Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.mft
File:                     U5TlfShXd_11FCjRXLD7L8WSx6Y.mft (raw, json)
Hash identifier:          oO9ot65S+NQ6eilGS7rasXFexf+2/1mTIY88lIXD+IU=
Subject key identifier:   C4:CB:76:F5:1E:DE:F1:FD:E6:92:13:33:56:02:51:77:FF:92:65:22
Authority key identifier: 53:94:E5:7D:28:57:77:FD:75:14:28:D1:5C:B0:FB:2F:C5:92:C7:A6
Certificate issuer:       /CN=A91C17A9/serialNumber=5394E57D285777FD751428D15CB0FB2FC592C7A6
Certificate serial:       0559
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5TlfShXd_11FCjRXLD7L8WSx6Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.mft
Manifest number:          0546
Signing time:             Wed 02 Jul 2025 23:46:55 +0000
Manifest this update:     Wed 02 Jul 2025 23:46:54 +0000
Manifest next update:     Wed 09 Jul 2025 23:46:54 +0000
Files and hashes:         1: U5TlfShXd_11FCjRXLD7L8WSx6Y.crl (hash: gMfTdPICVBnFnIrNLi0qysj62jKmv2a3ki1A30f3MI4=)
                          2: E19B6AD6D5BE11ECA8BE4666C4F9AE02.roa (hash: Tcq182MtoqsdyOozDsgfHLvUMXaT5QP5utPDgkahfpk=)
                          3: C2CAC16E5C9D11EC99F7D10BC4F9AE02.roa (hash: 3aOOVCELLHnIfGs7sXEbEZF8NuxhRTtgWUNx37B19jo=)
                          4: C25659465C9D11EC99F7D10BC4F9AE02.roa (hash: V7oi3Gg2bJeyB31QQcYvbv2j/BrInSgpAZM4b3T1xkU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.crl
                          rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5TlfShXd_11FCjRXLD7L8WSx6Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 23:46:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1369 (0x559)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C17A9, serialNumber=5394E57D285777FD751428D15CB0FB2FC592C7A6
        Validity
            Not Before: Jul  2 23:46:54 2025 GMT
            Not After : Jul  9 23:46:54 2025 GMT
        Subject: CN=6865c4ef-40b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:18:01:80:87:45:fa:22:30:8e:52:a0:0d:13:
                    42:42:5f:c5:15:1f:1c:63:9c:67:bf:d1:1b:b0:40:
                    78:66:e2:cf:2d:e4:29:a6:2f:71:09:5c:f5:d3:37:
                    d2:20:5b:94:83:73:2c:50:d5:42:63:a3:ae:c5:25:
                    c7:57:f3:25:7c:38:c1:da:56:7b:53:6c:21:13:b8:
                    41:e9:56:c5:ed:f0:48:72:19:6a:08:8e:ee:50:94:
                    c1:c1:5f:10:8d:7a:e8:ec:c7:52:80:22:32:51:d8:
                    6d:a0:1e:90:1e:bf:3b:d0:9f:72:48:74:db:c4:63:
                    d4:a1:12:58:9d:4c:6e:b7:58:b7:50:9b:7b:ca:1f:
                    f4:ab:58:e1:c3:42:f9:56:7f:4c:e9:a8:a8:c1:0d:
                    bf:c6:c7:d7:89:53:5e:51:26:7c:3c:3f:a1:27:a8:
                    3c:0e:58:e5:f5:d9:79:05:c2:16:c6:80:47:a6:ea:
                    fb:05:3d:6a:0e:15:2c:f3:71:e1:bb:5d:85:56:9e:
                    58:bd:ab:be:c8:31:c5:52:e6:1e:76:b0:ed:64:84:
                    f9:ab:cd:9b:43:81:17:6c:b4:49:6c:d4:35:08:49:
                    af:4b:9e:ee:c0:0b:49:8f:28:b3:57:14:19:9d:9c:
                    72:c1:b1:5c:5b:89:fb:22:68:aa:f1:5e:05:bf:14:
                    cc:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:CB:76:F5:1E:DE:F1:FD:E6:92:13:33:56:02:51:77:FF:92:65:22
            X509v3 Authority Key Identifier:
                keyid:53:94:E5:7D:28:57:77:FD:75:14:28:D1:5C:B0:FB:2F:C5:92:C7:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5TlfShXd_11FCjRXLD7L8WSx6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:1a:bc:24:be:95:bb:f7:2e:07:79:e5:83:39:15:b4:73:cf:
         41:44:94:b5:cd:a4:82:b0:47:96:74:ee:63:7c:98:39:db:b8:
         51:14:58:76:b6:f1:d9:4b:32:a0:34:e4:4d:33:c8:62:78:fa:
         ec:56:a5:ba:16:7e:ee:64:fd:b3:18:49:17:0f:c7:b6:a1:cc:
         fa:99:5e:70:e3:0d:55:28:bd:5a:fb:9c:65:9e:11:33:fe:6d:
         71:cd:eb:9a:4e:b3:82:8b:e5:41:48:4f:8c:6a:11:ad:66:52:
         91:8a:ff:5c:14:84:0b:5d:c7:8a:31:6d:ba:94:c9:46:f6:b5:
         0f:e4:fb:c4:17:7b:8e:5e:c0:38:9d:9a:98:1f:e4:a8:59:25:
         3b:16:bb:7b:e8:90:a6:51:9d:62:d3:7a:db:e2:ac:1b:81:54:
         dd:2e:ea:67:55:7c:a7:f4:9c:ef:14:d4:ce:f2:c3:a2:52:67:
         d4:0e:24:43:a9:99:d5:b3:e6:39:fc:f2:1a:5c:df:0e:95:2d:
         bc:14:18:f4:4a:a3:95:33:11:43:fe:ad:e7:d8:6a:46:02:ba:
         fb:91:59:ee:99:e8:c6:80:63:3e:0a:29:7f:1f:70:3a:03:cc:
         3a:3d:09:92:18:db:db:7a:a0:5f:95:43:6a:96:71:aa:7d:8c:
         6b:f9:2f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 06:10:56 2025 by rpki-client