Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.mft
File:                     IugbMnyx-zUB4Fr6uUEhkY_bW14.mft (raw, json)
Hash identifier:          RRYIG02b6pSBZdwHyBjTjR4YYIah4k9s4jLxrHq1ank=
Subject key identifier:   88:48:B9:06:3B:FC:4C:BE:32:13:29:7F:BF:77:61:B7:4B:17:A6:CD
Authority key identifier: 22:E8:1B:32:7C:B1:FB:35:01:E0:5A:FA:B9:41:21:91:8F:DB:5B:5E
Certificate issuer:       /CN=A914B5BD/serialNumber=22E81B327CB1FB3501E05AFAB94121918FDB5B5E
Certificate serial:       1873
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IugbMnyx-zUB4Fr6uUEhkY_bW14.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.mft
Manifest number:          1849
Signing time:             Tue 22 Jul 2025 16:39:48 +0000
Manifest this update:     Tue 22 Jul 2025 16:39:47 +0000
Manifest next update:     Tue 29 Jul 2025 16:39:47 +0000
Files and hashes:         1: IugbMnyx-zUB4Fr6uUEhkY_bW14.crl (hash: 5Hf3ayRaNmPnz4LQH04mxfrd/aFnKj0wu29Tek0AUXQ=)
                          2: 7E847B60998D11EEB9881356C4F9AE02.roa (hash: m7qVjApLjSS3xFS82auNn6PoE/p21+0h7EKugXT/tVU=)
                          3: 99D6FBE6341F11E9BF826924C4F9AE02.roa (hash: n/zZhuhV9LV6VYEegyXndY9jGAj5j33BeGHT7RYFJDo=)
                          4: 609B8BC27D7B11EDB6B77173C4F9AE02.roa (hash: F+bKxuMFe/azlpMrtazRkcBCTDWemTegUDadHGY8Jy8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.crl
                          rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IugbMnyx-zUB4Fr6uUEhkY_bW14.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Jul 2025 16:39:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6259 (0x1873)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B5BD, serialNumber=22E81B327CB1FB3501E05AFAB94121918FDB5B5E
        Validity
            Not Before: Jul 22 16:39:47 2025 GMT
            Not After : Jul 29 16:39:47 2025 GMT
        Subject: CN=687fbed3-a204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:63:03:ab:60:de:18:3a:6b:99:dc:ce:15:d6:
                    ab:a0:13:00:07:19:44:6e:59:39:9c:0d:5d:51:5d:
                    d7:89:31:a2:33:d0:c7:f3:51:7c:8b:46:e5:21:ff:
                    f2:79:b3:59:d6:b7:4b:fe:c5:74:e8:88:8d:18:cd:
                    6f:80:7b:ae:ff:25:ad:cb:9b:90:db:0c:d9:af:1c:
                    09:8c:42:26:7a:42:d5:70:8a:1b:70:e6:42:43:fe:
                    e0:5a:db:17:e6:28:d8:6b:2b:8a:ff:16:42:d9:35:
                    af:79:00:43:21:b0:51:83:be:fe:5e:f2:38:b2:64:
                    c7:48:32:06:b3:03:cf:80:92:63:72:e4:ef:8e:9b:
                    5f:f7:2d:88:16:30:37:11:52:90:61:bf:4b:9f:30:
                    3b:06:dd:40:68:32:ef:01:8d:d6:e1:c7:2a:2a:37:
                    23:af:f6:69:50:42:e0:ff:47:36:52:5b:4b:f8:97:
                    8d:cf:50:e3:22:a4:bc:95:e5:4c:0b:82:97:70:5b:
                    b3:70:70:ad:7a:c5:9e:08:1c:08:88:02:34:0f:7d:
                    05:50:c7:dd:c9:18:ed:05:84:bd:63:87:7f:6c:1f:
                    47:8d:c0:94:ed:d8:25:dd:fb:6b:15:2e:f6:e3:f1:
                    38:78:b0:54:df:3d:e8:41:e1:cd:af:4c:58:8c:56:
                    46:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:48:B9:06:3B:FC:4C:BE:32:13:29:7F:BF:77:61:B7:4B:17:A6:CD
            X509v3 Authority Key Identifier:
                keyid:22:E8:1B:32:7C:B1:FB:35:01:E0:5A:FA:B9:41:21:91:8F:DB:5B:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IugbMnyx-zUB4Fr6uUEhkY_bW14.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:42:a2:dd:2a:9a:b8:62:41:e6:d5:45:bf:de:64:e4:32:1f:
         71:df:6f:48:a3:69:1e:cd:b4:f8:3a:8b:c5:a0:c5:b3:53:d3:
         f2:c6:ab:44:16:14:32:d1:c0:2f:33:dc:58:74:f1:54:55:82:
         6a:3c:f1:84:9c:9e:dd:87:ea:79:88:05:8c:40:d1:0c:9c:85:
         df:81:09:35:99:fc:f8:c1:12:76:ed:36:a4:bb:47:fd:58:7f:
         f1:79:b3:c8:2d:19:64:bd:0d:2a:ad:1c:97:62:61:e1:28:d1:
         d3:44:b8:95:48:9a:5d:72:be:7e:95:8a:69:35:37:63:75:7a:
         2f:f4:c9:37:2b:4b:5f:e5:c4:22:e5:e6:ee:c0:8e:2f:68:a1:
         25:46:c4:a3:23:d8:4a:fa:f6:e9:83:09:40:e1:73:37:c8:63:
         99:88:5e:d1:dc:29:fe:4d:77:0e:1b:46:88:5c:d9:6a:22:e4:
         f6:8d:5d:20:47:ef:be:bb:38:16:c3:dc:65:5a:02:c3:5b:ee:
         58:54:48:74:cc:5e:20:63:a4:68:10:d5:64:60:0a:09:a2:b4:
         1a:bb:e1:45:7a:58:e1:a9:5b:50:61:06:1b:1b:d3:59:1d:7d:
         c6:c6:4b:43:8c:2c:8a:dc:eb:49:27:ab:fd:e4:ea:26:be:11:
         a2:93:e3:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:17:01 2025 by rpki-client