Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118749/BA57DBA6DC2011EF91B5401EC4F9AE02/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.mft
File:                     lUWdXR6wQJX9Fj8NhNHzpGwV5PA.mft (raw, json)
Hash identifier:          ftvk3HMjBGE3vyxaoPAN7TdZkL/t89YdCFcGTWi3keg=
Subject key identifier:   5F:76:F1:B3:F2:84:F3:76:6E:C0:C4:67:B6:D7:33:B9:2B:FE:EC:EA
Authority key identifier: 95:45:9D:5D:1E:B0:40:95:FD:16:3F:0D:84:D1:F3:A4:6C:15:E4:F0
Certificate issuer:       /CN=A9118749/serialNumber=95459D5D1EB04095FD163F0D84D1F3A46C15E4F0
Certificate serial:       63
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118749/BA57DBA6DC2011EF91B5401EC4F9AE02/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.mft
Manifest number:          5F
Signing time:             Sat 19 Jul 2025 07:23:47 +0000
Manifest this update:     Sat 19 Jul 2025 07:23:46 +0000
Manifest next update:     Sat 26 Jul 2025 07:23:46 +0000
Files and hashes:         1: lUWdXR6wQJX9Fj8NhNHzpGwV5PA.crl (hash: ZpoO3sIGUWuHARAZO6e0fzAUfopUYq52q4OW7Faberc=)
                          2: 0D9D8C8CDC2311EFAEB2F679C4F9AE02.roa (hash: e53H18n/zt4tMpCTzx/LyyJ5rGfSmD0vKN+ZK6rIQ0U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118749/BA57DBA6DC2011EF91B5401EC4F9AE02/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.crl
                          rsync://rpki.apnic.net/member_repository/A9118749/BA57DBA6DC2011EF91B5401EC4F9AE02/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 07:23:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99 (0x63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118749, serialNumber=95459D5D1EB04095FD163F0D84D1F3A46C15E4F0
        Validity
            Not Before: Jul 19 07:23:46 2025 GMT
            Not After : Jul 26 07:23:46 2025 GMT
        Subject: CN=687b4802-8701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6e:c0:0b:20:00:e0:01:5f:28:41:76:63:2f:
                    d3:e6:e2:12:5b:0f:28:53:e6:b6:a9:d9:dd:b7:24:
                    df:07:eb:3d:ac:3d:1e:42:f6:73:ab:b2:01:4b:2a:
                    30:88:92:66:28:c5:7f:0c:e7:fe:20:7f:fd:30:78:
                    fa:5e:87:fb:49:0a:94:2b:d0:59:c8:0a:a6:15:04:
                    51:aa:b0:42:a9:17:5c:df:e5:bc:f2:ad:3e:ab:83:
                    87:74:30:fc:9e:83:86:7b:84:4b:f5:f8:5d:50:fb:
                    32:77:7c:00:d1:c3:e8:d8:6c:6f:d2:fc:b1:fc:9d:
                    6c:85:c9:82:47:a7:cd:c4:52:54:bb:24:04:21:87:
                    d9:bc:51:ad:bf:d5:d7:fe:04:79:69:d3:90:7d:c5:
                    89:85:c9:ff:9f:7d:44:f7:aa:09:17:3f:70:e3:d6:
                    11:63:e2:51:da:27:ee:96:f8:57:53:80:25:34:01:
                    b3:47:cd:f5:2a:8b:d9:c4:86:bf:40:20:55:d9:f7:
                    cf:94:00:80:89:38:7f:48:27:fd:84:f7:ac:71:77:
                    72:dc:ea:e3:5e:08:80:81:05:1b:07:22:4c:6b:70:
                    5e:8d:c2:f4:aa:4a:7a:ae:f6:b2:6b:a6:c4:26:49:
                    cc:5c:0a:aa:1c:30:d0:b3:29:b8:23:d8:c5:45:16:
                    d0:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:76:F1:B3:F2:84:F3:76:6E:C0:C4:67:B6:D7:33:B9:2B:FE:EC:EA
            X509v3 Authority Key Identifier:
                keyid:95:45:9D:5D:1E:B0:40:95:FD:16:3F:0D:84:D1:F3:A4:6C:15:E4:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118749/BA57DBA6DC2011EF91B5401EC4F9AE02/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118749/BA57DBA6DC2011EF91B5401EC4F9AE02/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:9f:5d:18:ae:2b:b1:6c:5c:2d:29:dc:bc:dc:9d:75:d2:0a:
         e0:dc:59:bb:d9:6f:b5:45:f5:a6:4b:45:5e:df:f8:c4:46:9b:
         2c:ab:c1:3e:cb:fa:cb:7e:68:37:ed:f6:e3:0c:fc:88:f5:f2:
         28:d5:e6:ad:c3:d5:96:82:10:41:1b:56:00:b6:b8:3d:ab:66:
         bf:7d:4a:b2:1f:ae:59:d9:25:c0:58:e3:4c:1f:d6:f9:a1:8a:
         6e:80:c2:a7:59:2f:bd:0a:2f:c3:9f:f2:0e:da:e7:d4:0d:63:
         ae:64:85:1a:55:23:df:47:04:cb:55:85:99:e9:cc:29:15:d8:
         89:34:a4:91:47:e0:3d:fe:23:76:f3:27:5a:04:46:50:09:ee:
         1a:dd:f4:5d:a7:c5:b1:44:7e:ef:11:48:d7:6b:0c:b6:a8:df:
         c5:09:a4:9d:56:5f:fc:dc:44:2e:51:2a:44:f8:77:0e:4f:79:
         1c:4b:a0:5c:b2:20:ae:68:d4:1c:36:05:cc:7f:34:13:50:2e:
         20:9f:06:3a:24:cd:a9:ef:1e:ca:c0:1e:56:fe:69:1c:fc:7d:
         8e:e3:b1:cf:3c:4d:df:ed:dd:85:70:d9:71:7c:e7:76:3e:59:
         6b:a5:d5:53:88:61:13:c5:47:43:94:13:c6:99:03:8a:e8:fe:
         f6:77:d3:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 06:13:41 2025 by rpki-client