Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.mft
File:                     ukny4CpjXdB19WQWbxEfX63lp8s.mft (raw, json)
Hash identifier:          AlQcQfqMxX4RciY7sxbdKeGKUst5EF88jJmqcZWKBAE=
Subject key identifier:   AA:8E:74:1E:02:E0:0C:71:D3:7F:F3:54:2D:C5:58:62:B7:C4:54:DE
Authority key identifier: BA:49:F2:E0:2A:63:5D:D0:75:F5:64:16:6F:11:1F:5F:AD:E5:A7:CB
Certificate issuer:       /CN=A916988B/serialNumber=BA49F2E02A635DD075F564166F111F5FADE5A7CB
Certificate serial:       06AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukny4CpjXdB19WQWbxEfX63lp8s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.mft
Manifest number:          0695
Signing time:             Sun 10 Aug 2025 22:22:49 +0000
Manifest this update:     Sun 10 Aug 2025 22:22:49 +0000
Manifest next update:     Sun 17 Aug 2025 22:22:49 +0000
Files and hashes:         1: ukny4CpjXdB19WQWbxEfX63lp8s.crl (hash: CxmmlPKt7R8geb6ljkAiq4GpQBkJnkzIyiv863ezanM=)
                          2: 74C0B54E62BD11F0ACD7497FC4F9AE02.roa (hash: YrkXkz/yu0G19ivHemFgEHMeNLmhc/fcMSP5ZLKhRqw=)
                          3: D1B6FD008D6D11EB9DB49A32C4F9AE02.roa (hash: B5LAg04dviX2z0y/fP3YPZo7B9FlYxyAimnZWCXnG6o=)
                          4: D24316B48D6D11EB9DB49A32C4F9AE02.roa (hash: bQSq5ulDmleOdsxLvtgc5ASW2V63/ouOWZ5o5ZVuoR4=)
                          5: D2CFD4468D6D11EB9DB49A32C4F9AE02.roa (hash: +78td8DudFE3NBUUSYhesW8UdPg8DBg2PU3GJp9moVc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.crl
                          rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukny4CpjXdB19WQWbxEfX63lp8s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1708 (0x6ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916988B, serialNumber=BA49F2E02A635DD075F564166F111F5FADE5A7CB
        Validity
            Not Before: Aug 10 22:22:49 2025 GMT
            Not After : Aug 17 22:22:49 2025 GMT
        Subject: CN=68991bb9-463d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a6:c4:16:7c:37:03:62:f5:45:15:72:34:ca:
                    a9:33:1d:46:5d:53:8e:55:e5:0e:3d:cd:44:ff:b4:
                    8f:66:da:2f:6e:01:cb:7d:2d:67:e4:74:8a:89:74:
                    11:95:7a:2d:d7:18:21:6e:f5:43:49:7d:6a:92:32:
                    fd:5d:26:1c:ee:8d:47:b2:23:ea:bb:20:a2:a1:c9:
                    59:de:7c:ac:35:e5:8a:8a:32:6b:2d:54:06:c1:7e:
                    e5:91:5a:04:52:4c:f3:34:d7:85:a3:12:5c:6b:a8:
                    19:a3:63:e6:5c:1e:fd:24:1b:3b:08:73:e0:b4:2b:
                    0f:5e:b3:25:2b:4c:02:12:b7:d2:e6:53:81:f6:99:
                    91:6b:91:eb:d1:6f:46:bc:f9:89:b9:23:16:cc:4e:
                    d5:d9:24:86:87:a4:94:15:db:05:43:64:3e:c8:01:
                    c1:19:23:21:7f:f6:0c:bd:1d:38:a2:f5:65:2a:e6:
                    7c:64:64:21:87:30:10:7a:5d:c9:c3:f5:47:b3:07:
                    7a:50:78:02:e0:3e:71:1c:b4:9f:f8:9a:ed:e6:f8:
                    a4:48:d9:e0:4c:e7:4a:6e:7a:af:14:97:a1:98:0a:
                    77:58:db:8c:65:6f:c3:f2:bc:ac:5b:a7:0a:40:cf:
                    fc:23:71:fa:05:7f:4c:18:21:71:ec:ff:78:9b:e6:
                    07:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:8E:74:1E:02:E0:0C:71:D3:7F:F3:54:2D:C5:58:62:B7:C4:54:DE
            X509v3 Authority Key Identifier:
                keyid:BA:49:F2:E0:2A:63:5D:D0:75:F5:64:16:6F:11:1F:5F:AD:E5:A7:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukny4CpjXdB19WQWbxEfX63lp8s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:50:51:b1:be:ef:77:84:4d:a4:b2:e3:e4:17:d3:7e:65:18:
         d3:53:19:bd:34:68:35:c5:96:36:e9:28:61:84:b4:98:77:7c:
         51:60:a5:91:8c:9a:0c:20:01:cb:7c:3a:7c:6b:fb:d2:f2:f1:
         7d:22:3b:b0:ec:bd:8f:55:dd:b7:71:f4:b4:f5:8d:9c:03:f4:
         0c:58:d5:15:95:3d:94:94:3c:2f:5f:9b:1c:4a:88:d6:05:ed:
         31:ac:b3:12:a4:79:9d:4f:8d:f3:67:03:8f:de:c3:92:a0:b4:
         05:dd:f1:c8:72:74:ce:e2:72:c0:2b:6e:75:da:5b:59:65:84:
         27:93:dd:13:05:33:c9:19:49:e0:a7:12:3e:50:d8:22:87:95:
         05:3b:ed:e5:20:e2:79:8c:d2:b8:5a:62:71:bf:58:2e:0c:b9:
         ab:a5:89:51:7d:e6:cc:59:44:96:ad:e4:10:31:71:6f:95:fe:
         52:e8:53:f1:ec:2c:62:79:4f:3f:06:33:5c:43:c3:44:a1:4b:
         13:2f:32:5a:b2:e5:89:fa:ab:e6:0e:43:5c:30:70:a6:02:6e:
         c9:1c:d3:3b:3f:0c:53:57:60:d0:5d:1a:8a:50:79:a8:d2:4e:
         87:f2:6e:b4:c6:9e:15:04:83:61:20:c7:73:1f:d0:98:7f:38:
         69:cc:47:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:52:21 2025 by rpki-client