Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913128C/92E2C4F88C6711EBA61A8A3EC4F9AE02/FBAoBRhwNkvROcYLViy6pHv_uds.mft
File:                     FBAoBRhwNkvROcYLViy6pHv_uds.mft (raw, json)
Hash identifier:          JkMcpaHvHYZeSaQ+KBp2KVWnZBBBTnReYeR57qIENDI=
Subject key identifier:   98:3E:EB:FB:D9:0D:C5:A7:81:B8:81:F3:5C:63:BC:64:21:6A:1D:47
Authority key identifier: 14:10:28:05:18:70:36:4B:D1:39:C6:0B:56:2C:BA:A4:7B:FF:B9:DB
Certificate issuer:       /CN=A913128C/serialNumber=141028051870364BD139C60B562CBAA47BFFB9DB
Certificate serial:       068E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FBAoBRhwNkvROcYLViy6pHv_uds.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913128C/92E2C4F88C6711EBA61A8A3EC4F9AE02/FBAoBRhwNkvROcYLViy6pHv_uds.mft
Manifest number:          0686
Signing time:             Tue 16 Sep 2025 22:42:41 +0000
Manifest this update:     Tue 16 Sep 2025 22:42:40 +0000
Manifest next update:     Tue 23 Sep 2025 22:42:40 +0000
Files and hashes:         1: FBAoBRhwNkvROcYLViy6pHv_uds.crl (hash: EUQr/KSoKcz9gYGHKSAw6UF4ZXk9pNGW7yRchuehe4g=)
                          2: 60165986470411EEBA7DD741C4F9AE02.roa (hash: OvT5NmIhVWlJe3muP+yN4/Xey5OJcAsaIH0DIWhP1OE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913128C/92E2C4F88C6711EBA61A8A3EC4F9AE02/FBAoBRhwNkvROcYLViy6pHv_uds.crl
                          rsync://rpki.apnic.net/member_repository/A913128C/92E2C4F88C6711EBA61A8A3EC4F9AE02/FBAoBRhwNkvROcYLViy6pHv_uds.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FBAoBRhwNkvROcYLViy6pHv_uds.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 23 Sep 2025 22:42:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1678 (0x68e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913128C, serialNumber=141028051870364BD139C60B562CBAA47BFFB9DB
        Validity
            Not Before: Sep 16 22:42:40 2025 GMT
            Not After : Sep 23 22:42:40 2025 GMT
        Subject: CN=68c9e7e0-7bd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:51:73:b1:d3:cf:1c:18:51:b2:8e:62:9b:ec:
                    44:da:9e:e0:80:1c:69:01:9d:25:24:10:7e:6d:aa:
                    bc:51:8e:58:27:1d:64:0b:b6:ee:9f:96:4b:9c:d0:
                    13:3d:4f:6a:d0:09:d3:d6:06:20:70:12:dd:db:0c:
                    5c:fd:35:35:3a:73:80:21:25:5f:c3:08:d2:45:01:
                    02:62:e7:d4:7d:ae:9c:61:4a:22:ea:19:d3:d5:09:
                    4f:46:39:c0:2a:27:6a:80:c3:40:cf:42:33:40:90:
                    6a:5a:fe:52:0c:36:65:17:00:51:ce:bc:17:fe:4d:
                    98:0c:8d:81:85:1f:37:1e:a8:74:e0:45:08:65:e4:
                    ab:75:de:72:90:66:d1:c4:d2:bb:97:3e:30:f7:4c:
                    61:e4:10:04:64:3a:61:90:8a:08:b3:b9:e8:bb:4b:
                    48:e6:8c:26:bb:a2:9f:5b:1a:34:39:a6:27:cd:23:
                    ea:56:81:98:54:5b:49:c0:a4:b3:77:b7:5d:09:ea:
                    60:2c:4b:91:45:d1:1a:7a:a5:33:22:04:44:de:e8:
                    38:a0:b0:f6:fe:c8:9a:42:20:70:0e:96:49:a5:a3:
                    75:0a:5d:bc:77:a6:25:1a:47:26:f1:91:50:54:45:
                    90:c5:78:dd:4d:be:16:9a:23:0b:33:80:1d:1c:03:
                    35:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:3E:EB:FB:D9:0D:C5:A7:81:B8:81:F3:5C:63:BC:64:21:6A:1D:47
            X509v3 Authority Key Identifier:
                keyid:14:10:28:05:18:70:36:4B:D1:39:C6:0B:56:2C:BA:A4:7B:FF:B9:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913128C/92E2C4F88C6711EBA61A8A3EC4F9AE02/FBAoBRhwNkvROcYLViy6pHv_uds.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FBAoBRhwNkvROcYLViy6pHv_uds.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913128C/92E2C4F88C6711EBA61A8A3EC4F9AE02/FBAoBRhwNkvROcYLViy6pHv_uds.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:82:7d:56:70:4e:9b:b0:9a:4d:c5:ac:5f:23:96:25:37:ba:
         1d:73:65:ab:66:cf:d0:2c:7e:c2:16:2e:04:b8:4b:cc:3e:90:
         2b:96:f5:2e:4e:60:9e:f3:f0:41:a1:98:7d:46:1d:bf:4f:6b:
         2d:cf:67:00:c3:eb:c7:ed:a7:ff:f7:bd:d5:8c:7e:7d:70:53:
         f0:ef:f9:13:63:bb:e7:e4:89:51:8c:57:72:89:62:09:de:65:
         67:35:6c:30:f6:df:08:f1:a1:47:35:48:f4:6f:54:db:2f:a2:
         83:2e:54:7c:23:e1:3e:e5:04:e5:d0:3f:fb:4e:73:51:11:10:
         03:7d:2d:a5:44:3c:b0:44:62:5d:41:d1:f9:57:24:cc:be:d4:
         28:39:69:00:5d:c1:a9:dc:85:e1:1b:3c:12:d7:b8:a6:4a:3b:
         28:2c:db:8c:06:22:9c:5d:d4:33:55:45:d4:24:44:48:b4:1d:
         c8:5b:93:43:44:94:07:a9:b4:6b:a9:84:78:1f:b8:a5:4a:ff:
         3e:6c:48:01:af:dd:5b:1c:66:9e:69:f0:e3:20:8f:f3:73:7a:
         7c:01:48:b5:d1:8a:0e:c4:91:c2:d6:51:8c:27:30:24:6f:56:
         f1:95:87:40:20:56:f9:1e:8e:05:c9:43:f6:a9:d2:ca:7b:44:
         81:62:55:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 23:49:36 2025 by rpki-client