Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.mft
File:                     _uphQ5owmLhcyxg7WkGqEq9Fyh4.mft (raw, json)
Hash identifier:          SP+GfF597l0RILoueF/TtUiP3SZ0vnKDSyCVu3KlLcg=
Subject key identifier:   F5:10:C8:D4:CA:37:3C:E2:75:7E:A6:B5:6A:7D:DC:D1:53:89:F4:8B
Authority key identifier: FE:EA:61:43:9A:30:98:B8:5C:CB:18:3B:5A:41:AA:12:AF:45:CA:1E
Certificate issuer:       /CN=A91A19C8/serialNumber=FEEA61439A3098B85CCB183B5A41AA12AF45CA1E
Certificate serial:       07F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_uphQ5owmLhcyxg7WkGqEq9Fyh4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.mft
Manifest number:          07E7
Signing time:             Fri 22 Aug 2025 21:13:27 +0000
Manifest this update:     Fri 22 Aug 2025 21:13:26 +0000
Manifest next update:     Fri 29 Aug 2025 21:13:26 +0000
Files and hashes:         1: _uphQ5owmLhcyxg7WkGqEq9Fyh4.crl (hash: MJgQngT31rhckcPtP9N05MXTr4uSzMe+ygwL36YHXaY=)
                          2: 12C3076850E111F09D297C74C4F9AE02.roa (hash: ZUF20y6+jkSbAkxDsa20v45IvcAwVMI0vsh92LZHtlw=)
                          3: 2B219CDC1FE811EF96F54D5AC4F9AE02.roa (hash: fDAAeuUsFkH2gLuCgx3HyrIav6vNpT1MtuuD0Bs5YUU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.crl
                          rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_uphQ5owmLhcyxg7WkGqEq9Fyh4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 21:13:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2037 (0x7f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A19C8, serialNumber=FEEA61439A3098B85CCB183B5A41AA12AF45CA1E
        Validity
            Not Before: Aug 22 21:13:26 2025 GMT
            Not After : Aug 29 21:13:26 2025 GMT
        Subject: CN=68a8dd77-130b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a8:1d:ed:7d:cd:d6:cc:85:c3:13:e7:af:28:
                    9b:e2:fb:4b:db:b9:a5:52:5c:61:ab:08:cc:9b:70:
                    be:9d:b1:88:77:50:8e:46:e5:a9:dd:3b:65:7e:ba:
                    f7:a6:b0:34:fa:e5:07:50:c6:bb:0c:b1:60:d3:d3:
                    c9:cc:07:85:43:0f:a3:eb:04:06:3e:47:42:85:c1:
                    ce:5e:8a:1a:b4:a1:db:a3:e5:d6:fe:a5:1d:fc:f2:
                    d0:5b:c3:e1:bd:55:b5:82:21:f9:d3:e4:2c:d3:23:
                    8b:1e:27:6e:b5:fa:55:cd:ef:af:db:ee:0f:c9:74:
                    08:d5:01:03:2b:f7:92:40:8d:59:a1:a4:17:0b:a7:
                    39:55:f0:8f:bf:43:8c:a1:59:42:dd:88:7c:ac:e9:
                    fb:aa:01:42:31:28:ed:11:be:35:80:04:12:02:eb:
                    4e:dc:fb:0c:6c:2e:2d:63:fc:d9:52:2b:bd:64:48:
                    52:74:7b:a0:9a:10:aa:85:3d:f0:41:a9:ac:bf:77:
                    b6:29:39:aa:6c:d5:cf:7c:48:73:da:3f:05:0b:a9:
                    ea:6d:a5:b9:4f:c2:d0:16:e8:2d:71:a2:86:47:d2:
                    a9:31:6b:df:f2:8c:30:f9:81:3d:77:05:44:b8:34:
                    b3:e8:85:3b:59:5f:c7:9e:05:97:52:97:f7:1d:d0:
                    ae:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:10:C8:D4:CA:37:3C:E2:75:7E:A6:B5:6A:7D:DC:D1:53:89:F4:8B
            X509v3 Authority Key Identifier:
                keyid:FE:EA:61:43:9A:30:98:B8:5C:CB:18:3B:5A:41:AA:12:AF:45:CA:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_uphQ5owmLhcyxg7WkGqEq9Fyh4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:d3:e7:5c:76:84:ed:03:f1:0d:db:6f:66:eb:65:89:07:eb:
         2d:0a:e5:ea:d8:00:29:a2:bd:a9:19:4c:f1:3b:e1:0e:c1:06:
         ba:b7:51:c6:e4:16:6f:f5:01:b4:52:90:03:ee:cc:6f:4b:c0:
         2e:c2:e5:47:0f:61:d0:67:cc:a8:37:c9:41:ed:b7:77:89:c4:
         41:0c:0a:e4:3f:bf:32:f8:ba:ca:cd:5a:3f:85:df:a9:d9:40:
         25:f5:fb:4c:19:e1:6f:7b:02:4f:5c:35:fc:c8:e6:2f:b5:36:
         bc:f9:cb:0b:81:bc:11:7c:9c:28:a0:16:d5:84:2c:6f:2a:27:
         82:dc:1b:39:ac:47:9a:90:9a:13:9c:6a:3d:94:c6:5b:e5:38:
         97:e8:9b:24:0a:df:a4:e8:b1:9b:e4:bf:9e:3a:26:2c:f7:7a:
         ba:82:a0:9f:3f:77:83:3f:e7:e5:e5:fa:11:67:58:57:c5:52:
         79:cc:2c:0e:0d:bf:2f:85:40:63:be:12:7c:1d:05:7a:cd:28:
         63:68:27:d0:87:b4:f6:d3:08:9f:e1:34:3a:b1:7c:cc:7c:9e:
         43:4f:a1:1c:cf:65:b7:e8:24:01:b9:2f:af:29:7c:06:7a:5b:
         ec:79:9c:18:1e:63:7a:08:fd:95:83:52:ce:30:2f:a7:d8:26:
         be:81:3b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:04:45 2025 by rpki-client