Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft
File:                     uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft (raw, json)
Hash identifier:          bZndJTMFz7J2FsuNCPvIgsHyS3+TYC77Q9O9rFlB7Ro=
Subject key identifier:   21:22:70:69:99:18:D6:AE:71:EE:D0:0A:19:D2:03:D6:F9:C4:FF:0C
Authority key identifier: B9:7D:8F:25:34:56:80:94:49:ED:E5:DC:5C:A2:56:9A:84:E7:83:DB
Certificate issuer:       /CN=A91E5C49/serialNumber=B97D8F253456809449EDE5DC5CA2569A84E783DB
Certificate serial:       0781
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uX2PJTRWgJRJ7eXcXKJWmoTng9s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft
Manifest number:          0F01
Signing time:             Fri 18 Jul 2025 21:44:23 +0000
Manifest this update:     Fri 18 Jul 2025 21:44:23 +0000
Manifest next update:     Fri 25 Jul 2025 21:44:23 +0000
Files and hashes:         1: uX2PJTRWgJRJ7eXcXKJWmoTng9s.crl (hash: 050jltKBJaaLjjQODL0HPvoi3YbSlWjtnBbIc715twU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.crl
                          rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uX2PJTRWgJRJ7eXcXKJWmoTng9s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 21:44:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1921 (0x781)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5C49, serialNumber=B97D8F253456809449EDE5DC5CA2569A84E783DB
        Validity
            Not Before: Jul 18 21:44:23 2025 GMT
            Not After : Jul 25 21:44:23 2025 GMT
        Subject: CN=687ac037-e94d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7c:82:7d:e1:81:30:03:4c:5e:02:77:37:f3:
                    be:e9:fa:12:57:4f:37:24:22:69:80:fb:8d:fc:54:
                    57:ce:63:d4:bc:44:86:e9:08:2c:30:44:91:d0:9b:
                    ff:bc:7e:b0:ec:cf:d2:1e:15:0d:7c:08:40:00:51:
                    d7:50:34:08:f4:9d:9b:8d:28:07:ff:b0:88:70:1c:
                    7b:51:a0:f6:64:74:13:5f:00:3b:79:44:64:7c:fb:
                    18:28:f5:41:e9:36:ad:9f:a5:43:1a:71:33:e7:7d:
                    35:df:9a:75:63:ae:9a:78:e4:7e:d5:fe:77:9d:ba:
                    7b:11:d7:3b:9f:be:4a:fe:b2:4c:66:7e:56:1b:47:
                    54:78:83:e7:aa:d9:dd:78:f5:38:33:8f:bf:e1:38:
                    68:c4:ee:a5:76:9d:52:7c:ea:b3:52:40:f2:33:60:
                    45:76:95:65:d3:99:e3:8e:10:5a:95:7b:24:d7:ce:
                    22:57:11:d0:12:56:6f:7d:fa:59:f8:6d:c0:c9:ce:
                    0b:17:cb:d2:93:45:57:7f:0d:99:78:53:a1:65:ea:
                    4e:67:4e:33:73:bf:ef:92:3d:1c:46:6b:26:75:71:
                    9d:17:78:08:b3:94:7d:03:70:23:6b:05:bd:91:ad:
                    ce:ac:3d:61:39:85:0b:09:b4:8a:dd:20:0b:70:24:
                    32:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:22:70:69:99:18:D6:AE:71:EE:D0:0A:19:D2:03:D6:F9:C4:FF:0C
            X509v3 Authority Key Identifier:
                keyid:B9:7D:8F:25:34:56:80:94:49:ED:E5:DC:5C:A2:56:9A:84:E7:83:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uX2PJTRWgJRJ7eXcXKJWmoTng9s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:37:3e:7b:c8:5c:89:ca:bf:25:3e:33:31:de:99:58:80:6a:
         1b:3a:ea:8a:e1:5c:4c:8d:50:f2:6d:bf:d8:3e:cc:81:74:3d:
         b4:19:17:33:e4:ff:c2:e2:62:26:5f:b8:4e:22:89:da:88:e2:
         54:02:56:4a:3b:87:51:df:5c:c8:c7:50:25:8c:6b:1f:41:ee:
         41:84:ea:bb:ce:59:2a:60:39:47:46:50:87:5b:17:19:90:00:
         91:51:64:aa:45:e9:53:0c:94:2e:fd:15:19:03:5b:9e:07:19:
         e7:41:6f:01:45:e4:24:18:cb:a3:23:46:da:f9:33:da:2f:41:
         b9:74:2f:f7:00:c5:71:f7:8d:a0:71:af:89:00:0d:c7:56:b0:
         bf:b2:9f:66:d7:c4:e0:18:d4:ef:fe:a0:07:43:12:2d:db:ae:
         93:78:af:50:c4:b2:52:31:0f:95:97:40:69:37:9f:89:b0:3e:
         64:c9:55:1a:fe:9b:26:e8:f5:30:71:15:7f:3c:ef:2b:ac:f0:
         78:17:2d:c3:82:0d:0d:fb:3b:29:6d:56:b1:c1:29:2e:76:68:
         29:95:93:ac:1b:75:1d:ed:29:d6:8d:bb:4a:80:89:d6:f5:ff:
         62:22:f4:1f:0d:aa:af:d3:d2:3f:00:4e:a2:5e:dc:29:7a:67:
         9c:8b:8d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 03:18:22 2025 by rpki-client