Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.mft
File:                     uvWtoyyg00zzzPU6vfht5vjtkAU.mft (raw, json)
Hash identifier:          stUSQiQntLAw4valStjk4YKs4vi27oPFhCg3zWR33LA=
Subject key identifier:   F3:FA:BB:3C:30:26:7F:A0:65:79:65:A7:3C:F2:A2:DA:19:CD:1A:BE
Authority key identifier: BA:F5:AD:A3:2C:A0:D3:4C:F3:CC:F5:3A:BD:F8:6D:E6:F8:ED:90:05
Certificate issuer:       /CN=A9146AD7/serialNumber=BAF5ADA32CA0D34CF3CCF53ABDF86DE6F8ED9005
Certificate serial:       19F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.mft
Manifest number:          1961
Signing time:             Wed 02 Jul 2025 16:34:51 +0000
Manifest this update:     Wed 02 Jul 2025 16:34:50 +0000
Manifest next update:     Wed 09 Jul 2025 16:34:50 +0000
Files and hashes:         1: uvWtoyyg00zzzPU6vfht5vjtkAU.crl (hash: RktLjQj0JzTiw9dvs19dpiNjeGsxAV98YQHP2AGYIT8=)
                          2: 6B09C1DAB16811ECBB0AD94EC4F9AE02.roa (hash: Qz3uK0x8TmBAlmnPYdm9Em6r/+RMom/8FHhDVc9i3gM=)
                          3: 5047D510C02411EC93BB8865C4F9AE02.roa (hash: PVGHL8sNl+GypqCV9Nbt0KEieAW3mlbAftZL/WUZxsk=)
                          4: 680B87D6F0F411EC8B1EB281C4F9AE02.roa (hash: B4yvVmLSnuqsnH1jc03a0dSFccIL2A7ZcVxNxt9Xwuk=)
                          5: 4F9AA82CC02411EC93BB8865C4F9AE02.roa (hash: Sc0huKFJaR77IvAZnF61IoAHkjTM8P4+L9d/0GJ4tIA=)
                          6: 6B78FC0C892511EFA94C8B24C4F9AE02.roa (hash: DcZlXqxJU0ffDD2b5HPGEz8WWfykJap2CMKvzj3AWqU=)
                          7: EB61BF32FDCD11EEB0EABC0CC4F9AE02.roa (hash: nvDXFuMbASKQcxa2tU3FunOBPS4uwAfHeJjVkN0kFQk=)
                          8: 4532BD9C14EF11ECA529523DC4F9AE02.roa (hash: lcfreWfdZCTI1W22R8ETqsSK5D5Kx4e7mgheGCbSj1c=)
                          9: 4EE22C48C02411EC93BB8865C4F9AE02.roa (hash: vUX3RU0X1V+oe312SGKD4qBeeq4yD2Hm5bT9njfYEwg=)
                          10: 1C6550B237FD11EFB7E92B72C4F9AE02.roa (hash: Zg1HxtJHNn+xhlGzIL5uYjzbV2CXaOxPR+ZIHhFUiLI=)
                          11: 1321A11C9DF311E99A8DE961C4F9AE02.roa (hash: a159m0Dumns74n/DW56Q8reR56xBmLD89oVMS7W3Rnw=)
                          12: E125DC2E94D611EAAC882A28C4F9AE02.roa (hash: 3dUDXrKmdAr4EqL7pE8aDmFxq1keOgDEV4E7ok8FbKU=)
                          13: 6A90213E3FAD11EEA252F62FC4F9AE02.roa (hash: Co0oH18UWvs2mZktht06NywANpQZQV/ORKqi/8Frf4w=)
                          14: 669662644C4B11EE9AC4B26BC4F9AE02.roa (hash: hQ7KdpbSVedFa9m4PpJQNuiHB98SPLS+0rqDHaeBr0g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.crl
                          rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 16:34:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6642 (0x19f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146AD7, serialNumber=BAF5ADA32CA0D34CF3CCF53ABDF86DE6F8ED9005
