Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.mft
File:                     uPYcq7kRnWw3aF8KvjSu4moCF-Y.mft (raw, json)
Hash identifier:          TXmMDgn2zcJyN4T0GE0LebO/3SF/XbnkVAbOXMCOBEg=
Subject key identifier:   39:A6:6C:CD:5D:F3:D1:2D:8B:9A:C2:DA:39:01:32:C3:95:C1:DC:6A
Authority key identifier: B8:F6:1C:AB:B9:11:9D:6C:37:68:5F:0A:BE:34:AE:E2:6A:02:17:E6
Certificate issuer:       /CN=A919D72D/serialNumber=B8F61CABB9119D6C37685F0ABE34AEE26A0217E6
Certificate serial:       0685
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPYcq7kRnWw3aF8KvjSu4moCF-Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.mft
Manifest number:          067F
Signing time:             Tue 04 Nov 2025 22:33:32 +0000
Manifest this update:     Tue 04 Nov 2025 22:33:31 +0000
Manifest next update:     Tue 11 Nov 2025 22:33:31 +0000
Files and hashes:         1: uPYcq7kRnWw3aF8KvjSu4moCF-Y.crl (hash: q4MrBffqStMcQ3igdXsZaWftNun86EX3Ey//VSprkHw=)
                          2: 00C79724968F11EB9A79630BC4F9AE02.roa (hash: Y2zv5qoN2STM8iOeHa24FYyQDvrtP06yfpXTjv2gJRo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.crl
                          rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPYcq7kRnWw3aF8KvjSu4moCF-Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 22:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1669 (0x685)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D72D, serialNumber=B8F61CABB9119D6C37685F0ABE34AEE26A0217E6
        Validity
            Not Before: Nov  4 22:33:31 2025 GMT
            Not After : Nov 11 22:33:31 2025 GMT
        Subject: CN=690a7f3c-cfee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:19:76:03:be:63:8f:b8:6c:c0:0e:62:bd:f8:
                    35:bc:38:2d:fe:2f:56:c8:91:9b:0b:e5:f1:a6:83:
                    aa:cc:a9:2e:4a:1b:2d:3e:35:22:8c:ab:de:fd:21:
                    bd:4a:68:c1:a9:e0:15:d5:e6:6c:45:61:c1:9e:91:
                    c3:be:48:c6:5e:72:58:9e:cd:60:53:9d:91:de:e6:
                    3e:9a:ff:92:71:c5:1a:65:bd:ea:ad:74:23:3f:26:
                    5e:91:10:75:65:ab:7f:9c:24:57:be:81:3d:90:47:
                    bd:82:70:76:11:7a:81:01:92:a4:a2:a2:9b:47:0b:
                    31:d6:66:66:63:f2:a6:26:e3:ff:75:da:ae:f0:39:
                    ad:87:6e:6a:63:a7:43:d4:05:8d:9a:2a:53:ca:5d:
                    03:63:63:eb:b9:18:01:45:c8:40:38:82:f4:df:ae:
                    cd:3c:8d:44:57:ee:ca:09:fd:13:9e:d2:b7:28:74:
                    ea:1d:8a:0a:f3:b0:0d:a8:e4:f5:6d:d6:e8:19:da:
                    8e:f8:a0:bb:2f:d7:fa:2f:a9:2a:08:5a:6c:53:da:
                    6c:30:7b:5d:e7:7d:e9:57:2d:c3:e5:1b:cb:ee:e0:
                    93:6d:0a:7f:89:1f:f9:fa:4e:13:ec:7d:ec:b4:02:
                    b6:1a:b9:7c:57:d1:da:72:fc:c0:34:a6:98:21:3a:
                    6b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:A6:6C:CD:5D:F3:D1:2D:8B:9A:C2:DA:39:01:32:C3:95:C1:DC:6A
            X509v3 Authority Key Identifier:
                keyid:B8:F6:1C:AB:B9:11:9D:6C:37:68:5F:0A:BE:34:AE:E2:6A:02:17:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPYcq7kRnWw3aF8KvjSu4moCF-Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:e0:57:14:10:e5:8e:a9:6b:dc:b6:f7:5d:29:09:b6:31:02:
         6f:7b:66:3a:d4:22:01:e6:22:7f:00:fd:51:1c:13:c6:cb:27:
         5c:2f:dc:74:16:c8:a3:42:46:1a:97:a9:1e:76:bf:65:6e:69:
         45:c6:8d:56:c5:b3:0c:f5:fd:b0:bf:15:4b:a2:30:fb:ba:79:
         29:53:69:34:70:52:37:9f:6f:9b:af:bf:2a:78:b2:78:3b:a8:
         27:90:b8:c8:1b:e8:88:b4:4e:75:26:6a:63:fc:71:86:aa:eb:
         59:ce:3c:c6:ea:84:ed:17:1f:8c:0b:14:c5:0e:87:bf:c9:02:
         fc:6d:47:1b:32:24:24:21:9f:fd:1a:69:8e:c4:54:cd:92:64:
         4c:15:ce:99:cd:b3:97:d5:47:e4:eb:99:84:47:6e:ca:ef:ee:
         08:76:b5:c3:e3:da:0a:7a:34:c1:10:09:64:fd:42:2a:18:28:
         2f:de:50:85:e3:9c:b1:e4:1e:21:b8:21:37:82:1b:52:4f:e6:
         44:2c:ac:3d:15:13:3c:92:4b:76:6c:c5:87:9e:79:cb:ad:9a:
         44:de:c1:20:33:d6:1e:51:2e:6e:ef:2b:58:68:0f:93:cf:76:
         22:39:c1:8f:6f:47:f8:7a:d6:84:50:60:bd:5d:3a:67:09:bc:
         f2:96:d5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 01:35:33 2025 by rpki-client