Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140467/9AA980D6F1E011EA8D4A9E32C4F9AE02/uMMvxNeTGtQkFAcwaguZasjJn-s.mft
File:                     uMMvxNeTGtQkFAcwaguZasjJn-s.mft (raw, json)
Hash identifier:          TpYXOqhtEjfWyzaHqoltUUgN8/YPlOZFW8z5xvxQcpc=
Subject key identifier:   47:5C:F5:55:21:A4:09:A6:A6:F3:80:07:50:E5:3D:E6:97:B1:01:DA
Authority key identifier: B8:C3:2F:C4:D7:93:1A:D4:24:14:07:30:6A:0B:99:6A:C8:C9:9F:EB
Certificate issuer:       /CN=A9140467/serialNumber=B8C32FC4D7931AD4241407306A0B996AC8C99FEB
Certificate serial:       07F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uMMvxNeTGtQkFAcwaguZasjJn-s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140467/9AA980D6F1E011EA8D4A9E32C4F9AE02/uMMvxNeTGtQkFAcwaguZasjJn-s.mft
Manifest number:          07F0
Signing time:             Tue 22 Jul 2025 21:14:19 +0000
Manifest this update:     Tue 22 Jul 2025 21:14:19 +0000
Manifest next update:     Tue 29 Jul 2025 21:14:19 +0000
Files and hashes:         1: uMMvxNeTGtQkFAcwaguZasjJn-s.crl (hash: 57Cbrzn1J2oyk6JoKedxG253cFttdgwgRxgBypbxKlE=)
                          2: 02E60C72F1E211EAA2361B34C4F9AE02.roa (hash: hb//PUQTk+DCfdFHXSzcOi63fqVJTWVzPOt8dljizSk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140467/9AA980D6F1E011EA8D4A9E32C4F9AE02/uMMvxNeTGtQkFAcwaguZasjJn-s.crl
                          rsync://rpki.apnic.net/member_repository/A9140467/9AA980D6F1E011EA8D4A9E32C4F9AE02/uMMvxNeTGtQkFAcwaguZasjJn-s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uMMvxNeTGtQkFAcwaguZasjJn-s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Jul 2025 21:14:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2039 (0x7f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140467, serialNumber=B8C32FC4D7931AD4241407306A0B996AC8C99FEB
        Validity
            Not Before: Jul 22 21:14:19 2025 GMT
            Not After : Jul 29 21:14:19 2025 GMT
        Subject: CN=687fff2b-cb23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:00:b3:e5:ed:6e:1e:01:2c:e0:76:f7:e4:05:
                    27:e0:13:50:c2:b2:d9:49:4d:ca:9f:c8:98:a7:bd:
                    17:f8:24:f1:34:3c:1e:cf:54:5d:33:25:d0:e8:8f:
                    e6:1b:a5:93:23:09:b4:7f:39:dc:15:b5:68:13:3e:
                    dc:ed:57:19:55:58:fa:b5:4d:3b:29:6c:e2:dd:4e:
                    f1:a6:8b:42:ff:db:91:95:1c:08:40:f3:c3:6f:e9:
                    65:5e:8a:55:9f:10:cc:3e:ce:b7:59:a8:08:a1:1c:
                    99:a4:40:18:4c:a5:99:11:27:fb:49:7d:20:9d:91:
                    ce:d9:78:1f:2c:dd:c4:69:6c:b7:35:b0:23:6a:af:
                    d8:37:a2:8e:d0:f6:a1:56:21:23:7d:36:cf:bf:60:
                    ad:19:34:e5:52:c0:95:d7:d6:11:f0:b3:ee:e5:eb:
                    dc:b4:9b:c9:c0:9a:22:c3:fe:be:26:aa:db:b9:6c:
                    2f:ac:b7:e6:8c:00:dd:15:12:a2:90:c5:84:2a:43:
                    c4:37:d1:36:8f:7d:e6:7d:39:b8:04:c5:53:ba:e5:
                    32:ed:ba:c7:88:ac:67:3f:1b:90:d5:a2:1c:f5:82:
                    a4:c3:c4:48:28:13:14:2e:ec:16:b4:b3:56:fb:a0:
                    16:8f:e2:d7:6f:dc:b0:92:5c:df:0d:63:7d:ba:23:
                    4d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:5C:F5:55:21:A4:09:A6:A6:F3:80:07:50:E5:3D:E6:97:B1:01:DA
            X509v3 Authority Key Identifier:
                keyid:B8:C3:2F:C4:D7:93:1A:D4:24:14:07:30:6A:0B:99:6A:C8:C9:9F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140467/9AA980D6F1E011EA8D4A9E32C4F9AE02/uMMvxNeTGtQkFAcwaguZasjJn-s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uMMvxNeTGtQkFAcwaguZasjJn-s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140467/9AA980D6F1E011EA8D4A9E32C4F9AE02/uMMvxNeTGtQkFAcwaguZasjJn-s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:cd:49:64:e3:aa:4a:77:e7:a0:a2:04:a4:05:a2:20:67:e1:
         fd:9b:da:0b:0b:b6:fb:16:e6:02:eb:9e:ff:b9:1b:8a:4f:36:
         98:fb:59:57:8f:ab:9c:eb:f0:43:5c:b6:40:b8:b7:03:6d:48:
         10:2d:0a:1b:32:59:14:be:f1:87:5c:d7:07:e4:bd:a9:59:24:
         20:27:1c:ea:a8:65:ca:d1:73:e1:9f:d5:b4:2c:32:7a:ec:55:
         d2:f2:86:52:a2:4d:5b:b5:2f:8d:f9:a3:94:b0:e1:55:69:57:
         d2:2d:79:8e:f4:eb:44:49:19:27:74:0a:02:f0:7d:01:e2:ea:
         6a:4f:77:d8:04:f7:9d:f6:91:dc:3a:50:37:03:a0:2c:21:81:
         72:43:5c:b7:03:07:fb:79:d6:15:8f:d0:a3:5c:d6:00:a3:8f:
         b1:f4:b8:c1:69:d2:6e:d4:0c:de:8e:c8:fb:5f:cf:83:72:d0:
         89:18:85:14:d2:e5:3e:a4:ad:ff:33:49:3b:85:ae:aa:bb:db:
         b0:a2:a6:6a:48:ea:59:3a:a5:b7:f6:59:f3:73:3c:c8:98:80:
         2f:a6:07:f2:b0:b0:4c:79:f7:57:da:08:3d:f3:de:57:c6:3d:
         f2:a9:86:a2:81:c2:f3:ce:07:ca:1b:ad:54:58:c5:72:21:58:
         52:df:01:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:37:42 2025 by rpki-client