Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/UOjwS5AI_qHlwx9k52Pa3tJTpgw.mft
File:                     UOjwS5AI_qHlwx9k52Pa3tJTpgw.mft (raw, json)
Hash identifier:          my6+XZN6EFbQv2HPFYJGQOWKxGu0wK3ZWtSToyBRqko=
Subject key identifier:   9F:3A:21:BB:12:8D:56:B5:5C:85:B5:04:D9:6B:D5:1B:AF:13:24:27
Authority key identifier: 50:E8:F0:4B:90:08:FE:A1:E5:C3:1F:64:E7:63:DA:DE:D2:53:A6:0C
Certificate issuer:       /CN=A91A1630/serialNumber=50E8F04B9008FEA1E5C31F64E763DADED253A60C
Certificate serial:       0103
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOjwS5AI_qHlwx9k52Pa3tJTpgw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/UOjwS5AI_qHlwx9k52Pa3tJTpgw.mft
Manifest number:          0100
Signing time:             Fri 19 Sep 2025 05:43:04 +0000
Manifest this update:     Fri 19 Sep 2025 05:43:04 +0000
Manifest next update:     Fri 26 Sep 2025 05:43:04 +0000
Files and hashes:         1: UOjwS5AI_qHlwx9k52Pa3tJTpgw.crl (hash: ny3uPuekvyGzpbzbalCwSvviHhA5KFCF2X32k3A34H0=)
                          2: 18141426114211EFA0FF3956C4F9AE02.roa (hash: Eui373BUJyp7nsyCOnfLERZIVy0mxRMvMhZrx/SFoPE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/UOjwS5AI_qHlwx9k52Pa3tJTpgw.crl
                          rsync://rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/UOjwS5AI_qHlwx9k52Pa3tJTpgw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOjwS5AI_qHlwx9k52Pa3tJTpgw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Sep 2025 04:23:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 259 (0x103)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1630, serialNumber=50E8F04B9008FEA1E5C31F64E763DADED253A60C
        Validity
            Not Before: Sep 19 05:43:04 2025 GMT
            Not After : Sep 26 05:43:04 2025 GMT
        Subject: CN=68cced68-0fcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:21:d7:43:cc:43:83:63:06:56:fb:ab:18:4a:
                    70:d4:06:83:17:11:e8:72:8a:57:49:5d:dc:e1:00:
                    be:88:ca:a8:4a:70:3a:c0:70:47:da:d4:69:40:53:
                    d4:a5:65:95:a5:e1:4a:e4:98:39:6a:64:a2:bb:30:
                    ca:20:6e:02:14:35:05:a0:d3:9a:3b:9e:93:ed:57:
                    eb:77:ed:28:30:74:fa:d2:89:b1:71:6b:5c:29:c6:
                    e5:59:87:24:a9:71:83:25:63:87:d8:e6:af:c8:8c:
                    a0:2c:e2:9e:9a:d6:03:b3:90:c0:a2:aa:55:23:11:
                    f0:17:c8:a5:22:e0:de:8b:29:97:8d:a6:0e:d1:aa:
                    b0:4f:ee:a3:3e:6d:20:c4:d1:d8:8b:a4:a7:3b:40:
                    f8:61:d9:67:66:a5:b7:f0:48:08:d0:34:47:47:29:
                    d1:0b:06:44:0a:b1:0a:a9:5f:bb:f6:37:40:7a:df:
                    90:3b:be:2f:fd:f2:f5:13:08:47:b8:41:58:db:9d:
                    ca:0d:9e:63:59:35:eb:c0:79:aa:d8:35:ef:21:64:
                    26:8c:5a:5b:2c:f4:5a:8f:07:72:c1:61:7f:5a:6f:
                    bd:d1:3a:3c:db:a6:17:1a:d9:ac:09:fb:5e:97:b8:
                    86:08:2c:d2:2c:56:63:34:b3:9a:ff:57:d5:02:09:
                    79:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:3A:21:BB:12:8D:56:B5:5C:85:B5:04:D9:6B:D5:1B:AF:13:24:27
            X509v3 Authority Key Identifier:
                keyid:50:E8:F0:4B:90:08:FE:A1:E5:C3:1F:64:E7:63:DA:DE:D2:53:A6:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/UOjwS5AI_qHlwx9k52Pa3tJTpgw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOjwS5AI_qHlwx9k52Pa3tJTpgw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/UOjwS5AI_qHlwx9k52Pa3tJTpgw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:db:24:4a:36:3a:1a:45:87:c7:00:00:9d:d9:4e:c7:10:e9:
         e8:89:cb:93:9a:a6:8b:f1:9d:70:5c:80:8c:45:6b:9c:47:b2:
         64:48:ec:28:99:19:61:25:9e:62:ff:c2:b8:ee:ca:71:44:3b:
         88:71:c3:4f:4c:7f:79:b4:8c:22:d3:b3:4e:e5:cd:22:6e:46:
         51:52:6d:35:bb:5b:12:cb:25:fc:92:7a:dd:bc:2b:38:75:90:
         39:58:c6:9b:f8:08:43:f6:76:ba:7d:29:ef:79:36:2f:be:ee:
         f3:ac:7f:b3:ae:03:ed:aa:83:30:81:d3:f3:f8:12:94:7c:58:
         88:93:4f:98:c8:c6:11:f0:8c:6c:7e:4b:92:91:40:9b:e0:b1:
         7a:b3:15:1e:a7:b2:9b:3e:1b:22:4d:a9:80:16:61:7a:a1:2c:
         29:7c:13:d0:72:2f:bb:13:ae:8f:33:9a:ed:6b:19:a2:d6:20:
         bd:fb:4e:7a:d4:0a:a6:96:22:94:1a:53:6b:93:ff:9c:c2:cc:
         e2:1b:2d:36:8e:d0:99:db:bf:6d:ba:2e:bb:68:1f:42:97:1c:
         32:a4:a0:dc:50:40:42:f5:76:7d:9a:ee:a3:b0:1a:33:a1:6b:
         f6:0c:9a:69:4d:21:51:77:d3:ad:f1:fd:e5:31:bc:48:b9:be:
         da:37:da:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 07:08:43 2025 by rpki-client