Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916BCDF/F858344EE36D11E8956F3516C4F9AE02/Uaqsf29Y90cHLIfsL0h47xy49M4.mft
File:                     Uaqsf29Y90cHLIfsL0h47xy49M4.mft (raw, json)
Hash identifier:          10DyT4k5Kqv1ujWoyhy8q2Qz9/nPluyanDPT3HJ6ydQ=
Subject key identifier:   EF:57:2F:49:1D:3F:14:2F:0E:67:A7:C7:7D:F0:95:1D:45:FD:8A:63
Authority key identifier: 51:AA:AC:7F:6F:58:F7:47:07:2C:87:EC:2F:48:78:EF:1C:B8:F4:CE
Certificate issuer:       /CN=A916BCDF/serialNumber=51AAAC7F6F58F747072C87EC2F4878EF1CB8F4CE
Certificate serial:       124C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uaqsf29Y90cHLIfsL0h47xy49M4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916BCDF/F858344EE36D11E8956F3516C4F9AE02/Uaqsf29Y90cHLIfsL0h47xy49M4.mft
Manifest number:          1238
Signing time:             Sun 10 Aug 2025 17:08:26 +0000
Manifest this update:     Sun 10 Aug 2025 17:08:26 +0000
Manifest next update:     Sun 17 Aug 2025 17:08:26 +0000
Files and hashes:         1: Uaqsf29Y90cHLIfsL0h47xy49M4.crl (hash: xyDKjfH8DX8QqS+zRwc4HMNYg49zLbWZ0bTK1XRRTMM=)
                          2: AA47599A985F11EEBA5D186DC4F9AE02.roa (hash: abD2sJSusd+EergprKNOfnX9AY5e5SRUlXGm1ps4L/Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916BCDF/F858344EE36D11E8956F3516C4F9AE02/Uaqsf29Y90cHLIfsL0h47xy49M4.crl
                          rsync://rpki.apnic.net/member_repository/A916BCDF/F858344EE36D11E8956F3516C4F9AE02/Uaqsf29Y90cHLIfsL0h47xy49M4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uaqsf29Y90cHLIfsL0h47xy49M4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4684 (0x124c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916BCDF, serialNumber=51AAAC7F6F58F747072C87EC2F4878EF1CB8F4CE
        Validity
            Not Before: Aug 10 17:08:26 2025 GMT
            Not After : Aug 17 17:08:26 2025 GMT
        Subject: CN=6898d20a-1f6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:3f:74:41:ab:fa:d7:b6:55:9d:2d:57:dc:ba:
                    59:81:6c:8a:e3:3d:c5:28:57:fd:cb:b7:99:0e:bd:
                    c7:37:a8:0c:4e:b7:11:3a:60:40:a1:61:4a:e9:1c:
                    68:d3:d4:76:2e:6c:00:f3:26:9d:93:8d:05:16:dd:
                    85:a8:5d:9f:93:a9:6b:75:87:d7:2e:b6:6d:da:0f:
                    5e:9d:9e:f0:0d:da:57:d8:04:00:18:72:59:03:35:
                    45:3c:8d:a6:23:d2:66:cb:23:a9:fe:b3:4c:84:38:
                    77:a7:da:1f:c6:a5:f9:e3:e9:45:02:fc:af:bc:02:
                    93:3f:05:47:cf:17:78:8a:ef:1d:fd:b6:e7:f0:85:
                    a0:8c:95:be:8c:6a:db:d3:ec:c6:d8:ed:c6:be:bf:
                    41:82:49:3b:62:44:62:bf:cc:e4:19:9d:c7:31:15:
                    83:67:0c:74:87:c4:1e:2d:45:23:03:c7:cb:fe:02:
                    f7:d5:16:d3:0a:04:6a:4e:30:25:3e:60:b7:48:f6:
                    26:bb:ab:74:ec:d0:d8:6d:17:31:8a:41:ee:a5:17:
                    ac:3d:0f:6a:8f:8c:cc:3c:ca:f6:b1:06:1b:9f:5a:
                    9f:10:62:17:c6:64:13:7d:e1:b4:b7:48:07:0d:27:
                    48:26:c2:83:4e:1c:dc:22:6e:bf:12:e3:56:02:30:
                    4d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:57:2F:49:1D:3F:14:2F:0E:67:A7:C7:7D:F0:95:1D:45:FD:8A:63
            X509v3 Authority Key Identifier:
                keyid:51:AA:AC:7F:6F:58:F7:47:07:2C:87:EC:2F:48:78:EF:1C:B8:F4:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916BCDF/F858344EE36D11E8956F3516C4F9AE02/Uaqsf29Y90cHLIfsL0h47xy49M4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uaqsf29Y90cHLIfsL0h47xy49M4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BCDF/F858344EE36D11E8956F3516C4F9AE02/Uaqsf29Y90cHLIfsL0h47xy49M4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:c0:67:85:4b:eb:a7:1c:9c:ce:e3:ee:62:55:0d:5a:ac:75:
         be:46:01:96:7a:57:0c:13:1b:4c:1b:96:b4:86:2c:95:9b:07:
         e0:aa:b0:5a:fe:29:94:05:e6:40:c0:4d:e4:40:fd:28:3f:73:
         bc:c6:ed:61:55:d8:2d:cb:31:2d:87:7c:1c:c6:bd:18:f3:f1:
         81:56:2f:24:c3:69:8b:4b:b9:3e:7f:2b:3a:a9:52:4a:e6:06:
         5e:e7:c9:c6:6d:92:2a:a9:86:37:8b:75:c2:61:36:0e:79:2c:
         45:36:f5:56:cc:4b:b9:0c:31:4c:3a:cb:b5:d3:26:17:d0:98:
         b7:0a:23:a7:9e:9c:68:ad:8c:b0:c8:ce:f2:cc:5d:3f:8c:2b:
         e7:07:bb:28:b9:0d:fa:0b:6a:52:28:1f:1b:01:ea:20:f5:e9:
         a5:97:18:7e:86:d6:68:ef:e2:f1:e9:32:57:a1:49:ce:40:e3:
         d7:f5:b6:34:c5:7e:f2:fe:86:a1:ed:a9:d5:26:c6:5f:3e:31:
         41:74:25:0d:9a:9e:7f:79:20:e8:a2:38:1b:6e:c3:23:4a:3c:
         70:24:9d:55:85:10:da:68:94:89:4d:7c:ee:9d:1d:1e:82:9b:
         13:b0:c4:ca:52:98:6f:4c:49:86:99:85:3f:18:50:b5:fe:b4:
         eb:52:d4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:53:03 2025 by rpki-client