Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.mft
File:                     u6lOqRCj8jLfn98s1OOiejSZa3A.mft (raw, json)
Hash identifier:          Bg7xPq53v/FRdJk+iW8wvQ3fAHT+jk+s302kOdQ4Oao=
Subject key identifier:   7C:74:F1:44:25:77:43:54:E3:B1:74:33:EF:AF:B5:6F:4F:3D:1F:8F
Authority key identifier: BB:A9:4E:A9:10:A3:F2:32:DF:9F:DF:2C:D4:E3:A2:7A:34:99:6B:70
Certificate issuer:       /CN=A917BEB0/serialNumber=BBA94EA910A3F232DF9FDF2CD4E3A27A34996B70
Certificate serial:       046F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6lOqRCj8jLfn98s1OOiejSZa3A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.mft
Manifest number:          046B
Signing time:             Fri 19 Sep 2025 00:32:44 +0000
Manifest this update:     Fri 19 Sep 2025 00:32:44 +0000
Manifest next update:     Fri 26 Sep 2025 00:32:44 +0000
Files and hashes:         1: u6lOqRCj8jLfn98s1OOiejSZa3A.crl (hash: yRk5t7LLNfcFsGkHhW8zv7R2de32hQMWQB4lPYmRsYI=)
                          2: 4AEAB70C615D11ECAC75D44DC4F9AE02.roa (hash: WnBbCr/LbqKLlPeho3+8ztfmsdCgc5oHEWwkG3+ywSQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.crl
                          rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6lOqRCj8jLfn98s1OOiejSZa3A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Sep 2025 00:32:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1135 (0x46f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917BEB0, serialNumber=BBA94EA910A3F232DF9FDF2CD4E3A27A34996B70
        Validity
            Not Before: Sep 19 00:32:44 2025 GMT
            Not After : Sep 26 00:32:44 2025 GMT
        Subject: CN=68cca4ac-d6d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d9:38:27:f1:19:98:9a:ea:f0:11:3c:41:82:
                    ae:35:11:1e:c0:02:c4:74:b7:3d:dc:d8:98:b7:c3:
                    a2:d4:aa:92:20:55:40:42:32:02:1c:5b:32:82:c3:
                    03:42:97:d4:22:73:51:8f:7f:ee:f0:0d:d9:03:05:
                    db:e5:62:61:72:2c:8f:8d:b9:2e:e7:9c:10:3f:ba:
                    38:30:59:f0:bd:9f:60:be:b5:a0:d9:eb:50:16:67:
                    48:91:b8:09:1b:2b:c7:61:7c:24:65:ab:07:7f:e1:
                    8b:07:4a:04:64:07:31:8e:11:59:ec:bf:ec:af:ae:
                    61:46:0b:0a:fe:63:d8:1c:e9:ea:bc:5d:55:59:d1:
                    c2:fe:36:54:37:b4:1c:93:93:7e:db:6e:de:c6:3b:
                    9c:56:3a:0d:95:fc:eb:e5:72:f5:da:46:42:68:13:
                    ab:79:30:60:38:e5:fd:d2:2f:19:86:78:e2:35:f3:
                    74:f8:cb:3f:38:10:6d:b2:e8:02:b7:23:76:92:97:
                    bb:e8:1d:d5:83:fe:b5:e7:1b:48:63:5b:f6:94:ce:
                    1d:60:1c:fe:fa:d1:3e:79:82:fc:9a:5b:a2:70:fa:
                    24:c8:59:1c:97:09:d4:ab:0c:52:59:03:bb:7b:ee:
                    cd:ea:74:1e:26:b1:2d:88:ad:97:b1:5f:21:b0:71:
                    6d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:74:F1:44:25:77:43:54:E3:B1:74:33:EF:AF:B5:6F:4F:3D:1F:8F
            X509v3 Authority Key Identifier:
                keyid:BB:A9:4E:A9:10:A3:F2:32:DF:9F:DF:2C:D4:E3:A2:7A:34:99:6B:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6lOqRCj8jLfn98s1OOiejSZa3A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:cc:ee:df:f9:8a:c7:64:76:ce:85:c2:a4:c8:f1:95:de:da:
         29:b3:92:4c:c1:c1:c2:49:5d:4a:af:e8:fb:58:d8:77:2b:37:
         19:c4:78:cd:ad:eb:8b:9a:11:bb:04:50:e2:74:4e:55:4b:8b:
         dd:d7:05:ee:07:d3:a2:a1:09:1e:b5:07:f5:03:2a:7c:a9:cb:
         06:df:10:4e:72:50:11:aa:fe:6d:51:29:34:e4:5f:1b:d0:ee:
         2f:b9:5e:18:b3:44:13:d9:c3:02:27:3b:b8:59:49:0c:49:6c:
         86:a6:9a:4a:ac:01:60:e7:14:7f:56:9f:8c:92:8b:bc:d1:73:
         7b:fd:eb:e7:4d:70:8d:68:bf:08:fa:78:49:5b:0e:7a:99:63:
         5a:03:5f:a8:3c:b3:8b:5e:ef:bb:87:36:72:6d:cc:1b:21:70:
         7b:eb:91:30:73:0b:2f:a3:f1:46:11:2e:63:d3:6a:b7:7c:22:
         8c:1d:dc:b8:97:9d:37:74:79:4b:b9:a5:75:1c:ea:b9:b3:e0:
         a6:f8:cb:99:46:fd:a7:24:6d:af:db:12:39:7a:34:8f:7e:bc:
         7a:05:9f:3f:bf:86:1a:fc:ec:e7:4e:07:6e:09:96:e3:4b:7d:
         5e:f5:7d:0e:e3:3e:08:e1:e4:7c:05:47:90:12:93:14:59:85:
         06:e6:f5:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 09:26:19 2025 by rpki-client