Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.mft
File:                     UMP9EvajMVgZtSurzBmPsNv9QTo.mft (raw, json)
Hash identifier:          1U+2QltyyrTQPwpin7yVM5FLbL2GPZkfNKBatu+jOuk=
Subject key identifier:   E9:F7:D9:2C:02:91:D2:49:5F:CD:CC:88:F6:40:F0:64:98:D4:5A:84
Authority key identifier: 50:C3:FD:12:F6:A3:31:58:19:B5:2B:AB:CC:19:8F:B0:DB:FD:41:3A
Certificate issuer:       /CN=A91CE616/serialNumber=50C3FD12F6A3315819B52BABCC198FB0DBFD413A
Certificate serial:       03FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UMP9EvajMVgZtSurzBmPsNv9QTo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.mft
Manifest number:          03F9
Signing time:             Thu 07 Aug 2025 01:02:01 +0000
Manifest this update:     Thu 07 Aug 2025 01:02:01 +0000
Manifest next update:     Thu 14 Aug 2025 01:02:01 +0000
Files and hashes:         1: UMP9EvajMVgZtSurzBmPsNv9QTo.crl (hash: kMeVT/inrtK3d87fPI68YZOjpML4EB7Obuzttq0gUpg=)
                          2: 296C190484AD11EC9C3F837CC4F9AE02.roa (hash: /RxOlV3ierU9U8XUpOrcDZ1BfZBiiZXrWx/RXW8pGyY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.crl
                          rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UMP9EvajMVgZtSurzBmPsNv9QTo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 01:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1022 (0x3fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE616, serialNumber=50C3FD12F6A3315819B52BABCC198FB0DBFD413A
        Validity
            Not Before: Aug  7 01:02:01 2025 GMT
            Not After : Aug 14 01:02:01 2025 GMT
        Subject: CN=6893fb09-d350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ea:e3:eb:4d:0a:ce:aa:3d:b2:14:53:23:d9:
                    cd:6f:92:f2:08:58:df:65:2f:22:01:2c:95:d8:ee:
                    94:4e:f0:f2:5f:ae:c1:cf:02:b5:08:a8:08:41:fc:
                    7e:7f:9a:98:07:ac:ea:af:c1:b8:9b:f2:a0:b7:97:
                    dd:ec:92:48:67:2b:65:b0:ca:fe:f0:48:bd:89:b9:
                    72:b7:68:2f:60:c1:30:40:fd:3b:8c:6c:66:b4:bd:
                    c5:63:1f:33:92:3c:10:b8:28:65:3c:25:c0:24:31:
                    18:36:26:2b:dd:20:77:50:fd:a1:cf:6b:da:f1:7a:
                    3d:e8:ba:cb:74:5f:e9:68:fe:6e:81:39:78:02:b5:
                    40:78:97:98:a1:20:e1:eb:e3:0c:66:6c:20:4f:6e:
                    5f:02:a5:f3:ed:2a:39:fd:e9:28:27:cd:57:d4:15:
                    cf:2d:30:df:6d:b1:2f:3e:64:da:50:61:1a:a2:e1:
                    1e:08:36:88:86:72:52:f4:43:47:24:40:8b:28:0f:
                    99:9f:96:c0:5f:5e:93:13:39:68:f5:d4:97:84:c3:
                    0f:d4:53:90:3b:ca:97:2d:71:a1:11:f3:e7:cf:0e:
                    86:bc:19:53:53:a9:4c:93:9a:71:2f:9f:7b:18:f6:
                    63:bf:f5:27:ad:57:7b:ea:cd:ce:ed:d6:fa:02:04:
                    35:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:F7:D9:2C:02:91:D2:49:5F:CD:CC:88:F6:40:F0:64:98:D4:5A:84
            X509v3 Authority Key Identifier:
                keyid:50:C3:FD:12:F6:A3:31:58:19:B5:2B:AB:CC:19:8F:B0:DB:FD:41:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UMP9EvajMVgZtSurzBmPsNv9QTo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:c0:8a:e0:2a:08:b0:97:23:91:cd:09:0d:d8:5e:a1:b2:09:
         94:18:0a:9a:57:d9:36:74:74:6d:71:81:bb:c4:3c:0c:9c:c7:
         c1:09:96:24:6d:e0:1c:56:81:e6:b0:0d:2c:dc:c7:9d:01:4d:
         db:78:af:a1:76:10:04:4b:44:11:28:6b:77:e5:68:a8:5d:ed:
         09:12:9b:dc:13:c6:d8:f5:d7:0f:67:39:28:7c:a6:e8:57:db:
         6b:b5:14:3a:ac:e8:f0:63:8b:66:cb:a3:9a:9f:35:e6:8b:5e:
         20:26:3f:0d:9d:6e:bb:81:78:c9:81:27:e8:f7:31:be:8f:eb:
         11:44:e0:6b:20:c2:af:0d:88:c2:4a:b0:cd:8f:47:24:b1:ea:
         02:59:eb:5e:ef:d7:13:14:2c:44:dd:67:bc:8c:9c:4f:b0:f4:
         1b:2c:9e:b6:36:91:89:f6:23:0c:30:7b:28:4e:28:89:fc:91:
         94:e2:9a:22:f2:a4:00:0a:65:55:8b:93:3e:f3:c3:49:1a:ea:
         fa:79:64:b3:69:b0:a6:a3:a3:d7:41:28:1c:0a:2e:02:62:0b:
         d7:9a:5b:50:94:98:aa:b8:79:6b:c7:dd:40:3c:cd:63:98:e9:
         1f:20:57:93:fd:9c:26:db:22:05:1a:7f:d9:31:a9:1c:eb:3c:
         c2:52:6a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:22:20 2025 by rpki-client