Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.mft
File:                     UPIOqel1rkxMhmfLV_e89XAhXJY.mft (raw, json)
Hash identifier:          lw6F7HGsVECPbGm3VAdkjk55MGMNLHEb/5R96jcrynY=
Subject key identifier:   25:4B:A5:71:DC:78:37:66:ED:CE:5E:8C:26:47:8E:79:0F:20:9E:00
Authority key identifier: 50:F2:0E:A9:E9:75:AE:4C:4C:86:67:CB:57:F7:BC:F5:70:21:5C:96
Certificate issuer:       /CN=A915C62B/serialNumber=50F20EA9E975AE4C4C8667CB57F7BCF570215C96
Certificate serial:       24C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.mft
Manifest number:          2451
Signing time:             Wed 02 Jul 2025 15:55:11 +0000
Manifest this update:     Wed 02 Jul 2025 15:55:11 +0000
Manifest next update:     Wed 09 Jul 2025 15:55:11 +0000
Files and hashes:         1: UPIOqel1rkxMhmfLV_e89XAhXJY.crl (hash: 1PamDH3ImN7POVuqWDt+qsTf1Ohv9ckm17FqlFG3jXY=)
                          2: 773D7A96B0DC11ECAEC09469C4F9AE02.roa (hash: JSTjxevpQh7Y9WIfXMl2eIjomxLJnjI/r2tIU+oc0Ig=)
                          3: D327C18CDFEC11ED9AB6E147C4F9AE02.roa (hash: DkDF5ioX13OuJfh2JylvgLRRw6+AIn++z0lBKozZ6IM=)
                          4: B8951CDCD23611EA8D9E515BC4F9AE02.roa (hash: 3p58ypdk04ElN+6HEttw9qJ/C60XU0tMI9YBNjvhXdM=)
                          5: E706A8B2BBF111EE8697E433C4F9AE02.roa (hash: cishBm9UdoGGvPuPGzEAmXBlRKMXNl1QLjdbaBeI7B0=)
                          6: 1A2298A2D23811EABDECA85FC4F9AE02.roa (hash: tFtHJDRq68MkxOGT5VgkwrnSGzaE039FiHh4oq6Q4EQ=)
                          7: 491B85B2E58911ED94960F39C4F9AE02.roa (hash: ClN9W30/fKlOIbsHfrCMHv+AzextbdwZ458osAxwB90=)
                          8: 06239EBADFEA11ED835B4D0EC4F9AE02.roa (hash: yndVn7hcuDMCdpxEcUDVR9meRxJpnYlQ5KdYems+Xe0=)
                          9: 59B3485028C111E7A885571AC4F9AE02.roa (hash: cpxWzbtBjfOYkdrL+G3YkBQCddhQ01gMHqlqKByoADs=)
                          10: 554E53D4B0B811EC9BE93E24C4F9AE02.roa (hash: zWhiAKzwQg9bP+RZqYCDyP/HTuRht7KXbJE7TpD4TKc=)
                          11: 5A2BB4DE28C111E7A885571AC4F9AE02.roa (hash: lmPij0yxhpci1H7hfOEpStvrCK/OQdYLZzjGWxHldlQ=)
                          12: D451FBE0DFEC11ED9AB6E147C4F9AE02.roa (hash: nJrkbLig1vTmSgjt6NVxXjjZt4z8n2VfbVQLKGqNIWA=)
                          13: D50024D6DFEC11ED9AB6E147C4F9AE02.roa (hash: 2+yQDxtXyRNPNjJL9oTb98cBeK8O2vaQ5rcmSwbKfuo=)
                          14: AFF73BD2BA0811EAB2479081C4F9AE02.roa (hash: Ei+ixlrSiwniV177dhajGnt3F/FQWmi7BjO5dNbr3pM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.crl
                          rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 15:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9414 (0x24c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C62B, serialNumber=50F20EA9E975AE4C4C8667CB57F7BCF570215C96
