Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F731E/566F347CF2A111EEA8A44F1AC4F9AE02/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.mft
File:                     ujlGsBPVR9Dpy6S7EbWKyQAcV-M.mft (raw, json)
Hash identifier:          sC3EFxDxu5KP6MF1sioBdtCq8WoAa/31L0H6KYLugbs=
Subject key identifier:   18:56:FE:90:77:CC:ED:AB:7F:52:65:B7:6B:10:49:42:72:DA:E9:D0
Authority key identifier: BA:39:46:B0:13:D5:47:D0:E9:CB:A4:BB:11:B5:8A:C9:00:1C:57:E3
Certificate issuer:       /CN=A91F731E/serialNumber=BA3946B013D547D0E9CBA4BB11B58AC9001C57E3
Certificate serial:       FF
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F731E/566F347CF2A111EEA8A44F1AC4F9AE02/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.mft
Manifest number:          FF
Signing time:             Tue 12 Aug 2025 16:06:34 +0000
Manifest this update:     Tue 12 Aug 2025 16:06:34 +0000
Manifest next update:     Tue 19 Aug 2025 16:06:34 +0000
Files and hashes:         1: ujlGsBPVR9Dpy6S7EbWKyQAcV-M.crl (hash: ZqC/VdDmzZvohzWDZ1grrKgyJc+EXPNosAY33KEHOFo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F731E/566F347CF2A111EEA8A44F1AC4F9AE02/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.crl
                          rsync://rpki.apnic.net/member_repository/A91F731E/566F347CF2A111EEA8A44F1AC4F9AE02/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 Aug 2025 16:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 255 (0xff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F731E, serialNumber=BA3946B013D547D0E9CBA4BB11B58AC9001C57E3
        Validity
            Not Before: Aug 12 16:06:34 2025 GMT
            Not After : Aug 19 16:06:34 2025 GMT
        Subject: CN=689b668a-13d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:85:a2:d9:a8:ba:75:a4:c4:fb:5f:5b:49:ff:
                    54:2c:1a:44:95:56:a4:06:84:7b:92:33:6a:7b:3e:
                    a9:ff:72:0b:d6:d0:af:c5:c5:4c:52:aa:46:a9:ef:
                    9e:4c:83:9b:f4:7f:fa:d8:4d:c6:e1:eb:cc:e1:b0:
                    a0:1a:62:d0:2e:39:a3:68:c7:8b:e8:47:97:7f:4d:
                    89:be:49:6a:78:8a:3f:ae:30:7f:cc:29:71:57:36:
                    9e:87:b9:50:b9:8b:d5:5e:3e:60:e9:ab:00:16:7f:
                    85:92:99:c1:e2:a8:d7:84:7a:3d:cf:42:10:3d:70:
                    82:b7:9c:a4:cf:1b:fa:ce:cc:44:72:c5:ad:d1:87:
                    66:9f:a5:07:e9:6b:ca:5c:18:09:0e:68:d9:49:89:
                    b7:0b:47:e1:4e:6a:76:c8:9c:59:e9:eb:b9:c9:50:
                    00:31:f0:b4:fb:1a:83:1f:5a:60:5b:b8:f5:51:11:
                    9b:cc:dc:17:ed:27:4c:9e:e7:7b:d8:06:92:90:04:
                    80:77:8d:0a:34:b3:ec:e3:43:d9:ed:c6:02:ff:d8:
                    f4:3a:c1:37:8f:9b:c7:10:b8:27:3c:4f:ca:46:4f:
                    5e:be:6e:11:74:21:56:4d:04:1e:c2:16:e7:98:07:
                    1c:d7:7b:19:a0:b4:ac:73:e3:bb:0b:3c:1a:fa:c3:
