Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.mft
File:                     T_UoRyFcSiLp8RSebL_t901hzos.mft (raw, json)
Hash identifier:          1dPdQ47UImzTnXBxZosg5dDDeJw0B6J59se/FZJfBEI=
Subject key identifier:   64:0E:75:C6:F6:AF:65:C2:B0:A1:C5:B3:79:88:D7:37:92:A1:38:7B
Authority key identifier: 4F:F5:28:47:21:5C:4A:22:E9:F1:14:9E:6C:BF:ED:F7:4D:61:CE:8B
Certificate issuer:       /CN=A91F33A5/serialNumber=4FF52847215C4A22E9F1149E6CBFEDF74D61CE8B
Certificate serial:       0381
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T_UoRyFcSiLp8RSebL_t901hzos.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.mft
Manifest number:          035D
Signing time:             Sat 23 Aug 2025 01:20:36 +0000
Manifest this update:     Sat 23 Aug 2025 01:20:35 +0000
Manifest next update:     Sat 30 Aug 2025 01:20:35 +0000
Files and hashes:         1: T_UoRyFcSiLp8RSebL_t901hzos.crl (hash: AOTgpj/dxfZfGr+zM5OHFq8ZWseajkqmRHnPbv3z9P4=)
                          2: 23D7B1B81EDD11ED83B7963BC4F9AE02.roa (hash: +NKVmmAlTqfQ2iMjaVoJrXMEpqc9NIqiFPPAM8s8GoM=)
                          3: D9750E78F01111EFB1720645C4F9AE02.roa (hash: N5u2+srCZYEKTDhtP+lxLTAjcpl++wd0KdnyCpSI0Uo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.crl
                          rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T_UoRyFcSiLp8RSebL_t901hzos.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 01:20:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 897 (0x381)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F33A5, serialNumber=4FF52847215C4A22E9F1149E6CBFEDF74D61CE8B
        Validity
            Not Before: Aug 23 01:20:35 2025 GMT
            Not After : Aug 30 01:20:35 2025 GMT
        Subject: CN=68a91764-7709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5b:b8:cd:82:3a:4a:a8:07:03:07:c8:38:f5:
                    22:e6:fa:42:f1:fd:f4:b5:6a:0f:97:e7:77:0e:35:
                    d6:72:3a:87:14:96:4e:33:6f:ce:e5:10:b6:9d:cd:
                    8c:41:bf:87:77:02:9c:0e:32:82:5c:d2:8d:eb:3e:
                    cb:0c:92:21:6b:79:95:a8:fe:5f:40:a4:8f:83:c0:
                    6e:69:1f:b8:6e:80:79:93:f8:9d:50:f5:c5:3f:9b:
                    cb:3d:f4:3f:41:80:b8:f6:85:00:f4:49:20:14:5c:
                    17:47:5e:63:3b:27:f7:2e:4e:fc:05:33:c6:46:0e:
                    fa:5a:9c:8d:0f:07:69:b8:88:d2:47:96:c4:a4:1d:
                    e0:0b:ff:8c:96:1e:9a:e4:17:bc:b2:bd:68:04:2b:
                    b5:ae:3d:f9:64:5a:8b:5f:f5:b5:94:30:6e:9e:fa:
                    a9:98:4a:05:ff:c6:47:43:7d:8f:56:79:d9:2d:f8:
                    81:6b:73:ee:28:3e:a4:d9:7e:87:f8:d7:91:b5:0a:
                    35:9a:a9:60:db:66:12:ff:31:fa:28:4b:f6:ce:26:
                    a6:d9:bb:da:81:b6:8d:4c:0f:51:38:f1:0d:43:35:
                    d0:43:cd:8a:fd:ba:6a:91:51:a0:f2:c4:35:f4:c5:
                    b0:03:eb:e0:90:33:8a:6f:c4:a8:9a:e5:53:5c:5e:
                    92:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:0E:75:C6:F6:AF:65:C2:B0:A1:C5:B3:79:88:D7:37:92:A1:38:7B
            X509v3 Authority Key Identifier:
                keyid:4F:F5:28:47:21:5C:4A:22:E9:F1:14:9E:6C:BF:ED:F7:4D:61:CE:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T_UoRyFcSiLp8RSebL_t901hzos.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:aa:0f:b4:ea:85:1d:3d:2c:5e:4b:16:74:a8:a8:93:35:8c:
         d2:68:be:41:6b:23:8a:5e:28:72:f3:0a:8e:59:28:7e:d9:7b:
         60:b3:bd:f6:87:75:51:21:d0:3f:79:b3:ec:7a:cc:bf:9e:4e:
         f0:ae:ad:4c:8b:5d:e4:39:f3:2a:7f:fd:65:cc:3c:5b:fb:5d:
         53:2c:e3:89:fa:3b:ea:5b:c8:73:ca:fb:bf:8b:c6:07:49:8d:
         04:ed:7b:96:a3:a3:4b:8c:80:e5:22:93:ac:ba:de:8e:e5:e5:
         41:3d:5f:31:f3:21:33:7f:98:0b:1c:26:05:5e:74:6e:5a:b0:
         4c:46:b5:0e:0d:1d:bf:7e:95:68:32:ef:0c:1c:da:f2:92:c6:
         94:87:53:28:74:ab:de:8d:9b:4b:bb:ef:ba:12:6b:3f:7a:9e:
         5c:f9:be:c2:6f:c6:cd:81:d0:31:6f:0b:d7:91:02:8c:12:88:
         b8:87:e2:9e:da:aa:52:01:75:9b:fd:c5:34:56:a7:88:49:93:
         ae:fb:79:8b:33:b8:5e:f8:61:60:d8:f0:b9:10:9f:49:6d:7a:
         51:4f:b6:c0:6c:de:f8:51:80:32:ca:c4:62:9c:8f:2f:ec:0c:
         f6:e7:22:8a:3d:17:a8:e0:b6:1f:06:cf:e3:6b:81:ee:5a:2b:
         8c:17:d6:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:14:50 2025 by rpki-client