Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.mft
File:                     umDC9ghXfO5rvRSTcht6rsoodis.mft (raw, json)
Hash identifier:          LwY7u4i+IF2F4PuOB5b/P6hUIXM6BwGyRObFdQMN6zc=
Subject key identifier:   85:14:1A:7E:1A:CE:13:21:72:1E:D0:5A:DA:19:7C:68:05:D0:29:AF
Authority key identifier: BA:60:C2:F6:08:57:7C:EE:6B:BD:14:93:72:1B:7A:AE:CA:28:76:2B
Certificate issuer:       /CN=A91326FF/serialNumber=BA60C2F608577CEE6BBD1493721B7AAECA28762B
Certificate serial:       B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umDC9ghXfO5rvRSTcht6rsoodis.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.mft
Manifest number:          B5
Signing time:             Sat 09 Aug 2025 06:25:12 +0000
Manifest this update:     Sat 09 Aug 2025 06:25:12 +0000
Manifest next update:     Sat 16 Aug 2025 06:25:12 +0000
Files and hashes:         1: umDC9ghXfO5rvRSTcht6rsoodis.crl (hash: kyEioin3Zp8b4C2llKgWN9YtX7camb5yfOlFYGZkf3s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.crl
                          rsync://rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umDC9ghXfO5rvRSTcht6rsoodis.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 181 (0xb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91326FF, serialNumber=BA60C2F608577CEE6BBD1493721B7AAECA28762B
        Validity
            Not Before: Aug  9 06:25:12 2025 GMT
            Not After : Aug 16 06:25:12 2025 GMT
        Subject: CN=6896e9c8-c190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f4:e6:4a:7a:8d:d0:19:7f:e7:df:39:2a:6b:
                    68:11:39:8a:62:5f:c5:48:44:5b:1d:68:3c:9b:5b:
                    c3:32:1e:82:51:a6:54:1a:d0:ab:b2:97:69:07:b8:
                    ba:1b:90:84:bd:0b:de:ca:36:af:48:b2:5b:95:96:
                    31:51:ef:7d:35:99:3a:e2:ab:af:ab:53:c7:ae:68:
                    a8:4b:d2:11:3e:d8:68:ec:b3:66:a9:4a:4a:4e:27:
                    51:e8:e3:e4:d1:a3:16:a9:8b:31:3a:fc:62:ef:4e:
                    cf:ed:87:44:85:17:54:c3:2d:1c:17:0a:bc:fa:bc:
                    01:55:81:8c:4d:19:43:47:08:5b:c1:5e:e1:a5:a0:
                    cb:54:50:6b:b7:5c:12:0d:5e:12:da:f5:61:c0:d4:
                    a6:67:9c:ae:46:dd:d8:8a:56:62:1b:c6:c0:bc:47:
                    14:2f:00:1d:c1:24:9c:e7:95:37:86:b6:0d:8c:8a:
                    a3:17:32:7f:79:6b:13:dd:1e:36:6c:95:aa:19:44:
                    41:36:f0:c9:9c:c4:33:c2:fe:2a:2f:82:d0:fa:72:
                    5e:ec:9f:a5:62:eb:c4:e8:f0:9e:4d:99:26:ee:0a:
                    43:52:9f:aa:a1:0e:81:6f:15:29:28:49:fe:4b:c6:
                    8b:ea:6c:45:ba:8b:18:4f:6f:36:03:03:80:7d:db:
                    42:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:14:1A:7E:1A:CE:13:21:72:1E:D0:5A:DA:19:7C:68:05:D0:29:AF
            X509v3 Authority Key Identifier:
                keyid:BA:60:C2:F6:08:57:7C:EE:6B:BD:14:93:72:1B:7A:AE:CA:28:76:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umDC9ghXfO5rvRSTcht6rsoodis.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:82:6c:c8:f5:55:70:76:55:65:aa:60:32:5d:38:5f:38:6b:
         5c:cc:e0:5b:2b:45:38:b8:31:12:f1:c4:d2:e0:89:7a:ab:2e:
         a8:58:fe:d7:a1:95:dc:23:f8:41:9f:1e:f4:df:e3:4f:8a:da:
         f9:32:02:2c:69:f2:20:02:90:e0:60:c5:82:49:93:bf:eb:f8:
         aa:7c:f7:f3:1f:94:59:93:bd:82:77:c4:c4:87:cc:04:eb:ff:
         92:a0:31:22:a5:7a:2d:28:39:83:29:2f:dd:e0:e2:b3:00:80:
         ff:45:92:cf:5e:05:1e:87:ef:de:58:17:9f:b7:af:2c:c7:e8:
         ec:60:1b:ff:c7:0f:cb:de:c6:3e:7d:82:3c:24:8f:47:3a:1c:
         19:8a:ce:b0:80:c3:6d:4c:1f:68:9f:14:1d:76:2c:55:7e:04:
         fc:81:a2:9c:4d:2b:9e:cf:69:c9:9b:42:31:43:fa:05:d6:93:
         be:c9:6c:12:4e:5f:22:a0:05:a8:8b:f4:93:4b:3a:b2:e8:a3:
         42:30:17:71:f4:41:71:00:fe:c4:16:b7:a8:b8:70:19:a1:fc:
         a1:41:cd:0f:8d:07:50:f3:4f:ee:27:6b:f1:be:cb:36:8d:8b:
         f5:43:49:c5:fa:07:50:8c:4e:20:50:81:31:c0:c5:70:c8:86:
         84:41:e3:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:26:18 2025 by rpki-client