Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft
File:                     uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft (raw, json)
Hash identifier:          QQTgkwSa4ELTwLcitVaK336k97MmEWBVMJtBoDCtdYs=
Subject key identifier:   F4:D4:82:EE:DC:43:3F:DE:53:B0:85:5D:1E:4C:16:09:F7:42:FA:53
Authority key identifier: B8:A6:2C:F1:DE:8B:26:2E:14:73:7D:93:EE:3E:6F:36:C3:A0:E1:C9
Certificate issuer:       /CN=A919E83B/serialNumber=B8A62CF1DE8B262E14737D93EE3E6F36C3A0E1C9
Certificate serial:       080D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft
Manifest number:          07EF
Signing time:             Mon 30 Jun 2025 21:14:28 +0000
Manifest this update:     Mon 30 Jun 2025 21:14:28 +0000
Manifest next update:     Mon 07 Jul 2025 21:14:28 +0000
Files and hashes:         1: uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl (hash: mTUa8ABTuiCaJu+8K9C+Xmi9u4givPhdtOPJ3485x3w=)
                          2: E68BF368DD9911EF85614A53C4F9AE02.roa (hash: RcdkSPfjnAmz3uVP4FBhLTQ0GFBSdezmu4kQPa/+yaY=)
                          3: 8BB3088E982F11ED9D647578C4F9AE02.roa (hash: A1w8tHzqGX+jD/ISNBe9aPcQuL2J3HJQzhH/YAzCdq0=)
                          4: F89E68D6982911ED90F8C877C4F9AE02.roa (hash: XTLM9Il3d4SVArTDp/CLgDo1h6RlBLONdep9WAa5H5I=)
                          5: 2DCC2988982711ED9D75C85AC4F9AE02.roa (hash: cXIuMnEWUiuT4kupzUNHJo4zj/W45Qb9cwkr7yvw0vc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl
                          rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Jul 2025 21:14:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2061 (0x80d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E83B, serialNumber=B8A62CF1DE8B262E14737D93EE3E6F36C3A0E1C9
        Validity
            Not Before: Jun 30 21:14:28 2025 GMT
            Not After : Jul  7 21:14:28 2025 GMT
        Subject: CN=6862fe34-531e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e5:58:a2:c1:f3:9c:4e:4e:e7:10:89:b6:d5:
                    c9:ec:b4:99:f9:ae:a8:84:9f:de:51:be:d4:9d:81:
                    bf:ca:0d:e7:82:83:c1:4b:cc:0a:d4:63:1e:8e:22:
                    b9:49:a9:dc:46:d2:35:ed:58:16:ae:b0:b9:98:06:
                    10:1b:b9:67:f6:b9:1e:31:83:9e:90:c7:2a:ca:b6:
                    f8:ea:66:a6:94:86:58:41:36:2b:48:ae:f6:6f:26:
                    c5:b8:7c:a9:f4:a0:74:d4:a7:5c:90:b8:fd:81:0d:
                    27:fb:54:4f:dd:4a:21:46:78:70:8d:2f:f9:fa:e9:
                    0c:db:0a:a9:0a:98:17:15:3b:b0:61:98:51:39:78:
                    f5:82:09:de:1e:aa:ff:cc:b3:d8:3e:36:9a:55:78:
                    c9:62:60:3f:90:dc:6d:19:ea:bc:dd:78:1c:8a:08:
                    c8:fa:79:8b:2e:5e:76:f3:c2:40:5e:01:dd:fd:b0:
                    d7:5f:fb:70:66:bd:d6:65:bc:90:f6:05:d9:75:96:
                    5b:33:e8:1a:4f:d2:47:ee:eb:56:a2:b3:7e:0f:52:
                    3e:b6:65:28:5e:c8:fd:ae:56:00:9d:7c:40:df:87:
                    18:0f:41:d3:de:e3:a8:8d:99:42:d1:5d:6a:0a:21:
                    bd:17:6d:f6:74:94:d1:98:bf:b0:d2:e2:7d:3c:a6:
                    20:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:D4:82:EE:DC:43:3F:DE:53:B0:85:5D:1E:4C:16:09:F7:42:FA:53
            X509v3 Authority Key Identifier:
                keyid:B8:A6:2C:F1:DE:8B:26:2E:14:73:7D:93:EE:3E:6F:36:C3:A0:E1:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:31:b0:11:95:ca:b4:5c:8b:fe:9d:b8:09:46:3b:48:fd:8e:
         f2:b6:be:05:19:c8:a4:cd:ee:c0:a4:f6:f9:6e:b9:59:ca:a9:
         fe:89:bf:84:a6:f1:5b:95:cb:c9:1d:12:6e:43:8b:27:21:e8:
         47:44:ab:f4:5d:32:27:71:ae:54:80:18:ca:12:33:9d:10:6f:
         14:54:a0:a5:11:61:2c:8c:4d:8c:0d:13:96:18:e7:64:c8:da:
         e5:d6:c6:d5:42:9e:d5:cd:ba:ea:40:c2:ac:c2:c6:92:79:69:
         32:cb:47:5d:23:cf:19:d5:af:05:5c:9c:84:dd:88:f6:bf:eb:
         26:c9:5b:4c:44:b4:6a:6d:59:e3:53:3f:ad:9f:ea:7a:f5:bb:
         9f:a6:5c:03:83:b8:f6:84:53:78:0a:6b:93:3f:18:61:29:2e:
         89:a7:61:d4:cc:e9:5e:46:eb:b3:35:15:ba:58:4e:43:79:86:
         68:06:c5:28:9a:59:db:e9:aa:3f:40:fd:8a:54:61:d9:3c:92:
         b7:30:4e:88:fe:6c:63:e5:9e:20:cd:53:da:ab:bd:54:f4:84:
         ce:5d:a8:9f:5d:fd:ea:4c:bd:e1:b9:d2:a3:83:d7:17:a5:12:
         14:4c:2c:1a:35:74:03:f9:56:df:1e:10:ee:32:99:fd:94:1b:
         0d:02:68:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 16:00:51 2025 by rpki-client