Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140467/9AA980D6F1E011EA8D4A9E32C4F9AE02/uMMvxNeTGtQkFAcwaguZasjJn-s.mft
File:                     uMMvxNeTGtQkFAcwaguZasjJn-s.mft (raw, json)
Hash identifier:          c6G/aD7TkFjANTVIt2txxi4i2Ur2xV9cZzFhkWOPOBo=
Subject key identifier:   D5:FD:04:7C:4B:B7:BF:15:0A:75:BC:17:F0:85:89:88:FD:EA:E5:2C
Authority key identifier: B8:C3:2F:C4:D7:93:1A:D4:24:14:07:30:6A:0B:99:6A:C8:C9:9F:EB
Certificate issuer:       /CN=A9140467/serialNumber=B8C32FC4D7931AD4241407306A0B996AC8C99FEB
Certificate serial:       080E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uMMvxNeTGtQkFAcwaguZasjJn-s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140467/9AA980D6F1E011EA8D4A9E32C4F9AE02/uMMvxNeTGtQkFAcwaguZasjJn-s.mft
Manifest number:          0801
Signing time:             Sun 10 Aug 2025 20:59:13 +0000
Manifest this update:     Sun 10 Aug 2025 20:59:13 +0000
Manifest next update:     Sun 17 Aug 2025 20:59:13 +0000
Files and hashes:         1: uMMvxNeTGtQkFAcwaguZasjJn-s.crl (hash: PwJ+JhIedEWpRFqlYxJtf15O10XRZLknD1zRTdwAY88=)
                          2: 02E60C72F1E211EAA2361B34C4F9AE02.roa (hash: af5uMeHzt9MTz6ZREM+PIjD4gLSqGSG2u3tqcHLex6c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140467/9AA980D6F1E011EA8D4A9E32C4F9AE02/uMMvxNeTGtQkFAcwaguZasjJn-s.crl
                          rsync://rpki.apnic.net/member_repository/A9140467/9AA980D6F1E011EA8D4A9E32C4F9AE02/uMMvxNeTGtQkFAcwaguZasjJn-s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uMMvxNeTGtQkFAcwaguZasjJn-s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2062 (0x80e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140467, serialNumber=B8C32FC4D7931AD4241407306A0B996AC8C99FEB
        Validity
            Not Before: Aug 10 20:59:13 2025 GMT
            Not After : Aug 17 20:59:13 2025 GMT
        Subject: CN=68990821-75f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:49:df:8c:8e:2e:0e:64:2d:b1:14:52:e2:26:
                    51:43:e3:8e:45:3e:72:f8:d5:94:1e:7f:b7:9f:30:
                    72:95:32:1d:21:49:4b:fe:e2:fc:15:29:a8:8c:ce:
                    5b:18:bb:6c:4a:41:e8:93:18:c4:32:a9:89:1e:ea:
                    e1:27:8c:d3:8d:2d:35:40:62:01:29:26:c8:90:29:
                    49:cf:05:c6:5d:5f:9b:67:35:93:55:99:1f:af:f7:
                    f9:5f:12:f1:39:65:7b:74:bc:f8:05:2e:42:5f:a7:
                    bc:0d:61:da:ba:4d:a5:bb:e9:01:41:0b:cd:83:91:
                    86:3e:9e:b7:39:e9:2a:41:ed:2e:e8:42:8f:9d:1a:
                    02:10:5d:c9:1d:85:1d:17:ea:06:69:98:61:7d:a9:
                    d0:b8:c2:c3:db:41:bd:79:24:f5:86:1f:21:f6:e5:
                    91:c4:1b:3e:0a:af:84:34:18:e0:ee:f3:d8:d3:e1:
                    f9:ee:4f:d2:b6:57:43:0d:7a:2f:cc:8b:d0:bb:ae:
                    5c:af:59:5e:5e:3d:15:94:98:5e:e5:02:98:63:22:
                    e7:b5:74:75:b3:ea:c9:7e:8f:e9:f1:96:4b:f5:03:
                    5f:f9:48:04:8e:88:53:21:46:4c:f0:a0:57:17:a1:
                    04:51:a9:06:13:48:d6:19:8b:bf:c2:dc:20:47:e2:
                    55:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:FD:04:7C:4B:B7:BF:15:0A:75:BC:17:F0:85:89:88:FD:EA:E5:2C
            X509v3 Authority Key Identifier:
                keyid:B8:C3:2F:C4:D7:93:1A:D4:24:14:07:30:6A:0B:99:6A:C8:C9:9F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140467/9AA980D6F1E011EA8D4A9E32C4F9AE02/uMMvxNeTGtQkFAcwaguZasjJn-s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uMMvxNeTGtQkFAcwaguZasjJn-s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140467/9AA980D6F1E011EA8D4A9E32C4F9AE02/uMMvxNeTGtQkFAcwaguZasjJn-s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:5f:98:43:3a:fa:13:f9:ff:da:34:3f:10:f3:48:13:fc:8f:
         ee:be:d2:d9:7e:de:d8:78:5a:5b:41:fa:b7:6b:3b:bf:5f:1d:
         90:64:c6:b5:95:22:2a:8b:c9:12:01:3b:6a:28:93:ce:bc:98:
         b8:79:3e:aa:48:29:ee:95:49:1e:4f:ab:fb:fd:f0:06:a1:35:
         3a:0c:9e:5c:ba:d9:1c:87:e9:51:3e:47:a2:b8:98:15:ee:a4:
         15:22:55:9a:1f:5e:e0:a4:a2:81:a1:cb:2f:62:19:b3:f0:3d:
         de:51:d0:c8:39:6d:1b:c5:a4:df:2c:15:c9:68:43:a4:45:88:
         2e:11:83:03:cf:c3:b6:9f:ce:48:38:b8:1a:b0:f6:57:23:46:
         df:59:ff:8e:e1:08:d5:01:66:97:e7:8c:e6:a3:57:65:41:89:
         94:60:52:43:ca:d3:08:d3:8f:6f:55:fb:87:28:89:61:a3:86:
         e8:66:b4:44:f2:4c:e8:1b:13:e6:49:1d:70:c2:47:4c:e8:de:
         80:11:f3:0f:52:c6:bc:de:e8:f2:28:a2:74:ee:e2:22:4b:74:
         26:3d:d4:57:d2:6a:8c:7a:e2:07:9b:c5:45:13:81:e8:e6:42:
         53:f3:ff:20:7f:fe:ba:ef:73:cc:45:4a:9c:8a:70:e7:6b:22:
         e1:71:bf:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:35:45 2025 by rpki-client