Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft
File:                     uoXZHSSsqengMR5VLb83WXY6Yro.mft (raw, json)
Hash identifier:          dJWC44SeJYTFELj1wP84s5gtUvGTvrcVe0t7qs7mXbc=
Subject key identifier:   67:E5:C0:E4:8C:B6:CF:88:0E:67:07:A1:1A:2C:8C:93:1D:2E:23:65
Authority key identifier: BA:85:D9:1D:24:AC:A9:E9:E0:31:1E:55:2D:BF:37:59:76:3A:62:BA
Certificate issuer:       /CN=A91B391F/serialNumber=BA85D91D24ACA9E9E0311E552DBF3759763A62BA
Certificate serial:       D4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uoXZHSSsqengMR5VLb83WXY6Yro.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft
Manifest number:          CF
Signing time:             Fri 15 Aug 2025 06:16:21 +0000
Manifest this update:     Fri 15 Aug 2025 06:16:20 +0000
Manifest next update:     Fri 22 Aug 2025 06:16:20 +0000
Files and hashes:         1: uoXZHSSsqengMR5VLb83WXY6Yro.crl (hash: iu5zt4nOjFxF36jZDQ/fRvPxrd3BY/Chah+7xrez+AI=)
                          2: 37C8E00A6EA011F0835F9E19C4F9AE02.roa (hash: RhQloGXtcZHnLcoyU2Qhf/8Ls5h2TxH8G+0z0bjWi3E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.crl
                          rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uoXZHSSsqengMR5VLb83WXY6Yro.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Aug 2025 06:16:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 212 (0xd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B391F, serialNumber=BA85D91D24ACA9E9E0311E552DBF3759763A62BA
        Validity
            Not Before: Aug 15 06:16:20 2025 GMT
            Not After : Aug 22 06:16:20 2025 GMT
        Subject: CN=689ed0b4-3459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8c:24:60:2d:2b:8e:d1:cd:79:6c:95:79:8a:
                    00:77:4f:73:db:1c:4e:9f:75:0a:dd:0e:3e:08:60:
                    8a:23:32:9d:ec:64:e5:80:da:1e:09:69:73:5f:f2:
                    3b:51:d8:da:19:d8:a6:e1:27:3c:1d:fd:ad:09:64:
                    d6:16:2c:c9:e0:8e:7b:8b:82:b3:8b:7d:df:d0:a3:
                    43:3c:b3:da:49:47:82:1d:d4:43:a3:3f:5b:ea:da:
                    e4:3b:b9:c8:be:88:29:6e:eb:3b:3f:21:b9:6d:a1:
                    34:81:93:d2:1d:6a:f0:fc:70:73:c8:ba:7e:b1:be:
                    3b:20:65:e5:d7:df:cf:7c:2b:bf:4c:a1:86:c9:0c:
                    f8:f1:47:c1:23:9c:73:6a:f0:28:19:16:6b:01:84:
                    08:34:09:34:21:73:17:44:33:e7:56:0b:00:ea:86:
                    1c:e0:5e:d4:59:c8:f3:45:36:b0:a5:7e:25:bc:0d:
                    b1:67:93:04:bd:1f:f9:5a:22:14:a7:4e:ee:73:ca:
                    89:79:a2:3f:46:7d:7e:f0:02:4d:ce:a0:d0:20:c6:
                    9e:91:9a:f0:28:bf:dd:68:37:23:0b:11:a3:9b:5a:
                    91:6d:80:f9:fd:00:90:36:94:56:e6:d3:3e:67:01:
                    af:cf:33:9a:6b:65:d0:47:63:18:9e:be:6f:ad:f6:
                    d8:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:E5:C0:E4:8C:B6:CF:88:0E:67:07:A1:1A:2C:8C:93:1D:2E:23:65
            X509v3 Authority Key Identifier:
                keyid:BA:85:D9:1D:24:AC:A9:E9:E0:31:1E:55:2D:BF:37:59:76:3A:62:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uoXZHSSsqengMR5VLb83WXY6Yro.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:a8:52:10:5b:ac:da:65:c7:1e:58:32:2d:a6:51:5d:1c:43:
         8e:a3:2d:aa:73:7d:b3:1a:b1:e9:1d:d2:0f:34:d0:7d:50:55:
         07:af:f0:7f:a2:7b:17:99:74:1c:1a:a6:92:33:c0:ef:2a:28:
         f3:be:60:93:05:ab:63:92:08:a2:e5:c2:e9:a5:76:60:49:bd:
         e2:06:97:80:5e:32:e1:51:d0:ae:3c:74:f0:23:89:5f:36:d9:
         2e:fc:c8:46:58:5d:97:a0:0a:a2:f9:af:23:4c:08:aa:7f:44:
         25:14:b4:59:e5:56:8f:09:81:eb:87:fd:0b:58:69:af:42:e3:
         19:f8:ed:8b:31:3f:fc:83:ad:54:28:55:4d:30:1e:03:f7:06:
         bf:0c:22:18:10:4f:c3:b3:fc:81:93:95:ef:b0:9b:75:30:d3:
         61:02:a8:2d:a0:36:5b:fd:f6:b5:59:83:43:e0:9b:e9:72:f7:
         d2:d0:d0:93:2a:71:e8:36:12:1e:d7:b1:85:dc:15:04:a2:95:
         bd:5b:f1:2c:5b:66:43:66:4c:01:b2:bb:19:f7:00:dd:01:c1:
         16:fd:2e:00:e7:98:b9:e2:59:cb:70:ec:ac:7d:a1:f9:9a:69:
         51:f1:b9:3b:da:ef:ed:b7:75:f2:e1:dd:a8:6b:ea:4c:8a:cd:
         49:5f:8f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 16 17:32:40 2025 by rpki-client