Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C832/5B6180601E6111F0934F6F74C4F9AE02/7UHN-Ie33i9cIBvogU8ejfPQIB8.mft
File:                     7UHN-Ie33i9cIBvogU8ejfPQIB8.mft (raw, json)
Hash identifier:          fW8VYyWpgSMwsLtXga9ALevLUP/OhMb0+K4+8MaoHWE=
Subject key identifier:   3E:D5:7E:ED:1E:3C:2B:F0:0D:99:5F:A8:80:C9:0B:29:AB:55:30:05
Authority key identifier: ED:41:CD:F8:87:B7:DE:2F:5C:20:1B:E8:81:4F:1E:8D:F3:D0:20:1F
Certificate issuer:       /CN=A916C832/serialNumber=ED41CDF887B7DE2F5C201BE8814F1E8DF3D0201F
Certificate serial:       4F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7UHN-Ie33i9cIBvogU8ejfPQIB8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C832/5B6180601E6111F0934F6F74C4F9AE02/7UHN-Ie33i9cIBvogU8ejfPQIB8.mft
Manifest number:          4D
Signing time:             Wed 17 Sep 2025 08:03:22 +0000
Manifest this update:     Wed 17 Sep 2025 08:03:22 +0000
Manifest next update:     Wed 24 Sep 2025 08:03:21 +0000
Files and hashes:         1: 7UHN-Ie33i9cIBvogU8ejfPQIB8.crl (hash: 6Ys0Pvqkuj9Ve4B1YQ8jNOj5X32fBrfYSAoKYdxPvlQ=)
                          2: 9C40745A86F911F0AC1F5922C4F9AE02.roa (hash: iXo4kScDCGZMJR2A/670yFNX9nbH7Jj9Oj398RIkzRg=)
                          3: AA3FBE4A1E6111F093F53B75C4F9AE02.roa (hash: LSRr7TMpx9Qi1u09QfccXCZNggaDKCGxTg8r/GddSHQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C832/5B6180601E6111F0934F6F74C4F9AE02/7UHN-Ie33i9cIBvogU8ejfPQIB8.crl
                          rsync://rpki.apnic.net/member_repository/A916C832/5B6180601E6111F0934F6F74C4F9AE02/7UHN-Ie33i9cIBvogU8ejfPQIB8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7UHN-Ie33i9cIBvogU8ejfPQIB8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Sep 2025 08:03:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79 (0x4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C832, serialNumber=ED41CDF887B7DE2F5C201BE8814F1E8DF3D0201F
        Validity
            Not Before: Sep 17 08:03:22 2025 GMT
            Not After : Sep 24 08:03:21 2025 GMT
        Subject: CN=68ca6b4a-f679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:89:0c:5a:53:ab:eb:41:e1:99:9a:a8:5a:77:
                    02:bc:ba:79:d6:bb:7d:f4:a8:d1:ab:b1:4b:ed:73:
                    a2:9a:db:2f:b6:65:e4:34:d1:8a:64:49:2c:a0:cb:
                    f7:d5:e0:42:12:82:11:d0:0a:d3:9c:c3:39:be:f8:
                    f7:47:13:39:88:87:88:1b:5a:79:de:02:d2:22:ac:
                    c4:a3:8f:c3:de:3b:90:78:6a:57:ce:8d:bc:e6:ca:
                    b0:86:3e:cc:95:ed:2b:16:b1:b0:31:4a:c5:cf:5b:
                    ca:6c:34:cf:be:60:e6:84:2f:5a:b4:0b:3f:b4:f1:
                    e4:83:29:c1:14:24:83:c0:b8:a9:00:e9:0e:c2:2f:
                    81:10:64:17:a7:31:57:b6:5c:f4:37:74:b7:04:a6:
                    1d:77:ef:ec:8b:e2:8b:0f:e6:9f:ef:1c:c2:38:9f:
                    fb:cb:54:c3:a0:a1:05:2e:a9:e6:d0:ac:94:07:fa:
                    fa:3f:84:b6:99:5d:c2:a8:3b:c5:97:4b:a7:76:9c:
                    21:b4:ea:f4:ef:73:01:95:41:c2:43:d0:2b:51:2b:
                    33:9b:69:a2:7d:07:96:a5:65:2e:c7:c2:f2:c3:93:
                    87:c8:13:a4:96:23:fa:77:ef:fe:77:9a:e8:5e:fe:
                    9e:b8:eb:7f:8c:d0:22:9a:c3:1c:29:03:38:84:9d:
                    e2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:D5:7E:ED:1E:3C:2B:F0:0D:99:5F:A8:80:C9:0B:29:AB:55:30:05
            X509v3 Authority Key Identifier:
                keyid:ED:41:CD:F8:87:B7:DE:2F:5C:20:1B:E8:81:4F:1E:8D:F3:D0:20:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C832/5B6180601E6111F0934F6F74C4F9AE02/7UHN-Ie33i9cIBvogU8ejfPQIB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7UHN-Ie33i9cIBvogU8ejfPQIB8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C832/5B6180601E6111F0934F6F74C4F9AE02/7UHN-Ie33i9cIBvogU8ejfPQIB8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:60:9c:c6:e2:8f:e3:33:47:0e:62:f2:ac:73:3d:58:e0:fe:
         3d:6b:4b:6b:bd:cc:4c:38:7f:21:24:14:9a:4a:50:d5:34:32:
         f4:e5:cf:bc:8c:32:ef:df:ce:ea:97:1c:fb:04:73:da:4c:e6:
         c4:c8:57:33:c1:a8:ab:17:f3:64:22:2f:a1:bc:11:31:4a:96:
         0d:70:b9:e1:f9:8c:5b:17:64:07:43:ee:84:0c:e2:77:6d:63:
         b1:34:de:c2:20:89:96:f0:57:89:98:e9:c3:86:c8:76:40:5d:
         16:6b:78:8b:31:a6:bc:f7:42:45:97:64:b8:f6:46:66:ee:4a:
         3f:cb:e3:2d:85:81:89:5d:da:23:f4:3b:eb:43:ad:c1:d9:27:
         10:7e:70:ab:e0:e1:04:da:47:a7:4d:f6:1f:43:8a:24:3f:3b:
         11:a5:77:78:1a:bd:1d:77:d5:5a:00:2f:a2:93:31:7a:0a:80:
         ac:c5:8f:b1:3b:f4:16:5a:da:83:86:21:af:96:ce:49:03:26:
         55:b7:4e:ee:57:58:9b:37:e5:fd:14:b4:be:ce:c9:cf:d1:aa:
         ea:e3:0e:df:12:1f:35:26:a2:e8:a8:f5:9a:d6:cc:28:4d:ae:
         26:32:bc:1a:8f:0c:61:0a:66:8d:51:dd:a4:0d:a7:d3:63:81:
         eb:80:45:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 23:11:03 2025 by rpki-client