        Validity
            Not Before: Jul  2 16:34:50 2025 GMT
            Not After : Jul  9 16:34:50 2025 GMT
        Subject: CN=68655faa-e7a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:55:a8:0f:9c:2f:c1:f8:ea:36:25:43:3b:57:
                    ed:d3:64:b7:ba:db:5e:e4:92:8f:6c:03:eb:8d:7b:
                    4c:3f:6b:4c:4c:90:bd:1e:16:c2:16:11:2a:8e:bf:
                    56:47:5d:e2:1a:f5:90:8b:4a:37:49:59:ed:76:de:
                    ea:5c:0d:a1:81:cf:3f:60:e1:58:60:10:f8:41:87:
                    56:12:29:05:60:23:37:2b:9e:b2:37:e1:63:a6:33:
                    0b:60:92:d6:49:40:7d:2c:0f:f4:cd:00:38:48:d7:
                    47:3a:75:bf:9c:3d:7f:a6:f3:be:52:bf:84:8c:72:
                    42:51:9e:6e:0d:4c:f5:1f:18:49:23:e0:ed:70:b9:
                    38:02:57:a3:8f:eb:b5:69:8f:d2:f2:23:e6:6b:d1:
                    90:27:4a:56:b8:04:a0:29:3c:13:cb:31:8a:e9:2a:
                    ff:d4:0f:72:46:ab:7a:2d:d5:15:73:08:9a:ed:04:
                    83:a1:fa:6a:0a:b9:c3:57:cd:04:f8:3c:55:47:ee:
                    b3:aa:da:0d:f7:ac:f1:1c:bb:74:14:56:b8:a5:d3:
                    f4:61:70:c0:c7:68:5f:2d:c1:ee:a1:b0:50:30:c9:
                    82:41:bd:f6:27:0e:be:bb:04:e4:f9:d2:59:62:d7:
                    1c:f0:f1:d2:36:1e:da:00:5b:fc:a5:97:8f:47:ca:
                    74:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:FA:BB:3C:30:26:7F:A0:65:79:65:A7:3C:F2:A2:DA:19:CD:1A:BE
            X509v3 Authority Key Identifier:
                keyid:BA:F5:AD:A3:2C:A0:D3:4C:F3:CC:F5:3A:BD:F8:6D:E6:F8:ED:90:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         f7:a1:ef:60:b1:c7:ad:5d:d6:9b:fc:b7:28:4d:ff:f5:a6:4a:
         7c:b6:4c:f0:4a:33:48:d0:54:31:28:48:2d:67:06:ea:66:c8:
         28:22:2b:62:fb:4d:86:97:85:14:49:3d:61:69:66:e7:0e:db:
         f9:ac:1f:7a:0e:83:c7:bc:b3:c9:64:2f:7a:df:eb:b7:6f:b0:
         f6:d3:87:f5:2c:7c:82:fd:7b:3f:d7:27:e9:67:c0:08:fd:04:
         9e:0c:be:6e:7b:4b:56:f8:79:62:4a:d2:42:f6:9a:4d:a3:31:
         c4:d8:5e:5f:96:d7:68:f2:27:fd:16:8e:a7:6d:06:47:81:af:
         b5:e0:ab:eb:4d:b1:dd:89:10:52:a7:6d:31:e6:e5:a2:4c:fa:
         55:44:cd:51:83:12:4e:03:46:48:7a:f8:c3:fb:35:99:1c:f4:
         68:a3:1b:03:59:6e:b9:15:a6:e6:4a:36:86:8b:0d:81:0c:f9:
         d5:02:e9:89:cd:40:22:17:85:9a:ce:eb:5e:98:27:6f:c2:27:
         9d:0e:37:4b:ad:23:f6:31:cf:ee:b3:c9:76:47:d3:fe:d9:48:
         f7:6a:22:a0:2a:ff:f3:d1:4e:38:79:4e:a5:0b:81:b0:11:f7:
         a0:3a:66:e5:cf:61:d5:84:22:8b:32:47:23:e7:ef:bc:34:ad:
         31:f1:3b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 04:01:59 2025 by rpki-client