Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915DAF1/0B2B90A42D7511EB936E3458C4F9AE02/u59Cz844jtxLKepl3rYWKyVtIQI.mft
File:                     u59Cz844jtxLKepl3rYWKyVtIQI.mft (raw, json)
Hash identifier:          6T1K24/+fkcNhBPa/F+HdWp1HCgvDWAvx5+DvfDxmwY=
Subject key identifier:   EC:31:F4:61:35:C1:E8:A1:A3:A3:10:1D:C9:70:4C:77:77:DC:8F:2B
Authority key identifier: BB:9F:42:CF:CE:38:8E:DC:4B:29:EA:65:DE:B6:16:2B:25:6D:21:02
Certificate issuer:       /CN=A915DAF1/serialNumber=BB9F42CFCE388EDC4B29EA65DEB6162B256D2102
Certificate serial:       075C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u59Cz844jtxLKepl3rYWKyVtIQI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915DAF1/0B2B90A42D7511EB936E3458C4F9AE02/u59Cz844jtxLKepl3rYWKyVtIQI.mft
Manifest number:          0752
Signing time:             Wed 02 Jul 2025 21:57:21 +0000
Manifest this update:     Wed 02 Jul 2025 21:57:21 +0000
Manifest next update:     Wed 09 Jul 2025 21:57:21 +0000
Files and hashes:         1: u59Cz844jtxLKepl3rYWKyVtIQI.crl (hash: m/xXTJIccHbhj1Y2cfeXUDhr9WP76NpV+7D+WpA6Wtw=)
                          2: 84F992E67BB911EFA4CC334CC4F9AE02.roa (hash: YklgGoKPIC5Pmt2tOtwd4ysgwGERG7auCGi5OoDyTlg=)
                          3: 5A9BEA702D7611EB9827C368C4F9AE02.roa (hash: ebO9+Vms5oQoG4HlIUTD5BkVkXKCz/huR2BUpn+lQwI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915DAF1/0B2B90A42D7511EB936E3458C4F9AE02/u59Cz844jtxLKepl3rYWKyVtIQI.crl
                          rsync://rpki.apnic.net/member_repository/A915DAF1/0B2B90A42D7511EB936E3458C4F9AE02/u59Cz844jtxLKepl3rYWKyVtIQI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u59Cz844jtxLKepl3rYWKyVtIQI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 21:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1884 (0x75c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915DAF1, serialNumber=BB9F42CFCE388EDC4B29EA65DEB6162B256D2102
        Validity
            Not Before: Jul  2 21:57:21 2025 GMT
            Not After : Jul  9 21:57:21 2025 GMT
        Subject: CN=6865ab41-28db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9f:34:8d:d9:50:50:57:0f:e8:10:7b:46:fb:
                    cc:7c:0f:4a:fe:ca:7f:7c:2a:af:66:cc:8a:95:60:
                    b8:dc:8a:8e:d0:bd:c0:5f:b3:7e:a8:12:53:84:a5:
                    62:5f:9f:8e:93:aa:e7:dc:b5:a6:26:c5:13:fc:10:
                    81:c0:4c:d3:cd:1b:a6:c2:8d:83:dc:aa:da:46:a0:
                    6a:06:90:9b:b8:07:b6:43:29:c5:df:b4:d6:6d:be:
                    ab:c8:ea:a0:6f:53:53:c0:09:20:56:be:94:92:61:
                    cf:1e:26:f5:16:b7:48:24:32:e5:01:e3:b4:95:09:
                    44:6c:82:97:e9:fe:73:af:8c:b2:0b:b1:f8:20:20:
                    0f:f5:d4:9a:d7:71:71:0a:a7:0b:70:47:1b:0a:bc:
                    53:e0:f3:f1:3a:02:b9:d1:a9:fe:95:1d:2b:e4:b1:
                    7d:b0:f2:42:53:1c:5d:70:63:ac:27:13:ca:46:64:
                    d5:06:1e:93:00:b3:8f:9f:c5:13:2a:04:97:7d:c9:
                    d0:24:6a:f2:22:65:5a:bd:e9:39:59:1c:7c:95:63:
                    4b:89:d1:a5:45:9d:ef:65:a9:c0:fd:c7:9b:b8:fc:
                    c1:4c:e4:ba:de:98:7a:22:8c:9c:65:9d:d8:a7:64:
                    9a:6b:de:e7:ec:53:39:3a:be:5a:8b:4b:45:e4:18:
                    9a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:31:F4:61:35:C1:E8:A1:A3:A3:10:1D:C9:70:4C:77:77:DC:8F:2B
            X509v3 Authority Key Identifier:
                keyid:BB:9F:42:CF:CE:38:8E:DC:4B:29:EA:65:DE:B6:16:2B:25:6D:21:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915DAF1/0B2B90A42D7511EB936E3458C4F9AE02/u59Cz844jtxLKepl3rYWKyVtIQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u59Cz844jtxLKepl3rYWKyVtIQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DAF1/0B2B90A42D7511EB936E3458C4F9AE02/u59Cz844jtxLKepl3rYWKyVtIQI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:98:99:9e:dd:52:31:4a:41:e7:7b:e5:a5:17:5c:91:fd:c3:
         68:1f:92:5f:e1:b6:57:6b:2a:0d:26:39:6f:0d:40:90:23:d7:
         46:a3:b1:a5:3d:2d:f3:53:dc:11:f4:49:03:2f:a1:a6:b8:ea:
         c5:ca:49:da:4e:b6:e8:4d:59:81:e6:ef:fe:23:5a:7c:55:69:
         67:08:6d:06:ab:fd:5c:1a:b1:e0:b4:c4:df:db:10:c3:cc:4e:
         8e:b6:0a:96:53:c5:e7:79:ce:09:ca:23:7f:be:cb:50:c3:49:
         59:87:85:bd:54:c6:40:21:4f:0a:3e:85:5a:53:e3:09:20:fa:
         eb:d9:21:33:68:10:24:16:ac:66:04:62:6a:0a:5c:d3:99:04:
         bd:11:4b:ee:14:b4:16:53:b8:c9:6f:bf:2a:d7:56:05:9b:3f:
         fe:ad:75:c7:a0:a1:42:95:24:ba:1a:b9:c8:25:1b:7a:4a:42:
         08:bf:ec:c0:e2:53:84:30:8d:7b:7d:15:d6:14:55:3d:1a:39:
         26:a8:f0:51:53:84:88:5c:63:8a:5f:4d:e4:3b:44:b3:b8:3e:
         6c:d7:fc:b4:f5:42:64:f5:7f:36:26:9d:67:29:29:a6:b0:bd:
         44:e7:46:6d:df:f4:87:5f:3d:9c:c9:c1:c2:7a:4c:80:40:bf:
         6b:f8:2b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 07:55:54 2025 by rpki-client