Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft
File:                     UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft (raw, json)
Hash identifier:          G/6XXfB8g0wTHv/1oinZroHOd9hytO7lxKxzkb+7444=
Subject key identifier:   66:0F:EE:45:C3:A8:22:73:8C:49:3A:95:B1:38:06:61:68:2B:1C:47
Authority key identifier: 52:31:C4:57:41:3B:9C:79:CD:5B:30:0D:84:A4:3B:00:39:BB:68:13
Certificate issuer:       /CN=A91DD1CC/serialNumber=5231C457413B9C79CD5B300D84A43B0039BB6813
Certificate serial:       1F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UjHEV0E7nHnNWzANhKQ7ADm7aBM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft
Manifest number:          1E
Signing time:             Sat 09 Aug 2025 08:24:12 +0000
Manifest this update:     Sat 09 Aug 2025 08:24:11 +0000
Manifest next update:     Sat 16 Aug 2025 08:24:11 +0000
Files and hashes:         1: UjHEV0E7nHnNWzANhKQ7ADm7aBM.crl (hash: JGACBMEH2kuYPiafSdkgVZQMozPQ5o0tixW9FqNLcZg=)
                          2: 0745DA884A3C11F0AFF98454C4F9AE02.roa (hash: aHkW6AI6M6GCpQTIMNKGhCjE+iAmC4ZK4etHz7DUzdk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.crl
                          rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UjHEV0E7nHnNWzANhKQ7ADm7aBM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD1CC, serialNumber=5231C457413B9C79CD5B300D84A43B0039BB6813
        Validity
            Not Before: Aug  9 08:24:11 2025 GMT
            Not After : Aug 16 08:24:11 2025 GMT
        Subject: CN=689705ab-faa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:77:7a:1c:14:a1:9e:bf:9e:41:39:48:2b:e1:
                    3f:8b:99:38:e8:fb:ea:a1:ed:59:42:ba:fa:a0:c2:
                    9f:78:ec:48:f2:97:3b:b2:ff:f4:9c:b1:9c:26:40:
                    a8:e5:94:2d:49:f1:5f:83:de:71:77:d1:03:bc:56:
                    46:cb:9b:8e:b6:0f:c3:dc:0b:e9:89:c8:26:a7:d6:
                    29:07:f3:f6:60:9f:cd:0c:c7:05:4e:a0:91:a6:59:
                    c7:88:4b:54:c1:e1:24:a1:d2:35:38:4d:f1:93:8c:
                    9c:0b:52:b6:95:1b:be:06:59:e8:98:d4:b6:1c:2c:
                    5b:09:1e:58:f3:a9:7b:63:4e:4e:30:ee:cb:47:47:
                    94:c4:0f:4e:8f:8f:04:b2:93:63:ef:ff:8f:4e:c8:
                    bf:05:23:e5:64:63:d7:ed:9a:df:1c:8b:b2:3d:86:
                    65:8b:e1:6f:2c:f8:c1:a1:62:f9:41:fc:5f:46:11:
                    24:b5:e6:5f:69:19:31:95:c9:29:d7:29:77:5b:96:
                    1b:0e:54:f1:65:e3:80:d9:48:62:d5:19:d7:4d:0d:
                    4a:ee:a2:ee:ca:79:b9:80:11:0f:87:d7:fc:ea:43:
                    ae:eb:a9:23:a1:49:9b:bd:ac:54:7e:da:a1:3a:73:
                    67:e6:98:81:07:b3:17:75:7e:01:a4:5e:3d:54:aa:
                    49:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:0F:EE:45:C3:A8:22:73:8C:49:3A:95:B1:38:06:61:68:2B:1C:47
            X509v3 Authority Key Identifier:
                keyid:52:31:C4:57:41:3B:9C:79:CD:5B:30:0D:84:A4:3B:00:39:BB:68:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UjHEV0E7nHnNWzANhKQ7ADm7aBM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:ac:8c:14:dc:83:75:fc:ce:12:95:a5:57:fa:10:6e:14:f8:
         b3:84:20:34:c2:6c:21:61:3d:f6:1a:a9:b9:58:5d:cb:4d:69:
         01:8c:0f:07:16:11:9b:4c:a9:6a:29:fb:01:0d:f1:39:c3:40:
         79:05:5e:81:d6:da:74:f0:d2:c4:51:d3:3a:ed:a6:94:1b:dd:
         d2:4a:c3:8c:65:2b:4e:16:53:c7:47:6d:f6:47:e2:4d:b0:09:
         99:92:08:56:a7:6e:48:ea:91:98:86:84:76:2b:19:d1:23:c9:
         3b:ad:a1:fb:9f:da:d3:92:fe:58:0a:a8:f2:e0:1a:0a:f9:44:
         b5:f2:ba:40:94:6d:48:96:11:ef:9d:8b:87:90:e4:f1:75:9d:
         e8:8a:86:c2:52:5d:fa:f1:af:b0:df:90:45:4c:20:8d:ee:d6:
         85:81:2d:62:08:1d:23:a5:90:d5:20:56:d9:65:f4:db:ac:b6:
         4b:9b:fe:50:3a:fb:f3:e4:9c:65:47:d1:49:4c:dc:5d:03:08:
         c4:32:9b:a4:c3:2f:19:a2:25:84:f6:3c:18:cd:57:63:f5:47:
         7c:48:fd:21:f3:64:d3:58:c2:3d:ba:09:6a:1d:ce:41:6a:c2:
         de:29:9f:f8:24:cc:47:18:2f:21:12:f3:c3:20:98:c2:16:58:
         bb:6f:56:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:59:54 2025 by rpki-client