Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.mft
File:                     uwO40kR--BOjepWHdmoB9zWd10A.mft (raw, json)
Hash identifier:          9ShtW+PihNj0CcNY5VupNyMWr6OuASum6Gj8iqvgA9o=
Subject key identifier:   19:62:BB:1C:1F:B9:F8:A4:2D:E4:98:BC:0B:BF:C0:24:EC:7F:39:D8
Authority key identifier: BB:03:B8:D2:44:7E:F8:13:A3:7A:95:87:76:6A:01:F7:35:9D:D7:40
Certificate issuer:       /CN=A91D2779/serialNumber=BB03B8D2447EF813A37A9587766A01F7359DD740
Certificate serial:       07D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwO40kR--BOjepWHdmoB9zWd10A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.mft
Manifest number:          07B1
Signing time:             Thu 04 Sep 2025 21:37:29 +0000
Manifest this update:     Thu 04 Sep 2025 21:37:29 +0000
Manifest next update:     Thu 11 Sep 2025 21:37:29 +0000
Files and hashes:         1: uwO40kR--BOjepWHdmoB9zWd10A.crl (hash: j+nsWDaloiz/Q3DI8/GkQsU5d7p63t3XR4dURf/WgEc=)
                          2: 33284BD019C311EBB9C1D063C4F9AE02.roa (hash: TqtodbfH2773RSeSZS8HBt7Fg3MhzGZkdJHAeKBdxNI=)
                          3: 99DF3B20183A11EBB9F78E80C4F9AE02.roa (hash: E+nOxjyrsiWeh2pSdTI7eBtCxdY2UG5bXebW7kl/SNQ=)
                          4: 991F1FE8183A11EBB9F78E80C4F9AE02.roa (hash: WdQW9sjBymvB0klEN4W168ArFaUHAakmSi85CGroy+U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.crl
                          rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwO40kR--BOjepWHdmoB9zWd10A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Sep 2025 21:37:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2000 (0x7d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D2779, serialNumber=BB03B8D2447EF813A37A9587766A01F7359DD740
        Validity
            Not Before: Sep  4 21:37:29 2025 GMT
            Not After : Sep 11 21:37:29 2025 GMT
        Subject: CN=68ba0699-dd04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b5:6c:4a:58:0c:ed:09:44:50:e6:87:21:9e:
                    6d:2e:c8:44:5d:5f:f0:38:25:21:16:8f:0d:64:a8:
                    b0:c2:5b:b6:32:28:6a:79:3e:e0:63:3d:22:41:20:
                    d5:15:8b:19:75:4e:76:68:39:2b:ef:40:40:b8:b8:
                    4f:c4:53:53:26:b0:7d:6a:60:25:24:e8:5e:54:97:
                    f4:b9:c0:3c:2d:53:6a:6e:b2:ce:77:a8:73:20:28:
                    18:52:1f:49:1c:a6:ed:93:fa:31:81:6f:1e:86:29:
                    32:01:10:75:11:36:42:d9:6c:ac:d7:f9:45:8a:4e:
                    75:ff:20:e0:7d:ab:2b:14:03:b2:80:11:4f:6b:dd:
                    ab:05:97:8b:87:c7:e9:44:c4:6e:c2:a2:e4:0c:5c:
                    e9:da:07:83:25:2f:98:1e:a2:54:40:d4:e5:b2:56:
                    70:af:29:46:0c:7c:b5:f6:e7:51:0c:cb:27:fc:1c:
                    f5:09:48:82:49:b4:4a:aa:7b:a4:77:e5:fc:88:c0:
                    d6:64:01:f5:6f:6e:e0:9d:73:58:c1:13:76:91:95:
                    b0:36:da:af:24:b4:3c:1e:e1:a5:57:5f:8f:74:3a:
                    6d:f1:23:d1:ce:db:d8:4b:30:50:a7:e5:59:eb:78:
                    37:15:17:8d:db:ce:89:bc:2a:0f:c8:4c:e8:f6:07:
                    c2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:62:BB:1C:1F:B9:F8:A4:2D:E4:98:BC:0B:BF:C0:24:EC:7F:39:D8
            X509v3 Authority Key Identifier:
                keyid:BB:03:B8:D2:44:7E:F8:13:A3:7A:95:87:76:6A:01:F7:35:9D:D7:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwO40kR--BOjepWHdmoB9zWd10A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:a7:2d:a5:bc:d9:9a:93:0d:46:b7:54:6c:52:2a:ec:a6:25:
         db:d1:00:f3:9e:d5:00:da:65:e7:de:63:ef:a1:c9:12:23:5a:
         86:3d:f6:81:02:e1:3c:37:81:19:e9:f1:02:32:e2:b6:e2:f3:
         20:81:64:6b:97:c5:dc:ad:80:76:e2:05:b4:7d:c1:16:b7:10:
         60:97:c4:47:64:25:b7:e9:a7:82:c3:47:d2:00:bf:ab:81:ef:
         80:52:80:0d:ab:8c:c2:ed:33:1c:dc:e5:96:ee:2e:ae:8f:c2:
         42:d0:dc:94:d3:5a:3e:92:24:06:b6:91:db:66:14:54:43:b9:
         5f:22:86:f3:6e:57:ea:b9:c6:f2:36:19:50:7a:45:3d:bd:48:
         ae:f8:cc:a6:65:3d:ad:d6:e9:3a:45:1b:79:eb:aa:51:39:57:
         a9:f2:cf:da:5a:b3:0d:e4:7f:99:20:20:f1:37:a7:ea:ae:b6:
         4d:64:84:47:f2:ec:c9:62:a8:20:ce:ce:53:b1:b5:b6:db:2d:
         a6:b1:d8:ac:44:a9:00:5c:3f:00:7f:99:84:16:56:4d:dd:2a:
         6e:ec:9d:a9:03:c0:52:67:8f:80:59:37:b0:95:58:4a:f6:c5:
         77:de:74:e1:1a:ae:6c:25:a0:65:64:56:dc:03:b1:1c:e3:ac:
         8c:5c:9a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 08:15:09 2025 by rpki-client