        Validity
            Not Before: Jul  2 15:55:11 2025 GMT
            Not After : Jul  9 15:55:11 2025 GMT
        Subject: CN=6865565f-b6a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9c:cf:ff:23:bd:65:db:fb:f5:e1:1a:0b:cf:
                    ad:96:1a:03:08:fa:b5:f8:39:bb:48:72:84:ef:18:
                    b4:03:da:5b:d7:be:2d:a8:2e:fb:5b:7f:86:2b:9a:
                    b7:a4:4c:05:25:17:5d:f6:ec:68:b4:3b:65:47:e3:
                    e8:a0:58:68:d0:aa:4f:52:b5:6f:d2:73:fb:89:71:
                    59:e1:63:e2:20:78:6d:01:f2:fc:35:90:cd:04:61:
                    f8:17:12:61:fe:f2:2c:4f:90:a7:77:b4:31:c7:ac:
                    34:71:ba:63:38:aa:b7:38:43:d3:ef:4b:f0:a1:71:
                    bc:1a:26:c7:b9:50:4e:63:53:fc:d5:20:a1:72:00:
                    17:77:5a:4c:f1:15:5a:74:33:0d:83:b1:89:2b:c3:
                    cb:f4:0e:5a:7f:57:7b:f5:ce:cf:8e:e0:df:92:a1:
                    eb:fa:5f:80:86:d4:66:18:39:96:4e:45:b5:72:1e:
                    41:52:e7:fa:9f:66:b3:6f:50:8b:bb:17:9e:37:67:
                    94:aa:6f:de:b7:fd:6d:1d:51:58:ab:74:3e:8d:0a:
                    46:0c:9f:56:d0:7c:7a:84:d8:60:0b:8d:37:f3:7d:
                    87:af:b5:b7:4c:27:96:b6:06:44:af:82:5e:6f:0a:
                    2f:7a:25:81:40:69:c0:11:b8:19:a7:4a:79:e3:2c:
                    a4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:4B:A5:71:DC:78:37:66:ED:CE:5E:8C:26:47:8E:79:0F:20:9E:00
            X509v3 Authority Key Identifier:
                keyid:50:F2:0E:A9:E9:75:AE:4C:4C:86:67:CB:57:F7:BC:F5:70:21:5C:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:06:8b:8e:1b:98:16:6d:f1:41:a1:84:d1:fe:46:c3:73:a0:
         23:1f:f4:41:b3:55:54:f9:01:67:3c:ba:aa:39:35:bb:2a:d3:
         3a:52:c6:01:52:de:52:76:79:53:a0:26:3e:67:3d:94:13:a2:
         bb:e6:21:4b:f5:36:a2:54:7c:75:22:87:a2:5e:6e:2c:e1:90:
         1e:88:e5:85:02:f7:ae:0d:3c:70:d4:e6:23:06:52:61:c6:6c:
         0c:8d:f8:05:28:14:31:c8:ac:96:10:6c:eb:70:5a:93:ee:9e:
         be:47:a7:14:0b:e4:1d:91:97:d8:20:c0:9a:cc:c8:44:f2:31:
         7a:a7:05:d7:d3:fe:07:27:63:ef:bd:36:22:76:39:e3:b5:ca:
         b2:96:ca:13:61:f8:94:bd:0a:2f:0e:14:c1:1b:c6:c1:c8:71:
         e5:9c:fa:09:5f:94:0c:b6:b1:57:1c:d1:14:69:0e:2d:d3:b8:
         b4:88:00:1b:d4:68:d8:9d:99:fb:cd:51:8e:49:89:70:2f:3b:
         ea:ab:03:5a:8c:fc:0f:f4:11:e9:ae:00:75:34:4a:7b:c6:24:
         98:dd:f4:ea:25:02:01:8e:ee:90:9e:b7:31:27:21:b5:ca:30:
         7a:5d:97:9c:6d:06:14:db:6f:a7:31:43:ec:15:a6:9b:ce:27:
         b1:9c:97:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 09:12:03 2025 by rpki-client