Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113217/D72196D0215C11EEBCB5B24EC4F9AE02/uzAHjPaHeH06Wz5TTAiXFqhrE7s.mft
File:                     uzAHjPaHeH06Wz5TTAiXFqhrE7s.mft (raw, json)
Hash identifier:          32hiAzDUirRNw0T7cKVA7UZXLW/sftBOlhWivHaMwrQ=
Subject key identifier:   55:8A:F9:82:DA:DA:7B:06:8B:4B:D0:47:5B:92:51:31:16:AF:DB:05
Authority key identifier: BB:30:07:8C:F6:87:78:7D:3A:5B:3E:53:4C:08:97:16:A8:6B:13:BB
Certificate issuer:       /CN=A9113217/serialNumber=BB30078CF687787D3A5B3E534C089716A86B13BB
Certificate serial:       0194
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uzAHjPaHeH06Wz5TTAiXFqhrE7s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113217/D72196D0215C11EEBCB5B24EC4F9AE02/uzAHjPaHeH06Wz5TTAiXFqhrE7s.mft
Manifest number:          0190
Signing time:             Sat 23 Aug 2025 03:37:26 +0000
Manifest this update:     Sat 23 Aug 2025 03:37:25 +0000
Manifest next update:     Sat 30 Aug 2025 03:37:25 +0000
Files and hashes:         1: uzAHjPaHeH06Wz5TTAiXFqhrE7s.crl (hash: R5IRIN/0IfKqnvSTEb64j36F69j4yu+B9m+6bmRRFs8=)
                          2: 859871F2215D11EE963E9A52C4F9AE02.roa (hash: Z3peH/mE9SV9hvZtkmemszIcaOCUTsQPfGHf/GpQqto=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113217/D72196D0215C11EEBCB5B24EC4F9AE02/uzAHjPaHeH06Wz5TTAiXFqhrE7s.crl
                          rsync://rpki.apnic.net/member_repository/A9113217/D72196D0215C11EEBCB5B24EC4F9AE02/uzAHjPaHeH06Wz5TTAiXFqhrE7s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uzAHjPaHeH06Wz5TTAiXFqhrE7s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 03:37:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 404 (0x194)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113217, serialNumber=BB30078CF687787D3A5B3E534C089716A86B13BB
        Validity
            Not Before: Aug 23 03:37:25 2025 GMT
            Not After : Aug 30 03:37:25 2025 GMT
        Subject: CN=68a93776-5022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d4:e2:51:b4:a5:19:bc:7a:e9:0d:d1:8f:9b:
                    c2:8d:13:61:f4:43:d0:d1:82:df:9c:ce:c9:b6:b2:
                    10:e4:40:51:6b:68:2b:55:50:fb:37:f0:58:d3:0c:
                    5d:8f:04:41:3a:bc:22:84:0b:89:d9:c5:51:06:12:
                    91:f4:f7:e4:9c:d0:36:b0:69:df:31:23:d3:a0:f1:
                    c6:33:94:02:b3:c0:46:2b:19:68:ec:7e:dc:e3:55:
                    12:1f:2b:cf:fd:e2:38:c1:f6:8e:94:e5:54:99:02:
                    97:79:07:c1:1e:dc:d6:35:33:04:a4:c7:52:48:31:
                    a9:af:7b:54:8d:9d:8b:43:1b:4b:c9:7e:96:b9:84:
                    38:02:4b:1b:9b:5a:69:84:ef:81:d5:1d:7b:77:7b:
                    a7:7b:96:43:32:57:0d:39:62:41:00:15:dd:16:ae:
                    51:22:19:4c:77:1f:96:89:fd:e5:6c:61:11:04:c6:
                    fe:fd:c4:23:b4:3a:9b:d4:a4:db:ed:08:57:97:ec:
                    7f:95:e9:65:71:70:e7:b7:7b:b8:e6:fa:83:ab:fc:
                    0e:90:67:1d:33:9a:34:c5:31:30:f9:16:3f:81:25:
                    7a:0e:4c:2d:a5:40:fc:50:9f:ed:e9:1a:ea:8b:71:
                    01:59:37:0b:5f:5f:d0:42:f6:5e:6f:f4:41:8d:f8:
                    28:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:8A:F9:82:DA:DA:7B:06:8B:4B:D0:47:5B:92:51:31:16:AF:DB:05
            X509v3 Authority Key Identifier:
                keyid:BB:30:07:8C:F6:87:78:7D:3A:5B:3E:53:4C:08:97:16:A8:6B:13:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113217/D72196D0215C11EEBCB5B24EC4F9AE02/uzAHjPaHeH06Wz5TTAiXFqhrE7s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uzAHjPaHeH06Wz5TTAiXFqhrE7s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113217/D72196D0215C11EEBCB5B24EC4F9AE02/uzAHjPaHeH06Wz5TTAiXFqhrE7s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:d4:e6:ad:78:9d:6b:db:fa:18:08:cf:67:fa:5b:0f:4e:ef:
         61:6d:42:0d:d3:03:b8:07:eb:3b:8d:49:95:6d:09:49:3e:60:
         60:77:a5:45:15:a4:01:df:52:3e:cf:8a:39:09:fb:6e:ac:ee:
         dd:3c:d1:c3:86:0c:9b:9f:0c:bb:9c:53:6d:1f:31:e2:ab:18:
         e1:db:9f:df:69:e7:5f:89:89:4d:b9:3f:cc:97:60:a8:e1:9b:
         4e:ae:de:e0:4b:14:02:84:38:62:1e:cc:e0:47:2f:f4:e3:e2:
         db:50:a3:0c:86:4d:de:68:91:a7:9d:57:f7:3a:35:2d:b2:5e:
         2a:43:c1:6b:d6:fe:c7:d9:80:dc:8c:f3:94:7a:86:ff:17:a0:
         ac:ca:d5:1f:d2:1d:97:31:df:08:69:5b:bd:3e:4d:b4:05:92:
         05:b9:1d:34:fb:49:5d:52:f6:d2:55:7b:15:7e:a2:dd:ae:1a:
         29:d3:4d:a8:07:54:79:78:c8:fc:14:8d:4c:e4:28:2d:ad:39:
         88:b9:59:a7:24:1e:67:35:c1:5a:bb:1c:1c:72:1d:8e:93:68:
         af:f1:c0:00:8a:a4:57:4b:db:7a:08:c1:6b:18:84:b0:bf:2d:
         71:91:a2:c8:fd:25:77:79:dc:58:f7:e7:fd:f6:00:e7:2d:4c:
         32:e1:e1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:23:19 2025 by rpki-client