Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.mft
File:                     uBXPhQU2i6f5dnTpuxoUAJW0_5s.mft (raw, json)
Hash identifier:          McaAWckMugS4PH9UZhW+wMPF0oMmEO4ors62JsFgTog=
Subject key identifier:   7D:A5:64:C8:B1:76:CC:3E:D8:40:6A:7B:79:35:E7:B2:6A:CA:E4:6E
Authority key identifier: B8:15:CF:85:05:36:8B:A7:F9:76:74:E9:BB:1A:14:00:95:B4:FF:9B
Certificate issuer:       /CN=A919D88F/serialNumber=B815CF8505368BA7F97674E9BB1A140095B4FF9B
Certificate serial:       A9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uBXPhQU2i6f5dnTpuxoUAJW0_5s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.mft
Manifest number:          A7
Signing time:             Fri 05 Sep 2025 06:40:16 +0000
Manifest this update:     Fri 05 Sep 2025 06:40:15 +0000
Manifest next update:     Fri 12 Sep 2025 06:40:15 +0000
Files and hashes:         1: uBXPhQU2i6f5dnTpuxoUAJW0_5s.crl (hash: mGeMXJqQkjJoPWjCP7QdvsOM4D+UaVCLWLBjs5AVF+E=)
                          2: 17613044905F11EF8B4BC46BC4F9AE02.roa (hash: NvjP/LYwW9l6MqSSpH5THMx2WmCXtMYC8PmhjmLmzIg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.crl
                          rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uBXPhQU2i6f5dnTpuxoUAJW0_5s.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Sep 2025 06:40:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169 (0xa9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D88F, serialNumber=B815CF8505368BA7F97674E9BB1A140095B4FF9B
        Validity
            Not Before: Sep  5 06:40:15 2025 GMT
            Not After : Sep 12 06:40:15 2025 GMT
        Subject: CN=68ba85d0-0cbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e5:c7:b8:12:9e:6a:b3:59:4a:79:d4:7e:bd:
                    52:9e:95:bb:98:4f:d9:a6:28:2f:1a:b3:2b:9c:dd:
                    f0:0d:a8:76:bd:ad:e0:ec:1a:a4:a6:28:5c:f1:b3:
                    91:1b:2f:36:6c:9b:e2:08:90:d4:53:f1:38:7d:e2:
                    59:58:5e:9d:a2:3d:95:2f:10:d3:ef:52:4d:57:93:
                    b7:31:76:e1:7d:3f:fe:33:c4:2b:c7:aa:72:7b:bf:
                    7f:45:1a:82:ad:3c:07:03:63:ae:25:f7:5b:b3:17:
                    91:5d:f8:74:4f:08:7e:3c:0f:b8:d1:27:00:7d:a0:
                    87:f5:07:24:99:d0:ed:66:aa:f0:ce:93:a3:8d:f6:
                    73:da:67:fd:7e:e0:68:8a:cb:de:41:6a:d9:82:e6:
                    50:51:fe:5f:05:39:ab:d9:f7:57:d8:2d:cd:84:e4:
                    da:9e:99:67:66:95:8c:90:93:a6:82:96:11:d5:e6:
                    bc:d7:8c:de:33:57:93:81:a1:b7:e3:ff:7a:89:8a:
                    4a:da:be:ac:ad:62:25:92:93:fc:db:9e:0f:0f:71:
                    af:8d:99:0e:b4:6d:42:6a:f1:47:2f:40:03:3d:fd:
                    52:5f:8c:5b:f4:a9:cd:d3:16:d5:a6:82:fd:a5:0a:
                    17:4f:52:a2:1e:4a:cb:9b:c3:c6:41:72:50:13:8a:
                    e1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:A5:64:C8:B1:76:CC:3E:D8:40:6A:7B:79:35:E7:B2:6A:CA:E4:6E
            X509v3 Authority Key Identifier:
                keyid:B8:15:CF:85:05:36:8B:A7:F9:76:74:E9:BB:1A:14:00:95:B4:FF:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uBXPhQU2i6f5dnTpuxoUAJW0_5s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:7d:79:d2:ab:7b:0a:c5:ab:d8:69:7e:43:ab:dc:45:cc:72:
         f4:6b:4a:15:b8:d5:51:00:c7:af:89:4d:b4:88:04:cc:6c:19:
         7f:df:6b:56:e4:df:3f:65:5a:1d:d6:b2:68:92:72:22:09:74:
         a5:a7:b8:98:3c:8b:c2:ea:df:cd:bd:be:e8:4b:76:2c:58:a0:
         aa:ff:ac:17:06:47:c7:68:0e:f9:7d:27:7f:91:71:b4:35:45:
         1c:16:53:d8:ea:24:f8:2e:a2:92:37:81:aa:25:2f:43:de:c8:
         80:f9:b2:83:46:88:2a:bc:f4:8a:33:a3:8d:0f:9b:1e:d9:95:
         08:29:46:84:56:e5:49:4a:b6:fe:35:a0:45:d2:7e:dd:8e:ea:
         84:76:3d:ac:19:78:28:c6:e1:3b:bf:f9:45:1b:c3:20:19:71:
         3d:c7:8d:4f:e2:89:dc:22:06:10:47:84:9b:c4:77:ef:eb:21:
         e0:8f:0b:48:7a:bc:24:97:5d:44:fe:7f:56:4e:bc:6c:2e:6f:
         d1:2f:3a:71:91:11:2d:1c:31:cd:c6:b0:6f:86:13:93:73:58:
         81:9a:85:2d:0a:25:ff:e3:d7:fa:4c:99:68:18:ea:e8:c3:35:
         81:e0:14:74:44:25:70:ab:c5:cf:39:90:9a:af:c6:51:08:5d:
         9b:5a:89:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 21:10:58 2025 by rpki-client