Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.mft
File:                     u9Lp2RPGRcigUZJHTP-olruaTqY.mft (raw, json)
Hash identifier:          LRytvMeuR4x/J6Vt2vxLaF1rvLJQJJrdhVG9eESbRVI=
Subject key identifier:   69:9B:B1:DE:13:EF:03:DF:B6:15:7A:72:4C:F9:37:5D:C8:A2:4D:6B
Authority key identifier: BB:D2:E9:D9:13:C6:45:C8:A0:51:92:47:4C:FF:A8:96:BB:9A:4E:A6
Certificate issuer:       /CN=A9111B00/serialNumber=BBD2E9D913C645C8A05192474CFFA896BB9A4EA6
Certificate serial:       01FD
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/u9Lp2RPGRcigUZJHTP-olruaTqY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.mft
Manifest number:          01FA
Signing time:             Sat 23 Aug 2025 02:31:17 +0000
Manifest this update:     Sat 23 Aug 2025 02:31:17 +0000
Manifest next update:     Sat 30 Aug 2025 02:31:17 +0000
Files and hashes:         1: u9Lp2RPGRcigUZJHTP-olruaTqY.crl (hash: Cxrb28XNl37Hh/HiDXBdlsFlcyHXusWxMso6kiEmqAs=)
                          2: 46DE5C7875DD11ED86945E46C4F9AE02.roa (hash: i1JD8msSihYz7KvKL8WS56vjnbp4Wnh0IyWM047eZr4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.crl
                          rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/u9Lp2RPGRcigUZJHTP-olruaTqY.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 02:31:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 509 (0x1fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111B00, serialNumber=BBD2E9D913C645C8A05192474CFFA896BB9A4EA6
        Validity
            Not Before: Aug 23 02:31:17 2025 GMT
            Not After : Aug 30 02:31:17 2025 GMT
        Subject: CN=68a927f5-729b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:f6:e9:06:58:74:2b:03:6e:39:5b:e2:8d:c4:
                    0a:41:c2:73:32:06:17:39:36:30:18:ec:da:98:d0:
                    37:1c:bc:d8:d4:cf:d8:79:c3:de:fe:3d:b0:4d:89:
                    ed:63:17:6d:7a:82:c7:61:ea:2a:84:37:42:0b:d9:
                    40:01:84:ac:2c:7f:09:ac:03:c2:f9:bd:e7:ef:cf:
                    c0:88:fc:38:d4:c4:55:e1:00:40:38:14:db:06:44:
                    cf:09:7e:cf:ab:11:47:99:3e:bc:96:05:73:e8:98:
                    30:b3:f4:05:bd:60:c1:06:82:7e:3a:d5:17:ff:18:
                    44:ff:d0:61:08:5d:b5:c6:6a:15:24:14:26:cf:f3:
                    50:74:ad:84:21:c5:96:b4:22:4e:b1:89:fa:4e:38:
                    d1:41:e0:0e:21:f5:cb:5d:bf:04:f5:04:81:1c:05:
                    1a:f4:a6:7e:bd:61:bd:31:2d:98:b1:f5:8a:5d:29:
                    a3:46:50:fa:68:fc:36:5d:df:b9:86:f1:72:e0:69:
                    44:a4:40:ae:c2:35:f2:d7:35:31:ca:3f:b9:f9:4b:
                    a9:d3:5f:1c:be:10:f7:99:00:5e:f4:6c:19:c8:fb:
                    32:83:0d:d9:37:64:8a:8e:ab:d6:ae:14:4e:ad:73:
                    94:48:48:eb:b9:3b:82:c0:33:1e:33:ea:89:39:9a:
                    1a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:9B:B1:DE:13:EF:03:DF:B6:15:7A:72:4C:F9:37:5D:C8:A2:4D:6B
            X509v3 Authority Key Identifier:
                keyid:BB:D2:E9:D9:13:C6:45:C8:A0:51:92:47:4C:FF:A8:96:BB:9A:4E:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/u9Lp2RPGRcigUZJHTP-olruaTqY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:63:c8:48:ea:71:73:3c:05:25:ae:37:6a:01:e9:88:1e:a1:
         ae:fd:80:7c:2d:4d:63:fc:be:c3:e7:ee:c7:f9:3b:85:b6:2f:
         48:15:98:7d:8a:8f:7b:f8:32:8a:79:cc:60:b7:df:f5:3a:f3:
         04:64:88:99:25:cd:c1:02:02:05:7b:08:97:a7:a9:e0:78:2a:
         e4:e8:62:9a:64:49:48:87:9a:f9:24:f9:7a:21:ca:b6:d5:b2:
         94:96:30:39:01:63:1d:2c:ee:18:14:98:c0:e4:16:80:1a:d2:
         88:4e:f3:00:6b:c7:f1:11:2e:5c:4c:ff:5c:3b:68:c2:c1:bd:
         ed:d6:98:2f:c9:7e:01:f1:d8:b6:33:17:cf:c5:73:ea:02:a1:
         fb:99:6b:da:b7:63:a1:2d:7f:92:0c:23:20:ba:20:93:9f:4a:
         a9:08:ab:d8:3e:0d:a6:a9:cd:e8:d5:75:31:4a:81:16:5d:28:
         c0:d7:a1:2b:fe:e1:db:a7:8c:79:73:00:7b:88:4d:33:da:33:
         56:6e:f9:0c:0f:79:25:54:1a:54:77:87:65:95:23:90:66:6a:
         be:1e:cb:b0:d5:21:24:0f:92:17:50:15:87:6e:e5:5e:97:28:
         39:99:58:57:52:31:82:94:66:99:30:b4:48:0d:b5:2b:ff:5f:
         6b:0c:df:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:08:57 2025 by rpki-client