Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft
File:                     0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft (raw, json)
Hash identifier:          jn01Fg8uRLmEvJv4I9eSsauaMGAgWh1O+FQ1Y19VaNw=
Subject key identifier:   D3:2B:A3:4C:7C:8C:F8:68:2E:4F:81:E0:31:2C:A9:93:F7:9C:71:E0
Authority key identifier: D1:47:9E:F6:03:41:E3:9E:CA:17:2E:43:76:44:3A:47:19:75:CB:EF
Certificate issuer:       /CN=A91D1691/serialNumber=D1479EF60341E39ECA172E4376443A471975CBEF
Certificate serial:       18A2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Uee9gNB457KFy5DdkQ6Rxl1y-8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft
Manifest number:          189C
Signing time:             Wed 02 Jul 2025 15:55:23 +0000
Manifest this update:     Wed 02 Jul 2025 15:55:22 +0000
Manifest next update:     Wed 09 Jul 2025 15:55:22 +0000
Files and hashes:         1: 0Uee9gNB457KFy5DdkQ6Rxl1y-8.crl (hash: 24tni+MjnzDM0YosktDHD1yVBRHkj29W1XAOBjRsReo=)
                          2: AE21A9C6818911EA81577016C4F9AE02.roa (hash: 7SxWILLdTrzJpYEt8Y/6XTCMP3sdZqZUyA4GDfqu88g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.crl
                          rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Uee9gNB457KFy5DdkQ6Rxl1y-8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 15:55:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6306 (0x18a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1691, serialNumber=D1479EF60341E39ECA172E4376443A471975CBEF
        Validity
            Not Before: Jul  2 15:55:22 2025 GMT
            Not After : Jul  9 15:55:22 2025 GMT
        Subject: CN=6865566a-fdb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:40:23:66:7a:30:7d:bd:51:bc:fa:36:73:f5:
                    72:cb:1b:24:4d:08:4d:15:3b:fa:fb:86:e7:e5:97:
                    bd:9a:6f:9e:a9:58:6d:d2:05:1f:d0:e4:b8:e0:f7:
                    b0:c4:85:6c:d6:1f:44:f1:31:63:49:15:54:df:04:
                    2e:e8:42:23:a2:32:85:bf:41:dc:67:7d:b2:5e:bd:
                    eb:bd:6b:b2:28:c9:51:fd:85:e9:28:a1:e0:2a:89:
                    21:2b:7a:df:dc:a5:f9:1e:e7:e5:85:4b:ba:e0:0a:
                    9b:32:7c:d9:8d:71:90:a5:ed:da:59:19:4b:20:ba:
                    7b:b7:ef:68:db:fe:64:0b:4f:c0:c1:24:77:0a:e4:
                    6c:c8:01:33:e9:2e:22:c8:28:f3:2b:6b:68:89:6c:
                    7a:0a:ba:5f:e1:47:b8:0c:c5:fc:32:c2:d6:13:3e:
                    0f:a5:41:2f:67:bd:6f:7a:95:d4:a0:08:c5:ba:ff:
                    6d:02:ba:c8:b2:19:07:d6:48:60:19:d9:00:f8:53:
                    c0:1b:c8:e0:3e:02:39:6b:01:19:39:1f:65:d9:7e:
                    cd:1b:1b:a0:7e:e5:1d:9b:9e:28:9c:51:e0:a6:fb:
                    a3:e8:e7:8a:24:9f:8d:e6:59:2e:49:c1:02:f9:79:
                    16:41:17:f3:55:89:bc:31:f4:f0:da:74:7d:b9:6a:
                    c9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:2B:A3:4C:7C:8C:F8:68:2E:4F:81:E0:31:2C:A9:93:F7:9C:71:E0
            X509v3 Authority Key Identifier:
                keyid:D1:47:9E:F6:03:41:E3:9E:CA:17:2E:43:76:44:3A:47:19:75:CB:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Uee9gNB457KFy5DdkQ6Rxl1y-8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:4c:9e:9d:6b:98:96:61:74:f5:06:0f:f1:d3:1a:59:0b:89:
         e8:b5:ae:6f:e0:05:a0:8f:2e:88:9d:fa:58:32:d2:6d:e1:f0:
         57:49:d0:91:60:eb:ec:7d:0b:82:9e:64:8b:0b:99:8c:2b:08:
         59:eb:d5:e2:ae:33:4d:6d:3a:0a:5b:4b:2e:76:1f:fc:96:07:
         cf:b2:58:d3:92:7f:3d:c7:0c:fc:2f:dd:d8:a9:5b:f5:f6:a8:
         b1:9f:50:5f:c1:ea:56:1e:34:a3:fa:db:6d:71:8f:92:f7:08:
         cb:d1:87:3a:ee:e6:a0:a8:75:bb:4f:8e:dd:c0:0b:f1:97:24:
         8c:dc:ac:97:67:1d:6d:17:35:9c:0b:18:1e:b2:cd:16:bc:d2:
         6a:cf:bd:8d:1f:35:0c:81:f4:fd:22:a0:1b:eb:ca:74:50:f5:
         74:2a:6d:f2:4e:db:a2:83:57:02:84:b5:4a:18:ee:0a:d9:51:
         45:f9:36:e8:29:5f:16:5f:ac:b8:4d:ac:9a:43:b8:e5:be:21:
         92:80:ce:d6:d8:b1:6d:62:60:e4:d3:1a:d9:b1:b8:fb:4e:b9:
         70:0c:91:94:08:19:ab:65:5d:85:e1:38:f7:ee:eb:e8:b9:26:
         c4:3e:b3:6c:81:c8:3f:91:e6:35:e9:ec:a9:b5:21:0b:04:9c:
         30:54:af:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 23:58:41 2025 by rpki-client