Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft
File:                     kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft (raw, json)
Hash identifier:          7wo6HqFBnDKpK4s2UhyxPw1MsQbpIxrXsKlihEZZ+2Y=
Subject key identifier:   5D:17:B4:68:E9:6A:F7:4F:0E:0F:53:31:EE:26:54:34:25:05:B3:BB
Authority key identifier: 91:46:B7:82:EB:82:46:7B:19:D8:B4:1D:1C:C4:0E:BF:04:89:90:66
Certificate issuer:       /CN=A9155806/serialNumber=9146B782EB82467B19D8B41D1CC40EBF04899066
Certificate serial:       A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUa3guuCRnsZ2LQdHMQOvwSJkGY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft
Manifest number:          A3
Signing time:             Fri 25 Jul 2025 06:32:51 +0000
Manifest this update:     Fri 25 Jul 2025 06:32:51 +0000
Manifest next update:     Fri 01 Aug 2025 06:32:51 +0000
Files and hashes:         1: kUa3guuCRnsZ2LQdHMQOvwSJkGY.crl (hash: 9zBoV3CPBzB8q401l96Rg8ogGMhDOrq2RbEYJZzw97w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.crl
                          rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUa3guuCRnsZ2LQdHMQOvwSJkGY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 01 Aug 2025 06:32:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 163 (0xa3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155806, serialNumber=9146B782EB82467B19D8B41D1CC40EBF04899066
        Validity
            Not Before: Jul 25 06:32:51 2025 GMT
            Not After : Aug  1 06:32:51 2025 GMT
        Subject: CN=68832513-9d01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:21:12:2f:ab:08:9c:b0:d5:4f:c6:b7:d5:ac:
                    41:1f:5c:4f:c0:87:cc:52:16:23:a4:37:16:78:62:
                    07:84:26:eb:f4:30:fa:84:4b:e9:55:9d:8e:52:0b:
                    e5:b5:4e:b6:de:5f:62:af:bb:88:5e:39:df:09:65:
                    63:19:35:85:32:93:f9:b3:aa:b6:f5:50:10:b0:66:
                    ad:e5:27:2d:31:d3:4e:71:a2:25:9a:73:42:57:18:
                    f0:21:c8:52:f2:05:72:3f:7e:f2:0b:c7:4e:61:d5:
                    75:f5:e3:44:b7:d6:98:7f:54:08:8c:5d:98:c3:42:
                    fc:07:5b:c3:da:66:92:eb:c1:48:a1:33:f7:2e:51:
                    4d:67:54:a7:2f:e3:41:6e:37:e9:4e:96:37:bd:ef:
                    0c:c5:3b:02:f7:e4:b8:93:17:3b:86:ba:ae:71:ce:
                    87:2a:65:ca:e0:73:c7:8b:d0:4b:8a:a2:9a:0c:b8:
                    16:96:45:cf:ba:83:6d:68:99:8a:ff:df:22:d4:07:
                    81:6d:fb:55:35:4f:84:00:63:f8:38:76:46:d7:fe:
                    82:ce:4f:86:04:2d:cb:54:6e:02:52:03:1e:dd:4e:
                    dd:98:46:b3:fd:08:a6:10:07:d3:ee:0c:ad:ba:4c:
                    21:ee:15:da:ac:62:12:9e:da:b5:d3:83:a8:e3:f1:
                    ef:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:17:B4:68:E9:6A:F7:4F:0E:0F:53:31:EE:26:54:34:25:05:B3:BB
            X509v3 Authority Key Identifier:
                keyid:91:46:B7:82:EB:82:46:7B:19:D8:B4:1D:1C:C4:0E:BF:04:89:90:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUa3guuCRnsZ2LQdHMQOvwSJkGY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:1b:c6:ad:f1:db:f1:17:cc:dc:c7:95:fd:6c:1c:f8:97:7d:
         0f:ae:86:47:da:af:9b:95:99:c4:db:0a:e2:cb:4c:b5:60:d5:
         1d:c8:2d:17:73:f4:51:8e:71:af:73:fd:42:c1:66:50:fc:68:
         c3:16:58:f7:16:37:b8:28:3e:d9:ac:fc:3e:8c:a3:a4:e5:1a:
         b0:c9:2d:5a:ae:fa:43:8f:7a:03:f7:e6:d7:ad:11:f3:90:cf:
         74:dd:7c:7e:fd:50:a9:14:5f:2d:90:f0:e6:3a:57:f6:c5:bf:
         e0:1b:5f:a5:4f:83:95:70:da:cc:d4:d2:29:c9:4e:cb:4c:0d:
         f7:94:aa:f2:20:3f:8e:72:81:7c:87:16:1d:00:c1:9b:05:7b:
         59:88:b4:92:ca:67:57:e2:ef:f6:96:b3:6b:21:11:7e:bc:5f:
         ee:06:a2:6b:04:45:e3:4e:41:94:f0:99:f8:87:91:05:c2:f5:
         3c:60:4e:f3:bd:2e:84:df:14:1a:4b:bc:e3:c2:13:86:51:85:
         5e:18:ec:85:c7:33:67:36:59:9a:dd:92:eb:7f:76:33:e3:1c:
         92:8f:06:9b:4d:4a:cd:22:f2:d4:74:29:f6:cc:1a:2f:fb:f1:
         f6:36:03:e6:4d:a3:44:ca:ec:f0:b0:20:ad:bd:6c:2a:c4:22:
         8e:32:d9:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 02:04:36 2025 by rpki-client