Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.mft
File:                     uxh7m1B2e7e7wih3IL02wLjQaJY.mft (raw, json)
Hash identifier:          xV8IgT7PlpBxGs95DU8siwkkApszT04G3tMWUiB8Tw4=
Subject key identifier:   E5:DE:88:47:1A:17:69:E7:49:42:52:B1:04:5D:A2:8F:46:AF:BD:65
Authority key identifier: BB:18:7B:9B:50:76:7B:B7:BB:C2:28:77:20:BD:36:C0:B8:D0:68:96
Certificate issuer:       /CN=A9191E43/serialNumber=BB187B9B50767BB7BBC2287720BD36C0B8D06896
Certificate serial:       030A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uxh7m1B2e7e7wih3IL02wLjQaJY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.mft
Manifest number:          030A
Signing time:             Sat 09 Aug 2025 01:45:13 +0000
Manifest this update:     Sat 09 Aug 2025 01:45:13 +0000
Manifest next update:     Sat 16 Aug 2025 01:45:13 +0000
Files and hashes:         1: uxh7m1B2e7e7wih3IL02wLjQaJY.crl (hash: v3RUBJQKWVrub1olZE2vEgDLTilORbyc7bj48KH5yj4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.crl
                          rsync://rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uxh7m1B2e7e7wih3IL02wLjQaJY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 778 (0x30a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191E43, serialNumber=BB187B9B50767BB7BBC2287720BD36C0B8D06896
        Validity
            Not Before: Aug  9 01:45:13 2025 GMT
            Not After : Aug 16 01:45:13 2025 GMT
        Subject: CN=6896a829-2a1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b2:4a:0f:ab:11:3c:2d:99:81:9b:f9:a7:0b:
                    54:ee:f8:73:ac:78:f2:f4:11:fc:98:b1:8a:4e:ff:
                    8d:08:8e:f1:27:7f:5d:f1:a6:2d:7f:42:fe:21:f3:
                    e0:1f:81:79:60:4d:a5:a2:02:fb:36:9a:28:96:1a:
                    b5:29:ce:f2:cc:73:4b:1f:72:59:0d:53:a1:a0:d7:
                    86:fc:e0:59:3d:6f:56:90:fd:ef:49:e2:f8:01:a2:
                    ff:01:7b:01:51:25:92:68:ab:54:dd:d7:ba:e0:9f:
                    e3:a6:b8:45:2a:b7:5e:36:0a:7a:0d:65:f0:b5:d0:
                    9b:12:90:63:50:cd:f8:c4:55:ea:19:fc:ae:03:6c:
                    ce:ae:df:f3:16:e7:4f:f0:e3:cb:ba:22:a1:54:15:
                    44:e2:9b:b4:c2:ac:fd:e3:a1:ee:81:0b:95:50:2f:
                    50:b8:01:7e:61:55:ba:d4:84:0e:d3:fc:b3:25:6f:
                    e3:71:2f:a0:34:a2:49:cd:72:26:f3:c6:16:9e:4a:
                    29:16:d6:c8:f4:71:40:1e:40:25:7b:dc:ba:b4:0b:
                    80:09:e9:ca:9f:d5:40:77:3c:82:e1:2d:ea:83:4e:
                    37:6b:4a:e2:12:9c:bc:b2:71:f2:9f:82:90:d5:c5:
                    9a:77:d6:29:ef:04:dd:77:e7:d9:6b:36:b4:bf:23:
                    64:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:DE:88:47:1A:17:69:E7:49:42:52:B1:04:5D:A2:8F:46:AF:BD:65
            X509v3 Authority Key Identifier:
                keyid:BB:18:7B:9B:50:76:7B:B7:BB:C2:28:77:20:BD:36:C0:B8:D0:68:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uxh7m1B2e7e7wih3IL02wLjQaJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:0e:5d:ea:e3:32:4c:1f:6c:2a:d6:c7:9f:28:56:ab:e6:11:
         c6:76:8c:45:b3:53:62:ea:d6:ff:05:97:2b:31:56:01:6a:f0:
         d6:27:eb:c2:49:0d:e8:6d:8a:a3:57:ea:97:40:d7:b6:93:cb:
         01:70:40:3c:0c:08:f9:03:ee:59:6c:dd:75:65:7d:0e:51:d2:
         e6:7b:dc:bb:7e:ed:fa:b1:2c:13:d6:7e:3d:3d:2d:ea:6c:62:
         30:ce:72:4e:93:55:ba:03:33:29:ab:1c:bf:00:43:0f:07:93:
         72:78:73:2e:f7:8c:b5:d8:f3:b0:d6:af:1c:b5:74:ef:75:f0:
         06:fa:47:6b:ba:cc:18:81:2e:6f:7b:da:15:b0:40:48:81:a5:
         ce:bf:16:a4:c8:44:95:3d:0b:8a:9c:9e:a4:fb:4f:31:a0:d7:
         85:5d:9e:97:00:ab:f7:f1:4f:73:d8:98:da:6f:f5:df:ca:81:
         26:e5:05:12:d3:c2:62:8f:52:d4:6f:e7:f9:6c:c5:26:d0:aa:
         ca:f6:d0:15:d1:18:a8:0e:3e:7d:ba:fd:96:0c:fe:29:02:67:
         4c:a9:ba:70:cc:47:be:4e:19:82:6a:fa:36:6f:7e:f4:ab:4a:
         f0:f0:39:47:12:2d:20:7a:9f:8b:ac:65:19:01:73:9f:af:6d:
         0a:f0:d4:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:04:34 2025 by rpki-client