Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.mft
File:                     ueYM8Xn06svblJK6X3ys9FI5zPQ.mft (raw, json)
Hash identifier:          X6hmp2MHPd4uS+/6tqCtjZtZf61VzjT/WvIZSJp8kCw=
Subject key identifier:   7E:A8:98:10:9F:A8:4B:A1:F6:43:F5:79:56:E0:D0:8F:84:77:6A:25
Authority key identifier: B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4
Certificate issuer:       /CN=A91EE03B/serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4
Certificate serial:       01FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.mft
Manifest number:          01C2
Signing time:             Tue 01 Jul 2025 04:05:21 +0000
Manifest this update:     Tue 01 Jul 2025 04:05:20 +0000
Manifest next update:     Tue 08 Jul 2025 04:05:20 +0000
Files and hashes:         1: ueYM8Xn06svblJK6X3ys9FI5zPQ.crl (hash: V5EplqI30YYNqma5RD+AzKdRdWlgdNesDIQgT87NibA=)
                          2: 7362D03E37C511EFBA013C34C4F9AE02.roa (hash: 9qnuOOqog1w0/6Ft0fo80AwEmtyxbUWJdcXWk0vjBP0=)
                          3: 14C4C7D4002611EFBD462953C4F9AE02.roa (hash: hi6S2Mh9Zc0AeJAKr2eaBvvBpbecYaUaD50MlmI4NaA=)
                          4: 43E73F1824D011F0805C1741C4F9AE02.roa (hash: tNRSiapsZeWkhtpGA+SHpuAF0dORUNQbpmMkQLwDzaU=)
                          5: D2DF3ACCE25911EF9C741573C4F9AE02.roa (hash: mzsLMpqKZHnpS1jxQCrwB8rjSWZK0J6cgj7y6Sy2ob0=)
                          6: 1DD3ED16BDB611EF8F65515FC4F9AE02.roa (hash: NYziG9pEfTMgU56vyqT4ECUx0+xGwWZL89cQ95occgk=)
                          7: E35133A60ED911EE8A4E0A23C4F9AE02.roa (hash: +LKQHGBjyQavtGbDYZoM0TZlAhYLHnodgT2xhs31P7o=)
                          8: A13BE9EE8EE911EE8698A64FC4F9AE02.roa (hash: BbLe+tzPbnaYWKG7gM1VjEH/wcUFNySxqBWUmVUdKKg=)
                          9: 139300E4BA6911EFA78E2F66C4F9AE02.roa (hash: 1qb949nIw/0R9oQhGQh78XGami+Biv1wB24LyYGiBVo=)
                          10: E17B507E25DF11F0B111A515C4F9AE02.roa (hash: hvgmafeqE7JpAOUh9MIGSNa3kJtd7cqjjE/RR/pff6g=)
                          11: 3F3EDA068CAB11EF8A61C244C4F9AE02.roa (hash: n8rocIcqcCEqWOhQW6COhKUHQ1TT+r5yq9m/cXvntlg=)
                          12: 305C2134666211EFB1D51134C4F9AE02.roa (hash: 678Vn3LLWwx5u4uELhujFENcUsNRng8pzaOjm9n/20Y=)
                          13: AE0A263AB00411EF95939E11C4F9AE02.roa (hash: Hb3S2H5mvG6APMmAW4C0vTeaq85iORr/31KWRV1IZtk=)
                          14: E7DC24BCC4C211EF8670983EC4F9AE02.roa (hash: uEWJ7/SbDN/8MDuGUTA/PUoegQuUTtnZid1qI1+pgB0=)
                          15: 7857C144B87211EE98B04B19C4F9AE02.roa (hash: VfjibvprvBmnfdE90FAhNj0D7QO9B7oG8yc/kCD9FSM=)
                          16: A069EA0C8EE911EE8698A64FC4F9AE02.roa (hash: 1Kpd2YjRlMJbYQzqvODxmlNt6RPiHgoY7Xsf29roK9M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl
