Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3D65/EA1E62D67C7511ED8BE65B38C4F9AE02/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.mft
File:                     UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.mft (raw, json)
Hash identifier:          T8IW1eBe1M3JKxE5nlOuRZOPOya5HuVBusPRk900FHY=
Subject key identifier:   6A:5D:18:F9:3E:D7:79:AB:21:67:89:61:05:DF:40:F3:9F:14:71:75
Authority key identifier: 50:08:BE:04:1F:99:97:B2:59:D2:58:44:83:A5:3A:0D:FF:0B:17:8C
Certificate issuer:       /CN=A91A3D65/serialNumber=5008BE041F9997B259D2584483A53A0DFF0B178C
Certificate serial:       020C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3D65/EA1E62D67C7511ED8BE65B38C4F9AE02/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.mft
Manifest number:          0208
Signing time:             Wed 17 Sep 2025 02:49:12 +0000
Manifest this update:     Wed 17 Sep 2025 02:49:12 +0000
Manifest next update:     Wed 24 Sep 2025 02:49:12 +0000
Files and hashes:         1: UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.crl (hash: P8wzpnxar/JEEK6KFtAd4KQJ0HBPSnpMtinCx+SNknA=)
                          2: 57DD65D0D1FB11EDA0A31C2FC4F9AE02.roa (hash: FNFbf5sb9V0I6f51NgIRl7bd8+WZE2kCB/02TRMhw6k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3D65/EA1E62D67C7511ED8BE65B38C4F9AE02/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.crl
                          rsync://rpki.apnic.net/member_repository/A91A3D65/EA1E62D67C7511ED8BE65B38C4F9AE02/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Sep 2025 02:49:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 524 (0x20c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3D65, serialNumber=5008BE041F9997B259D2584483A53A0DFF0B178C
        Validity
            Not Before: Sep 17 02:49:12 2025 GMT
            Not After : Sep 24 02:49:12 2025 GMT
        Subject: CN=68ca21a8-8def
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c3:d6:ce:5d:44:fd:73:18:ba:66:ae:89:69:
                    64:33:98:c7:74:fa:f3:12:35:6c:c8:51:7e:82:96:
                    a4:24:0d:8e:8c:6b:55:de:3e:01:28:0d:8e:56:2c:
                    64:db:e2:89:1f:f6:72:11:5a:c0:3f:af:21:df:e6:
                    6c:cd:81:8f:5d:b1:88:2f:31:41:ad:b0:5f:4c:cb:
                    8c:8b:4b:c7:d4:2f:24:7e:7b:e7:7a:2d:fd:85:3b:
                    06:51:44:33:48:13:39:ed:a1:cc:b2:7b:60:a3:28:
                    dd:ef:e3:3f:b1:41:f1:d9:e1:62:bb:eb:50:7a:9c:
                    ae:6f:ce:66:ab:73:0a:ad:7c:c6:46:3f:b0:07:fb:
                    22:f5:9f:e1:fb:40:e2:2c:3a:5d:5e:3f:3b:57:d6:
                    94:c8:24:b8:59:36:6e:82:ce:e5:83:e9:bc:2e:fd:
                    c4:63:a2:76:f8:24:7e:4c:f8:65:44:45:19:90:68:
                    7e:e8:14:23:67:73:c4:df:d4:3b:37:2f:c1:59:35:
                    d9:f6:0d:3c:b7:c2:c6:48:22:b4:a1:97:d7:66:85:
                    b3:e6:9a:d4:90:7c:91:4c:9b:ba:ae:04:fd:c8:8d:
                    1a:eb:e0:80:41:b7:7b:87:0e:25:e7:a0:e9:26:7d:
                    05:73:bd:6f:4e:c6:c4:ac:df:99:9f:2f:e6:8a:77:
                    1b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:5D:18:F9:3E:D7:79:AB:21:67:89:61:05:DF:40:F3:9F:14:71:75
            X509v3 Authority Key Identifier:
                keyid:50:08:BE:04:1F:99:97:B2:59:D2:58:44:83:A5:3A:0D:FF:0B:17:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3D65/EA1E62D67C7511ED8BE65B38C4F9AE02/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3D65/EA1E62D67C7511ED8BE65B38C4F9AE02/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:cc:ef:49:82:1f:c8:3a:c3:b1:f3:7d:07:23:d2:25:c9:00:
         4d:88:e9:e0:0d:eb:78:cd:03:fa:21:42:18:78:04:bb:fd:28:
         5e:8b:19:d8:25:0d:a7:e8:6a:d9:79:17:fa:e8:fa:62:de:54:
         52:80:a5:b7:09:a9:36:8a:62:c8:08:4c:26:d7:c0:74:a2:52:
         14:70:ce:54:85:60:dc:87:cb:8b:e3:08:d1:0a:33:b8:84:91:
         00:3c:88:20:00:c5:64:17:ae:36:13:65:2a:15:5a:4d:32:f8:
         e7:9c:22:72:fb:49:93:74:1c:b2:88:92:cb:25:8f:ce:74:9b:
         ab:cb:6c:e2:2e:06:68:af:5d:02:98:7c:9f:b7:a6:62:e4:4d:
         6d:8c:e7:c0:f3:29:94:aa:19:af:62:66:59:37:fd:03:4a:cf:
         15:06:87:d5:f9:2e:f2:d5:33:f8:c3:22:17:d6:e7:9a:76:c7:
         f0:bc:d4:61:e0:83:7c:f4:ae:2d:ef:a7:04:d3:bb:c6:c9:e8:
         0f:60:df:43:ce:a0:98:b3:15:fd:40:ea:e8:38:a6:ef:0f:c3:
         aa:fc:87:de:74:f7:5a:ed:de:1c:da:36:6f:ee:38:c7:78:0e:
         45:23:40:df:11:a6:18:1b:5a:0e:20:3b:b0:f6:94:ed:c0:86:
         a7:e7:eb:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 23:32:42 2025 by rpki-client