Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft
File:                     u6vT8W4QD9nJXUdIhOTanLb6do0.mft (raw, json)
Hash identifier:          7fSJXmHdr19uGK+SNRnki+z7GS7FDQWvl+By9UcSD08=
Subject key identifier:   38:E8:CE:10:DE:FF:4E:09:F3:91:B6:56:16:F7:91:1C:97:78:C8:C5
Authority key identifier: BB:AB:D3:F1:6E:10:0F:D9:C9:5D:47:48:84:E4:DA:9C:B6:FA:76:8D
Certificate issuer:       /CN=A91886E3/serialNumber=BBABD3F16E100FD9C95D474884E4DA9CB6FA768D
Certificate serial:       01F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6vT8W4QD9nJXUdIhOTanLb6do0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft
Manifest number:          01EA
Signing time:             Thu 03 Jul 2025 02:38:31 +0000
Manifest this update:     Thu 03 Jul 2025 02:38:30 +0000
Manifest next update:     Thu 10 Jul 2025 02:38:30 +0000
Files and hashes:         1: u6vT8W4QD9nJXUdIhOTanLb6do0.crl (hash: AUdbS7NY7LEFjVfLEYZtW0T0ZKcQKpVC69SJavj09Tg=)
                          2: 60820A4271AC11EDAA89DE61C4F9AE02.roa (hash: d6lR5DCUUt64f3jfT2Upe1NvnvCxTNK9tDR0OuYVOnY=)
                          3: 61141C1671AC11EDAA89DE61C4F9AE02.roa (hash: Wx96a0pCwu7Is08OfwVpC7A3eb6MBe8Us9jhb4i3wps=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.crl
                          rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6vT8W4QD9nJXUdIhOTanLb6do0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 02:38:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 496 (0x1f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91886E3, serialNumber=BBABD3F16E100FD9C95D474884E4DA9CB6FA768D
        Validity
            Not Before: Jul  3 02:38:30 2025 GMT
            Not After : Jul 10 02:38:30 2025 GMT
        Subject: CN=6865ed27-2126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:af:2b:7c:ad:52:6c:2e:ab:f6:8a:e9:86:57:
                    0d:95:65:ae:4d:04:16:b1:2d:88:59:93:b2:db:ae:
                    64:94:51:c1:ee:ed:f0:dc:3c:a6:67:bd:65:2e:e8:
                    72:3d:06:5b:25:e9:dc:de:c5:e1:99:b7:06:8c:5f:
                    13:a8:3d:3e:46:ba:4c:95:e6:e6:e2:6c:68:45:8b:
                    17:95:01:75:65:43:ed:72:a3:20:1c:49:e7:4b:05:
                    6f:ca:4e:f0:13:eb:2e:4f:7b:33:ab:78:4c:6b:90:
                    0a:1f:1d:7d:98:13:5c:5e:d9:8c:c6:81:6b:68:0a:
                    55:ee:68:2a:d6:c2:be:54:67:06:2d:f6:a2:84:72:
                    23:f4:a7:a0:f9:d9:9f:39:bd:01:33:21:d7:b4:ce:
                    6e:a7:b0:d4:76:a5:ff:d3:cb:c5:40:10:1c:af:8c:
                    db:d8:5d:03:ae:9c:34:ac:a6:06:60:89:0c:8d:fb:
                    96:88:eb:c6:f3:4a:e8:3c:fc:05:1b:08:e3:5f:ae:
                    57:7f:6c:ea:fd:1b:54:1c:7b:90:27:ee:48:01:cf:
                    a4:3c:56:7e:e6:59:74:95:38:bb:5b:cf:e1:65:76:
                    46:ce:2c:f0:95:fe:13:a1:4b:d7:19:49:c5:09:09:
                    7d:11:e4:b1:68:a2:65:66:90:51:24:eb:7b:8c:ba:
                    1c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:E8:CE:10:DE:FF:4E:09:F3:91:B6:56:16:F7:91:1C:97:78:C8:C5
            X509v3 Authority Key Identifier:
                keyid:BB:AB:D3:F1:6E:10:0F:D9:C9:5D:47:48:84:E4:DA:9C:B6:FA:76:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6vT8W4QD9nJXUdIhOTanLb6do0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:98:c7:db:01:5c:fb:27:8e:28:c5:c8:7d:32:2f:fa:81:59:
         04:0d:74:d4:63:4e:20:91:b3:98:78:97:4c:69:9f:4d:ef:e7:
         21:6a:e2:8a:eb:83:fc:1f:e3:41:69:b8:17:a7:29:f7:c3:e1:
         f3:29:02:48:f8:29:23:13:e8:6b:15:fb:50:e5:ce:8a:c8:be:
         6f:84:f2:ef:00:d9:12:ef:3c:38:9b:56:31:d4:89:86:4d:b5:
         b9:80:d0:dc:85:32:dc:42:6b:60:c4:cf:55:af:90:48:83:94:
         0a:c1:19:c5:b3:71:0e:a5:5f:78:19:58:6b:88:eb:58:eb:bc:
         bb:91:b7:4b:04:c7:86:39:43:52:d8:49:40:15:63:f3:0c:a0:
         5e:74:da:68:bd:6a:e7:b1:1f:78:06:1f:93:db:e8:73:bf:fc:
         b9:25:d1:70:2f:27:89:ec:f2:6e:0e:c9:bb:b0:c7:28:27:ad:
         79:c5:9a:de:e8:b4:c0:68:80:f7:00:17:e2:b3:3e:af:e9:ec:
         8d:5d:e3:8f:06:ca:ed:2a:78:4e:30:8b:13:75:8f:0a:b3:6d:
         ae:7c:4f:3b:69:9e:c1:a1:5b:c4:14:17:93:8b:9b:f1:fd:f7:
         64:62:65:87:48:59:4c:1a:f1:f0:43:a4:94:ac:98:f6:74:17:
         6f:8f:94:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 17:27:27 2025 by rpki-client