Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.mft
File:                     UgupTND7nnwUDfvAzFi5PPVMIvM.mft (raw, json)
Hash identifier:          qjcI8Z1BEqXjj9mNXpyT+fp8j5q03GFFsBbla/YJ67c=
Subject key identifier:   F0:6E:38:51:97:D7:ED:B7:D4:8D:E7:CB:A4:FE:1A:55:1D:B0:CA:13
Authority key identifier: 52:0B:A9:4C:D0:FB:9E:7C:14:0D:FB:C0:CC:58:B9:3C:F5:4C:22:F3
Certificate issuer:       /CN=A91F8981/serialNumber=520BA94CD0FB9E7C140DFBC0CC58B93CF54C22F3
Certificate serial:       AC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UgupTND7nnwUDfvAzFi5PPVMIvM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.mft
Manifest number:          AB
Signing time:             Thu 07 Aug 2025 06:41:59 +0000
Manifest this update:     Thu 07 Aug 2025 06:41:59 +0000
Manifest next update:     Thu 14 Aug 2025 06:41:59 +0000
Files and hashes:         1: UgupTND7nnwUDfvAzFi5PPVMIvM.crl (hash: hM5KhEGNioDZswewa4rx66HNGj8fhpNNSuFWaMqVjyU=)
                          2: D79D112E6C7F11EF92105459C4F9AE02.roa (hash: HfxBV0ZJ9ixuR1eesZIIiZUZrrfXBYTU4Z7Ry5c0lbg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.crl
                          rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UgupTND7nnwUDfvAzFi5PPVMIvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 172 (0xac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8981, serialNumber=520BA94CD0FB9E7C140DFBC0CC58B93CF54C22F3
        Validity
            Not Before: Aug  7 06:41:59 2025 GMT
            Not After : Aug 14 06:41:59 2025 GMT
        Subject: CN=68944ab7-f93f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:df:2a:37:8e:32:d5:d0:68:22:fd:21:63:ba:
                    23:e3:2c:19:90:a3:a5:1b:d0:79:d8:52:d7:73:a4:
                    a8:cc:1a:11:4e:07:26:e1:a8:72:e1:58:6b:35:41:
                    c3:1c:3c:f3:ed:01:cb:e6:c3:0b:18:1e:89:10:0e:
                    73:b4:bf:6e:f5:d4:b5:d0:67:2f:23:e4:12:60:c2:
                    b2:cf:4f:2e:c3:d0:ca:59:cd:fc:05:4e:ef:c0:8c:
                    fb:41:2d:77:9c:30:6d:9b:e1:09:90:21:e5:7c:61:
                    22:9f:e7:9f:a4:2d:88:ac:86:2f:d0:cd:97:eb:6f:
                    54:85:fa:49:93:f9:b0:d6:12:a5:95:88:63:4d:a3:
                    30:a4:67:14:14:3a:6f:a0:5c:c9:f9:fa:8f:4d:2a:
                    f8:99:f0:11:ed:2d:9f:16:3e:2b:7d:c6:ad:28:93:
                    f7:54:7d:8c:05:fb:1a:9a:48:c8:65:66:2e:f3:39:
                    81:26:2d:3c:95:66:79:31:63:8d:c0:b5:ea:bc:8f:
                    9b:0e:af:17:f4:36:f8:10:d6:81:b9:b9:b4:4f:e1:
                    87:2e:78:96:1a:79:f2:40:05:6a:7c:18:5b:3b:d2:
                    16:8b:1b:69:db:2b:47:b0:67:e4:77:c0:15:5c:1f:
                    a6:39:25:65:d8:89:90:45:0f:50:e8:6d:ff:fc:a2:
                    dc:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:6E:38:51:97:D7:ED:B7:D4:8D:E7:CB:A4:FE:1A:55:1D:B0:CA:13
            X509v3 Authority Key Identifier:
                keyid:52:0B:A9:4C:D0:FB:9E:7C:14:0D:FB:C0:CC:58:B9:3C:F5:4C:22:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UgupTND7nnwUDfvAzFi5PPVMIvM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:fb:79:d3:d2:10:3c:a3:29:96:03:0c:71:e7:b9:a1:4a:4d:
         8e:ee:9d:2d:9b:7b:37:37:26:a3:45:71:98:05:7b:72:b8:c9:
         9a:f3:64:a7:15:8a:e3:e2:80:61:7f:18:f5:e3:52:e1:43:39:
         ed:9c:32:29:3e:bf:ea:c5:dd:f8:f2:b2:1e:8b:4e:12:c5:40:
         cb:99:04:fd:cd:75:05:06:0c:20:1b:19:56:4b:65:93:0b:08:
         3d:39:f2:1a:98:06:29:8b:86:04:2a:14:ee:bd:17:f8:7c:38:
         0d:c4:f6:3b:03:dc:61:43:9b:d6:a7:a6:40:2a:f4:8e:04:15:
         65:fe:ba:01:c6:51:f7:24:e0:50:14:77:e9:d0:fd:5d:c2:ef:
         a8:1a:51:0a:ba:26:e5:a1:5e:7a:4e:2c:87:32:b0:5c:65:02:
         bb:56:1f:5b:05:81:35:2f:a3:b9:99:0a:04:4a:42:90:f6:a6:
         2a:0d:5c:63:45:b7:20:d1:f8:f0:a6:66:f0:1b:5d:38:d6:81:
         ea:66:2d:f4:ee:f3:ed:d8:50:c1:b7:af:89:f1:fc:73:ef:4a:
         13:48:e9:a2:6f:99:88:d7:ea:a7:4a:ff:41:b0:76:47:6b:6a:
         8b:97:e0:f2:18:62:a0:2d:36:31:6d:31:ae:5d:eb:5d:cc:2c:
         ca:16:8b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:53:47 2025 by rpki-client