                    86:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:56:FE:90:77:CC:ED:AB:7F:52:65:B7:6B:10:49:42:72:DA:E9:D0
            X509v3 Authority Key Identifier:
                keyid:BA:39:46:B0:13:D5:47:D0:E9:CB:A4:BB:11:B5:8A:C9:00:1C:57:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F731E/566F347CF2A111EEA8A44F1AC4F9AE02/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F731E/566F347CF2A111EEA8A44F1AC4F9AE02/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:c4:d1:b7:5c:43:a1:a2:89:5a:0b:89:e1:3d:78:aa:a7:16:
         d2:e3:e7:61:94:23:7e:fd:76:1e:0c:0f:2e:65:bb:bd:08:19:
         75:fd:ee:1b:21:fe:13:99:5f:fe:84:5d:e2:ea:0d:70:b5:71:
         62:cb:9c:bb:70:49:80:30:a9:d2:d8:bf:87:8c:2d:38:64:ee:
         85:d3:92:70:c3:13:c6:f0:ea:8d:cb:9f:79:84:b0:e4:54:23:
         4a:95:b5:f3:50:97:44:b0:b8:ed:35:09:89:a9:f4:99:cc:26:
         f1:16:cf:ad:4e:a8:8d:ea:70:79:fd:ab:0c:9b:4e:e2:32:9e:
         80:ce:d8:2d:e5:84:5f:27:0e:35:49:b4:dc:96:9f:fe:ef:13:
         12:87:be:84:3d:05:33:4c:52:5d:f6:5d:51:2f:20:4d:c3:84:
         cc:c7:35:5e:24:b2:67:27:d0:79:16:29:4b:9e:16:9b:9f:91:
         bd:0d:bd:cb:6e:2b:11:37:42:95:66:5b:23:22:4b:72:11:bb:
         c4:d3:48:a6:ec:33:c2:7a:3a:20:7a:91:f5:2a:83:dd:8a:59:
         84:4c:88:41:12:ba:b2:8e:21:0f:69:bc:40:95:29:e2:01:4d:
         30:4d:5b:4c:84:5a:1c:97:51:2a:ca:3b:1a:50:74:c9:c4:6a:
         a2:a9:81:53
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjczMUUxMTAvBgNVBAUTKEJBMzk0NkIwMTNENTQ3RDBFOUNCQTRCQjExQjU4QUM5
MDAxQzU3RTMwHhcNMjUwODEyMTYwNjM0WhcNMjUwODE5MTYwNjM0WjAYMRYwFAYD
VQQDEw02ODliNjY4YS0xM2QzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuYWi2ai6daTE+19bSf9ULBpElVakBoR7kjNqez6p/3IL1tCvxcVMUqpGqe+e
TIOb9H/62E3G4evM4bCgGmLQLjmjaMeL6EeXf02JvklqeIo/rjB/zClxVzaeh7lQ
uYvVXj5g6asAFn+FkpnB4qjXhHo9z0IQPXCCt5ykzxv6zsxEcsWt0Ydmn6UH6WvK
XBgJDmjZSYm3C0fhTmp2yJxZ6eu5yVAAMfC0+xqDH1pgW7j1URGbzNwX7SdMnud7
2AaSkASAd40KNLPs40PZ7cYC/9j0OsE3j5vHELgnPE/KRk9evm4RdCFWTQQewhbn
mAcc13sZoLSsc+O7Czwa+sOGWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBhW/pB3
zO2rf1Jlt2sQSUJy2unQMB8GA1UdIwQYMBaAFLo5RrAT1UfQ6cukuxG1iskAHFfj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzMxRS81NjZGMzQ3Q0Yy
QTExMUVFQThBNDRGMUFDNEY5QUUwMi91amxHc0JQVlI5RHB5NlM3RWJXS3lRQWNW
LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL3VqbEdzQlBWUjlEcHk2UzdFYldLeVFBY1YtTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NzMxRS81NjZGMzQ3Q0YyQTExMUVFQThBNDRGMUFDNEY5QUUwMi91amxHc0JQVlI5
RHB5NlM3RWJXS3lRQWNWLU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC3xNG3XEOhoolaC4nhPXiqpxbS4+dhlCN+/XYeDA8uZbu9CBl1/e4b
If4TmV/+hF3i6g1wtXFiy5y7cEmAMKnS2L+HjC04ZO6F05JwwxPG8OqNy595hLDk
VCNKlbXzUJdEsLjtNQmJqfSZzCbxFs+tTqiN6nB5/asMm07iMp6Aztgt5YRfJw41
SbTclp/+7xMSh76EPQUzTFJd9l1RLyBNw4TMxzVeJLJnJ9B5FilLnhabn5G9Db3L
bisRN0KVZlsjIktyEbvE00im7DPCejogepH1KoPdilmETIhBErqyjiEPabxAlSni
AU0wTVtMhFocl1EqyjsaUHTJxGqiqYFT
-----END CERTIFICATE-----
Generated at Wed Aug 13 08:46:21 2025 by rpki-client