34:69:a8:be:8c:
         27:fd:05:63:f6:38:6c:3a:c9:f8:57:b9:73:02:4d:c0:00:03:
         17:e1:cc:2f:e9:36:30:7f:52:c4:79:d6:ff:35:49:25:30:d2:
         dc:69:51:3a:c6:a7:ff:a6:c4:b2:d3:59:8c:2c:e1:71:4d:cf:
         a0:85:b7:7d:b7:65:31:f9:5f:5f:52:17:9c:75:1d:a0:99:e3:
         d2:8b:01:d9:a8:31:ca:87:f1:5f:b8:3c:d7:17:32:57:7a:08:
         e6:27:39:c0:35:fc:8a:ca:0e:93:e7:71:9d:b9:99:f9:d7:bd:
         93:38:26:7d:9e:5c:d3:c3:a8:8b:80:c1:07:44:63:50:48:36:
         91:f3:6c:60:9f:c8:7f:ce:c9:0f:50:28:92:1b:b8:ef:68:e3:
         d2:86:d7:94:ad:07:af:4d:b5:01:77:f8:bf:f7:0a:12:0b:08:
         ed:7f:d3:28:bd:27:f1:b5:47:f7:e1:fe:86:10:5c:0d:f3:22:
         69:d3:06:b1:ce:b3:f4:84:e5:ad:81:eb:3e:2c:26:7c:f6:d7:
         9b:13:8e:9e:b9:c8:9d:55:79:30:34:07:4a:13:bf:68:a4:2a:
         64:d5:8c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 21:02:40 2025 by rpki-client