                          rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Jul 2025 04:05:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 506 (0x1fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE03B, serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4
        Validity
            Not Before: Jul  1 04:05:20 2025 GMT
            Not After : Jul  8 04:05:20 2025 GMT
        Subject: CN=68635e80-a4fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:74:26:f3:29:ed:b8:9b:7b:d7:02:46:42:f5:
                    22:c1:55:2b:7f:e9:a3:fd:e5:ad:74:56:d1:34:32:
                    47:77:3d:64:81:9b:ef:fa:05:3e:90:a9:79:5c:27:
                    c7:be:32:81:de:d0:5a:e2:35:06:36:2e:25:b5:9f:
                    d5:bb:58:3c:9a:e1:99:d5:09:61:1f:a3:43:2f:e7:
                    d2:82:0d:cb:b9:84:70:36:cd:2a:a1:7a:9b:13:57:
                    7c:98:f4:b7:c7:78:03:07:f2:17:d5:7c:26:c2:b5:
                    c2:13:c6:4c:74:11:46:6e:d1:90:8e:15:4d:c6:61:
                    b9:fb:21:cd:f5:16:05:a0:5d:06:07:5c:e7:95:eb:
                    28:b8:54:78:c2:a3:16:86:63:39:a3:ae:cf:d6:8e:
                    3f:97:24:e6:b3:74:6b:32:8f:14:f7:4b:6e:ca:ef:
                    c6:0b:76:d6:5b:79:2f:6f:b0:16:f1:c2:f5:0b:43:
                    3f:f2:a1:94:88:4c:c9:c9:3f:f4:80:ab:63:ed:96:
                    fe:8c:19:ba:29:c1:06:45:cb:79:6b:0d:43:1e:6d:
                    6a:89:50:79:ab:ee:75:c0:0c:7b:9f:17:d0:74:51:
                    f9:e6:94:a6:89:70:99:49:72:f7:ec:7f:6c:06:2d:
                    8b:30:3e:2c:21:7f:e3:46:a4:0a:99:7a:fa:c8:3d:
                    3e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A8:98:10:9F:A8:4B:A1:F6:43:F5:79:56:E0:D0:8F:84:77:6A:25
            X509v3 Authority Key Identifier:
                keyid:B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:37:73:63:18:29:42:41:c6:41:4d:bd:df:c0:ed:c2:21:b7:
         ae:81:b1:23:76:51:cf:58:da:11:d4:a8:30:e1:f5:0d:2b:30:
         2b:1f:80:ac:b5:b2:06:c9:aa:22:a5:91:e1:94:f8:47:45:23:
         d3:22:ec:63:ef:c0:02:df:38:e0:32:c2:30:e6:0e:1e:6e:d8:
         b4:c2:c5:87:7e:72:54:55:49:e4:8a:0e:87:66:13:d5:84:b3:
         5b:bd:38:3a:d6:dc:ce:cd:62:f7:30:c3:97:c1:5d:7f:b5:25:
         4d:59:2f:7d:6a:bf:6f:60:75:a9:94:68:fb:04:51:8a:f0:eb:
         ad:39:b8:a1:41:7c:28:e8:e1:47:df:ce:d6:59:ad:5b:89:95:
         41:b0:a2:6f:f9:3d:4c:6b:fb:d3:cb:6d:f9:03:60:31:69:fd:
         f7:b4:ce:b9:fc:c6:20:48:f8:fa:89:81:f5:df:62:f5:b7:6a:
         b0:16:5c:02:92:a6:0a:52:52:19:e2:7b:46:28:b9:4b:03:cd:
         a4:8c:bb:87:32:5f:fa:00:64:18:e3:50:7e:ed:c5:97:d7:e1:
         39:15:82:c2:5d:31:2c:a4:cc:a8:89:36:f6:1a:16:23:33:5b:
         c2:09:de:ac:3c:11:ac:2f:4a:e1:89:50:51:41:c6:c4:a7:8f:
         66:e9:1a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 02:08:20 2025 by rpki-client