Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/C13116F228D311ED8FBD6D6CC4F9AE02/Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.mft
File:                     Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.mft (raw, json)
Hash identifier:          fwTEjP5yCAgJUe0lztnjyws9LZjQRtZEwOPvDXbI+Ho=
Subject key identifier:   E2:24:67:E8:09:A9:AA:DB:B7:82:F5:78:C0:26:2B:28:27:94:0B:50
Authority key identifier: 52:FE:2B:6B:7F:49:7F:94:F1:D4:92:D1:91:7B:48:64:78:BF:59:D6
Certificate issuer:       /CN=A9125475/serialNumber=52FE2B6B7F497F94F1D492D1917B486478BF59D6
Certificate serial:       0262
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125475/C13116F228D311ED8FBD6D6CC4F9AE02/Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.mft
Manifest number:          0259
Signing time:             Fri 18 Jul 2025 14:20:59 +0000
Manifest this update:     Fri 18 Jul 2025 14:20:58 +0000
Manifest next update:     Fri 25 Jul 2025 14:20:58 +0000
Files and hashes:         1: Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.crl (hash: vqjILRtKBKiuRQLw61e4ulDW7WXt3au1ecWB5otraCs=)
                          2: 84094296EF5E11EF81B0790EC4F9AE02.roa (hash: Ckg4hw6DabBO2d7okoEF2pancj6gViKBZRAEfAu13oo=)
                          3: DFA79FA2EFD811EE87F4440AC4F9AE02.roa (hash: hQScYTUNqe8SfNNwSXoRwPKv/1EvvMjHkzfsNEe+pKg=)
                          4: C3923CE6EFD811EEB93EE009C4F9AE02.roa (hash: EgTNqiKvmZXEy9LjOSG2dN0ynTpnYuhjXlrpPTL50KA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125475/C13116F228D311ED8FBD6D6CC4F9AE02/Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.crl
                          rsync://rpki.apnic.net/member_repository/A9125475/C13116F228D311ED8FBD6D6CC4F9AE02/Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 14:20:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 610 (0x262)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125475, serialNumber=52FE2B6B7F497F94F1D492D1917B486478BF59D6
        Validity
            Not Before: Jul 18 14:20:58 2025 GMT
            Not After : Jul 25 14:20:58 2025 GMT
        Subject: CN=687a584a-0f3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:64:db:07:ca:f7:3f:f3:16:0e:84:89:3c:1a:
                    21:a2:4c:52:e9:ee:03:3f:38:37:bb:32:ae:f5:e0:
                    28:70:88:b9:04:bc:75:4f:8e:b6:ff:9f:a4:f2:96:
                    1a:56:aa:10:42:9c:5e:7d:c2:5d:9d:2c:4b:4d:fd:
                    b2:78:a9:e9:22:f6:d5:9e:7c:cd:8d:ca:69:3f:68:
                    fd:eb:ee:f7:2a:3d:3e:cf:32:d0:22:f7:a1:a8:3b:
                    a2:88:fe:71:4e:ca:ab:9b:ed:32:fe:65:53:c6:cf:
                    6f:5d:57:f6:ef:55:3d:48:75:71:80:97:4d:f2:44:
                    c2:b7:79:29:bc:66:c0:86:c6:0e:3f:50:8e:59:7c:
                    72:42:31:4f:b9:63:f8:13:58:a4:bb:6c:15:bf:4e:
                    6d:d2:ec:dd:a2:ad:db:f4:7d:2c:80:82:71:eb:e4:
                    3e:2d:a5:33:40:92:a6:e9:8c:b9:7d:24:eb:6b:54:
                    25:9c:78:35:e8:6d:10:09:94:2b:d8:04:73:6f:43:
                    a5:59:4e:43:83:11:ca:dd:b8:a4:72:bb:42:89:d1:
                    8e:4c:1e:41:92:e7:ca:97:a4:1d:0f:2b:09:ba:0f:
                    47:b9:7e:8d:45:21:13:a3:a2:aa:d9:89:47:dd:b3:
                    40:43:c7:aa:e8:9a:ae:57:1e:c8:86:44:19:98:5f:
                    33:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:24:67:E8:09:A9:AA:DB:B7:82:F5:78:C0:26:2B:28:27:94:0B:50
            X509v3 Authority Key Identifier:
                keyid:52:FE:2B:6B:7F:49:7F:94:F1:D4:92:D1:91:7B:48:64:78:BF:59:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125475/C13116F228D311ED8FBD6D6CC4F9AE02/Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/C13116F228D311ED8FBD6D6CC4F9AE02/Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:fd:97:8f:48:52:c4:8e:ba:80:42:ec:84:2d:f6:c2:d3:28:
         b7:87:f1:0c:24:46:43:15:a2:4c:47:67:09:87:29:4e:55:05:
         e7:bf:83:3a:bc:78:b8:dd:e3:a4:b1:6d:97:bc:e9:6a:68:3f:
         12:03:23:cc:6a:a7:56:3c:5b:93:92:71:41:9a:fa:6a:08:46:
         32:2a:1d:32:95:0a:ad:4a:ae:93:c0:01:a6:35:3a:39:a1:2d:
         22:d9:ee:50:3e:1e:82:25:e9:01:89:db:7d:93:45:8f:40:6a:
         9f:ec:cb:f6:d5:a8:01:80:40:01:0a:06:15:61:0c:c3:96:ce:
         0e:2c:3e:e4:a5:34:60:a6:93:48:e9:2a:0a:dd:9c:da:e2:80:
         ec:42:c4:20:53:be:2f:17:52:1e:fd:a4:5f:86:b4:10:4f:94:
         b6:5b:1f:60:47:1a:12:a0:ae:9e:1e:b0:54:f5:e0:01:7b:f2:
         dd:2b:10:65:72:57:8c:2a:a1:d0:39:91:cf:fb:42:8b:3d:9a:
         e0:be:00:4f:69:e2:7f:d3:82:b8:b3:71:f0:96:7b:a3:0a:b2:
         d0:43:ca:29:ed:ee:68:da:9e:0e:01:86:6f:77:50:7a:ea:13:
         3e:46:7d:58:1c:92:92:c7:28:41:4d:eb:53:f2:62:b9:9d:0c:
         f0:04:a8:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 07:38:29 2025 by rpki-client