Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.mft
File:                     uEwjlp7XnA4xwTwUUAEuIkbT-U0.mft (raw, json)
Hash identifier:          zz2ZQ/ig4rJSOIMwqe8Q3d/gYiB8pgbzpgbI+oDVygE=
Subject key identifier:   B1:EB:3A:C9:B2:19:E1:0F:C8:F6:83:01:ED:84:D5:E4:CA:4D:08:8A
Authority key identifier: B8:4C:23:96:9E:D7:9C:0E:31:C1:3C:14:50:01:2E:22:46:D3:F9:4D
Certificate issuer:       /CN=A911F2DF/serialNumber=B84C23969ED79C0E31C13C1450012E2246D3F94D
Certificate serial:       DD
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uEwjlp7XnA4xwTwUUAEuIkbT-U0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.mft
Manifest number:          D7
Signing time:             Sat 19 Jul 2025 05:49:40 +0000
Manifest this update:     Sat 19 Jul 2025 05:49:39 +0000
Manifest next update:     Sat 26 Jul 2025 05:49:39 +0000
Files and hashes:         1: uEwjlp7XnA4xwTwUUAEuIkbT-U0.crl (hash: +KtTt7mJziBHRBqs6v7PqMFZtWIIbbE0yIu/CKdPLIw=)
                          2: 92E390AC958E11EF87A4040BC4F9AE02.roa (hash: ziX6uRrjdN8XtvPVmk67ZGOFErPjsTpewvnUOr01Tm8=)
                          3: 7FAE29E8958E11EF9CC0DD0AC4F9AE02.roa (hash: 3kGsoUmf1FpifCPtPS1E6u6lzuQTEBurC189TVcNMdw=)
                          4: 659B37E4958E11EFAFF1870AC4F9AE02.roa (hash: XEN2blQh3Cs+gyEWpdkV0R6BegNBQ93goCybhrow5bM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.crl
                          rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uEwjlp7XnA4xwTwUUAEuIkbT-U0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 05:49:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 221 (0xdd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F2DF, serialNumber=B84C23969ED79C0E31C13C1450012E2246D3F94D
        Validity
            Not Before: Jul 19 05:49:39 2025 GMT
            Not After : Jul 26 05:49:39 2025 GMT
        Subject: CN=687b31f4-1650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4f:66:2b:6d:c2:a4:2d:0e:cb:9d:e2:e3:7f:
                    12:77:66:00:13:24:0b:cb:ef:f0:6f:36:dc:c2:05:
                    19:36:0f:fb:1d:f7:9b:47:9c:a2:15:38:0b:8f:b2:
                    bd:8a:0e:04:65:ff:77:8a:25:5d:d2:89:f2:51:95:
                    b3:c2:25:a7:e1:4a:ef:c0:dd:b5:4b:c2:c0:57:50:
                    32:52:fe:b6:7d:01:f0:8a:4e:8e:1a:a5:db:a1:1a:
                    8d:48:07:f9:a8:f4:94:af:36:1a:ba:b5:ac:08:d0:
                    b5:cf:71:b4:8e:9d:48:fe:fb:e0:24:16:6b:f2:2f:
                    92:cd:19:62:1c:f4:23:ba:a6:87:fe:eb:38:56:fe:
                    85:42:71:87:16:36:e7:a1:0d:01:5a:bd:d0:26:ad:
                    5a:dd:0c:1e:81:ca:fc:9b:c1:fc:d2:dd:62:2b:e5:
                    63:dc:e4:09:b3:e9:d9:e2:4b:5e:2d:84:54:0e:ca:
                    ca:e7:77:a0:43:3a:68:93:73:86:62:5f:d5:b3:7a:
                    1f:43:7b:25:49:35:6e:00:c7:1c:78:ed:27:1f:5b:
                    96:e7:fd:7a:fd:08:22:6b:ca:84:a3:dc:15:6a:98:
                    45:13:57:f3:ff:52:2f:12:8b:41:f9:d1:1f:ff:ac:
                    b0:d1:37:6e:db:2f:7a:6a:7a:a5:14:10:ad:49:9d:
                    aa:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:EB:3A:C9:B2:19:E1:0F:C8:F6:83:01:ED:84:D5:E4:CA:4D:08:8A
            X509v3 Authority Key Identifier:
                keyid:B8:4C:23:96:9E:D7:9C:0E:31:C1:3C:14:50:01:2E:22:46:D3:F9:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uEwjlp7XnA4xwTwUUAEuIkbT-U0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:82:26:6b:0b:1e:d1:96:4e:1f:fe:e3:69:60:1b:22:4a:33:
         28:d1:82:16:7b:d3:04:86:0b:e5:30:5f:2a:ae:ab:18:7c:27:
         59:97:cf:cd:c8:66:96:bd:d4:32:ef:ae:90:f3:6a:b1:0b:b9:
         ba:f5:b4:d0:f8:a7:a6:32:83:84:a7:d9:72:72:92:9e:00:51:
         db:e7:9f:79:b4:87:ba:5c:72:da:e5:c3:b9:6b:72:8d:ae:2f:
         78:bb:94:db:1d:0c:90:4e:1b:3a:c8:b9:57:46:05:be:b8:63:
         fc:51:37:96:69:91:71:47:b5:aa:45:37:6c:91:18:e0:0a:bb:
         30:46:09:09:2e:77:1c:48:b9:ee:e2:39:70:ff:d8:16:fd:b1:
         52:ce:f6:28:55:45:20:00:2e:eb:bb:68:a3:c7:66:0b:5c:b2:
         24:d2:e4:51:ed:f6:8c:d2:c7:d1:01:82:23:f8:e2:d3:4a:55:
         98:11:c7:3a:9a:44:95:c0:a2:0f:b5:d4:20:29:6d:a1:95:14:
         1e:d1:91:ed:8d:de:48:5d:69:10:ba:85:64:40:22:cb:d5:09:
         88:e9:c4:29:4a:61:01:30:4f:52:09:4b:14:df:04:fc:99:a2:
         64:41:67:86:85:24:42:e0:ea:23:dd:02:eb:4c:b5:c9:be:08:
         24:5a:38:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 02:20:11 2025 by rpki-client