Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft
File:                     uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft (raw, json)
Hash identifier:          FQQINeYzTzJtqFGDs0PxfaQKsYTke2kOTz2ZLzgJa20=
Subject key identifier:   20:27:E2:9D:A2:4B:5A:5C:85:7D:3F:13:46:3D:3D:49:E1:32:80:21
Authority key identifier: B8:89:11:17:80:68:D5:75:DF:DD:F8:49:40:CA:BE:AF:45:1C:8C:2B
Certificate issuer:       /CN=A91B4DC7/serialNumber=B88911178068D575DFDDF84940CABEAF451C8C2B
Certificate serial:       0394
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft
Manifest number:          0385
Signing time:             Tue 09 Sep 2025 00:56:30 +0000
Manifest this update:     Tue 09 Sep 2025 00:56:30 +0000
Manifest next update:     Tue 16 Sep 2025 00:56:30 +0000
Files and hashes:         1: uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl (hash: Y8ANPAjAdx48NRWJTYUAuBMQ3VNGQP8D1a33tf+KAKg=)
                          2: F8400A20C80811ED9ADBA05EC4F9AE02.roa (hash: F6jPBh9YlNU7RVZYywXLeNlWgnFuc8x8f5OICDCdyXk=)
                          3: A6168350176711EFA13E2C6DC4F9AE02.roa (hash: 2CbWH78pD8qfhUqfDIT0bY8YAkS+SCmh9qliGFNOvyU=)
                          4: 9ABED502176711EFA0260C6DC4F9AE02.roa (hash: vsntEPAhq1q52SAuxi87DOT8T6ZFM5p3hlzlxYIzgx0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl
                          rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Sep 2025 00:56:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 916 (0x394)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B4DC7, serialNumber=B88911178068D575DFDDF84940CABEAF451C8C2B
        Validity
            Not Before: Sep  9 00:56:30 2025 GMT
            Not After : Sep 16 00:56:30 2025 GMT
        Subject: CN=68bf7b3e-9903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0c:ea:4c:ae:3d:af:00:9e:5f:c7:87:76:d1:
                    ca:8a:fb:7e:c1:2e:25:8f:4d:7a:03:70:64:ec:69:
                    73:48:10:1d:74:10:c2:ae:17:7e:10:95:3f:6c:fc:
                    57:14:b5:15:3f:00:9c:db:28:bf:78:16:9b:8e:96:
                    ba:73:95:30:e5:3f:8f:1e:f4:80:1b:bb:34:6a:b1:
                    1a:ae:0e:a4:94:23:fe:98:52:ba:61:bf:61:a5:95:
                    80:c5:fb:4f:3b:fd:35:00:22:ae:74:67:4e:41:1f:
                    96:de:3d:fd:58:c5:4b:2f:9a:e7:c4:6a:95:63:62:
                    a6:62:a5:a3:e3:07:3c:6d:ac:04:74:60:1a:15:6d:
                    46:0c:c9:57:29:92:27:b6:a3:f3:ac:90:ca:b8:1b:
                    6c:1f:77:9c:ce:a6:2a:08:08:8a:73:ee:05:2d:ee:
                    98:bd:96:c3:78:26:78:37:8c:f4:cf:a5:54:ea:60:
                    95:c7:a8:d5:d5:32:4f:62:87:4c:c2:98:60:21:f8:
                    63:02:30:8c:40:4e:dd:79:e6:04:ff:44:6b:33:3f:
                    06:5b:44:d8:09:b7:85:2e:c1:e7:ed:51:7b:59:98:
                    d5:05:fd:23:0d:8a:69:ed:10:07:ab:d6:b7:8c:8d:
                    0c:1f:91:18:ef:92:15:e4:80:61:a9:02:7c:97:05:
                    53:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:27:E2:9D:A2:4B:5A:5C:85:7D:3F:13:46:3D:3D:49:E1:32:80:21
            X509v3 Authority Key Identifier:
                keyid:B8:89:11:17:80:68:D5:75:DF:DD:F8:49:40:CA:BE:AF:45:1C:8C:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:99:f2:33:e2:32:e7:52:a7:45:c5:21:2a:92:0d:11:f4:fc:
         7f:d3:04:0e:74:41:1d:c8:1d:2e:ab:eb:60:f1:ad:13:e8:ed:
         68:e4:42:c1:9c:1d:d6:4b:d9:be:ab:ed:f7:d7:ef:8f:de:fc:
         f1:11:aa:57:8b:9d:5c:cd:e2:41:b1:e9:03:1f:94:ff:ee:ab:
         12:d9:e9:a3:98:85:c5:98:37:a1:89:6d:86:36:4f:4b:6f:1c:
         b7:ea:f1:da:a9:c8:de:5f:57:27:85:75:91:ad:54:02:13:ba:
         44:ea:6e:a2:20:87:03:ee:c6:a3:2d:7f:09:ae:19:f5:0f:a8:
         b1:c3:27:65:94:48:a3:af:4b:1c:44:4e:cb:af:4d:3f:f9:4f:
         15:06:f3:1c:79:60:0d:86:38:af:f4:b9:63:51:2e:4a:7c:fb:
         b9:0d:ed:9b:fa:69:e5:f5:9f:d0:49:2d:dc:c6:23:d1:82:eb:
         25:aa:33:40:25:c2:51:2f:fe:e2:4e:e9:96:fa:80:c7:60:d9:
         df:6b:3d:c7:0e:d5:66:7f:43:99:52:50:d6:1e:39:55:21:05:
         89:4e:ac:c4:a8:d2:29:cd:dd:78:46:4e:92:3a:83:3a:e2:50:
         a2:74:24:1e:b1:4f:37:a3:2e:56:e1:f3:96:f3:23:38:9e:4b:
         c0:f8:4a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 17:52:58 2025 by rpki-client