Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.mft
File:                     u7bmAQQ3QyUFSIC308E15vx8yrE.mft (raw, json)
Hash identifier:          H3NA/3Ua5KWaajZTOp0TQHRSglTNTsrNmJRjI8ojkpQ=
Subject key identifier:   4E:91:D9:1C:A7:44:06:09:E6:74:B3:F2:C5:EB:99:4F:47:3A:CB:D5
Authority key identifier: BB:B6:E6:01:04:37:43:25:05:48:80:B7:D3:C1:35:E6:FC:7C:CA:B1
Certificate issuer:       /CN=A912804A/serialNumber=BBB6E60104374325054880B7D3C135E6FC7CCAB1
Certificate serial:       021B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7bmAQQ3QyUFSIC308E15vx8yrE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.mft
Manifest number:          0216
Signing time:             Sat 23 Aug 2025 02:16:08 +0000
Manifest this update:     Sat 23 Aug 2025 02:16:07 +0000
Manifest next update:     Sat 30 Aug 2025 02:16:07 +0000
Files and hashes:         1: u7bmAQQ3QyUFSIC308E15vx8yrE.crl (hash: HRZT8GFIgftoOwiQXNl6Odm9/MYgnKcrncb3LaISiI8=)
                          2: CCB0DBA8CB2911EE9CE70483C4F9AE02.roa (hash: +L4H64N18c7HC9b7a2kMN0oPwzUDs4ByILHmodSVj7c=)
                          3: 003D7FEE15E811F0841B1A7DC4F9AE02.roa (hash: NzfvN2nV9saQebWeBwyNL6bb8Qj6DnzhJ2bxOu8Ukwk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.crl
                          rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7bmAQQ3QyUFSIC308E15vx8yrE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 02:16:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 539 (0x21b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912804A, serialNumber=BBB6E60104374325054880B7D3C135E6FC7CCAB1
        Validity
            Not Before: Aug 23 02:16:07 2025 GMT
            Not After : Aug 30 02:16:07 2025 GMT
        Subject: CN=68a92468-95d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:c9:4c:f0:2b:c5:14:9d:50:49:4c:09:4a:a0:
                    bd:5e:6e:2f:43:e7:dd:14:2d:be:2f:c0:80:16:ee:
                    0e:cd:40:e3:84:21:97:7c:30:bf:6a:bd:94:13:a1:
                    5d:62:32:4b:29:a2:93:ed:22:e6:52:78:d0:ee:a5:
                    da:96:f6:f0:1f:df:84:db:7f:24:41:2a:42:c1:74:
                    6e:a2:04:2e:a8:11:41:e1:ea:d0:00:36:3e:c0:15:
                    41:54:a9:60:c5:4c:92:fb:7d:49:60:d8:4b:aa:ee:
                    78:24:63:4d:9f:5d:8e:77:d4:c1:4b:ac:19:3b:86:
                    99:d9:da:92:0f:03:ab:c7:62:eb:aa:f2:fb:85:ac:
                    4b:68:1d:0e:1f:54:4f:57:f7:2b:19:38:28:f6:a1:
                    1e:0f:a6:6a:bc:f0:39:eb:05:e2:2f:ba:4e:33:15:
                    84:e1:75:7c:15:1b:fb:3b:32:a8:bb:39:97:e3:f3:
                    2c:4a:4e:de:9c:1e:5c:44:8b:cd:c4:b6:99:44:9f:
                    a2:09:11:9e:2f:5a:4f:b4:79:a0:97:6d:7d:cb:eb:
                    55:d2:27:9c:e0:41:ce:cb:cb:81:a3:27:73:1a:c1:
                    0f:e6:26:1b:35:c5:78:ff:93:35:82:82:19:00:33:
                    86:7c:b2:0c:f6:64:ec:97:5a:18:27:03:75:e8:e9:
                    b8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:91:D9:1C:A7:44:06:09:E6:74:B3:F2:C5:EB:99:4F:47:3A:CB:D5
            X509v3 Authority Key Identifier:
                keyid:BB:B6:E6:01:04:37:43:25:05:48:80:B7:D3:C1:35:E6:FC:7C:CA:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7bmAQQ3QyUFSIC308E15vx8yrE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:59:07:07:b7:5a:83:43:38:a8:8f:88:14:f8:f9:73:dd:b6:
         f6:e5:04:94:09:a0:bf:3d:3d:76:1c:16:28:24:87:aa:3a:d2:
         5d:3d:64:3a:83:df:b8:17:d7:9d:4d:3d:f3:aa:98:e3:c7:de:
         95:a4:4d:31:7d:57:6a:d0:f4:c7:2e:b7:ce:59:b9:4e:d3:71:
         a2:ae:0d:c2:8f:78:eb:45:ac:d3:3d:68:0d:34:af:c6:7f:cd:
         97:c7:f6:69:04:65:e7:61:73:35:6e:3b:c0:b7:50:76:37:4b:
         d2:aa:e2:5d:83:2a:ef:2a:4f:4c:e8:13:83:ad:d1:20:1d:d5:
         f8:b2:5b:cb:b8:cb:f7:2f:27:20:82:2e:7d:f4:cc:b1:a6:43:
         e3:36:f4:e6:78:94:88:2c:70:42:34:a0:be:84:b7:12:90:8e:
         7e:b9:ee:70:88:b9:54:ed:c6:7b:68:df:12:4e:25:73:03:eb:
         0f:b9:f0:f7:ab:54:b9:23:5a:85:f5:2b:28:92:33:d5:c6:f0:
         d6:bf:07:ce:4a:1d:4d:cc:f1:46:89:fc:57:e6:ae:ba:97:e2:
         41:35:1c:c8:d2:39:0a:ac:c9:06:af:99:f3:ac:f8:d5:2c:96:
         aa:e6:c7:b7:12:e9:dd:c7:09:bd:9e:ec:70:17:e2:bb:be:f1:
         36:61:43:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 09:39:04 2025 by rpki-client