Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140467/9AA980D6F1E011EA8D4A9E32C4F9AE02/uMMvxNeTGtQkFAcwaguZasjJn-s.mft
File:                     uMMvxNeTGtQkFAcwaguZasjJn-s.mft (raw, json)
Hash identifier:          WfGcKvNy/+o8nsavcl023sHwBaMAFmAkclnfmp3oUWQ=
Subject key identifier:   71:76:78:B3:61:A2:17:07:FA:E4:2D:78:E6:0E:18:BA:09:FB:44:F9
Authority key identifier: B8:C3:2F:C4:D7:93:1A:D4:24:14:07:30:6A:0B:99:6A:C8:C9:9F:EB
Certificate issuer:       /CN=A9140467/serialNumber=B8C32FC4D7931AD4241407306A0B996AC8C99FEB
Certificate serial:       0822
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uMMvxNeTGtQkFAcwaguZasjJn-s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140467/9AA980D6F1E011EA8D4A9E32C4F9AE02/uMMvxNeTGtQkFAcwaguZasjJn-s.mft
Manifest number:          0815
Signing time:             Thu 18 Sep 2025 21:10:44 +0000
Manifest this update:     Thu 18 Sep 2025 21:10:44 +0000
Manifest next update:     Thu 25 Sep 2025 21:10:44 +0000
Files and hashes:         1: uMMvxNeTGtQkFAcwaguZasjJn-s.crl (hash: AW2ToMdKGcYriQ4YPJ+GHZa1dT1WajzLi8DTz830X3k=)
                          2: 02E60C72F1E211EAA2361B34C4F9AE02.roa (hash: af5uMeHzt9MTz6ZREM+PIjD4gLSqGSG2u3tqcHLex6c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140467/9AA980D6F1E011EA8D4A9E32C4F9AE02/uMMvxNeTGtQkFAcwaguZasjJn-s.crl
                          rsync://rpki.apnic.net/member_repository/A9140467/9AA980D6F1E011EA8D4A9E32C4F9AE02/uMMvxNeTGtQkFAcwaguZasjJn-s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uMMvxNeTGtQkFAcwaguZasjJn-s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Sep 2025 21:10:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2082 (0x822)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140467, serialNumber=B8C32FC4D7931AD4241407306A0B996AC8C99FEB
        Validity
            Not Before: Sep 18 21:10:44 2025 GMT
            Not After : Sep 25 21:10:44 2025 GMT
        Subject: CN=68cc7554-5391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9d:8f:07:a7:4e:0f:82:be:53:1f:73:62:9b:
                    0d:05:63:68:fa:8c:ee:a8:d1:e9:43:46:7d:46:6d:
                    b9:18:fd:a4:78:fa:d1:f5:a6:fa:66:f3:ec:e7:3c:
                    06:b4:32:d5:2d:f9:30:a8:9e:ee:7e:46:e0:f5:79:
                    d8:42:72:e0:ce:d0:27:59:fe:86:c6:60:c9:04:64:
                    81:2d:75:22:19:14:9c:ee:cc:b1:b2:56:90:47:c0:
                    db:c3:79:24:ce:77:00:d6:31:a4:85:07:e8:51:8f:
                    f6:80:4b:c8:20:72:44:09:9b:79:6d:06:a2:09:00:
                    17:a6:1e:35:c8:a0:71:1a:56:b6:7c:6b:0a:85:1a:
                    f5:87:12:27:ff:1e:36:73:15:87:d2:08:59:67:61:
                    d7:98:9d:0f:e8:06:c0:b9:20:c3:66:65:f6:78:97:
                    ee:93:88:de:b9:85:65:a5:ed:82:4c:8c:b0:e4:ed:
                    ae:7c:a1:05:ef:f8:41:4a:6a:bc:1e:4b:59:4c:b8:
                    e5:34:76:fd:5b:dd:95:b3:da:b0:06:d1:9e:49:16:
                    eb:05:db:28:84:93:e8:ff:06:d7:b4:c4:a0:f6:3f:
                    c2:22:65:5d:d1:b1:04:a6:90:9a:48:d3:0f:eb:95:
                    9b:8c:87:09:c1:38:8c:49:a6:8d:33:2e:aa:39:56:
                    cd:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:76:78:B3:61:A2:17:07:FA:E4:2D:78:E6:0E:18:BA:09:FB:44:F9
            X509v3 Authority Key Identifier:
                keyid:B8:C3:2F:C4:D7:93:1A:D4:24:14:07:30:6A:0B:99:6A:C8:C9:9F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140467/9AA980D6F1E011EA8D4A9E32C4F9AE02/uMMvxNeTGtQkFAcwaguZasjJn-s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uMMvxNeTGtQkFAcwaguZasjJn-s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140467/9AA980D6F1E011EA8D4A9E32C4F9AE02/uMMvxNeTGtQkFAcwaguZasjJn-s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:74:ac:02:7e:a7:aa:bc:5f:d9:96:ce:5b:91:6a:34:20:8c:
         9a:d3:e2:e3:f2:92:de:e3:71:e5:78:54:2c:fe:a1:2d:69:ea:
         bf:27:a1:67:3b:97:32:55:a0:15:d5:2d:de:54:58:96:f0:e7:
         34:e6:9e:86:10:32:d6:d9:aa:32:ba:10:4b:9e:f0:26:56:5b:
         41:85:17:24:4e:36:05:7f:e7:4c:05:54:b5:44:ed:29:03:87:
         a0:a6:c4:9b:88:5b:b9:17:c4:37:36:6e:18:10:c7:e8:18:e5:
         ef:88:af:ee:43:08:cc:23:96:82:04:23:0b:3a:2b:f5:2b:0e:
         00:8c:3e:06:df:26:c1:1e:82:d8:9f:ff:11:4c:9a:9c:c1:b2:
         0c:1a:46:b1:d6:b9:0a:9c:9c:8c:07:30:03:4b:1a:df:87:44:
         32:70:46:97:48:34:20:99:48:5e:52:e4:ca:f8:bd:b6:66:1d:
         ff:70:dc:36:89:22:96:dc:fc:74:68:b0:86:b5:cd:0b:20:24:
         01:79:4e:5d:4a:42:e8:e7:ed:90:2d:55:3b:b3:0e:a0:b9:0e:
         93:32:9d:6a:0f:fb:f2:52:8a:74:1b:ce:e9:00:cb:5c:b5:ad:
         8c:96:8d:14:fb:af:3b:d4:8f:a0:24:bd:48:3c:df:18:28:5b:
         ec:79:20:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 08:10:15 2025 by rpki-client