Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.mft
File:                     uH-tZU7EIXxlANDwaxm-MZ09rfc.mft (raw, json)
Hash identifier:          nXFRO680GQvrJN+fObFyJzeLOxq3bl99Tf47hqJbJ2M=
Subject key identifier:   69:65:5E:BA:38:99:75:F7:9B:5D:F5:30:7E:16:5A:0C:91:09:97:31
Authority key identifier: B8:7F:AD:65:4E:C4:21:7C:65:00:D0:F0:6B:19:BE:31:9D:3D:AD:F7
Certificate issuer:       /CN=A9155725/serialNumber=B87FAD654EC4217C6500D0F06B19BE319D3DADF7
Certificate serial:       7E
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uH-tZU7EIXxlANDwaxm-MZ09rfc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.mft
Manifest number:          7B
Signing time:             Mon 17 Nov 2025 04:29:24 +0000
Manifest this update:     Mon 17 Nov 2025 04:29:23 +0000
Manifest next update:     Mon 24 Nov 2025 04:29:23 +0000
Files and hashes:         1: uH-tZU7EIXxlANDwaxm-MZ09rfc.crl (hash: ycfdrlayg9FuA1ycT4vvphZzNGrvAqxPlogGc4u0MUU=)
                          2: 7621BEA0084611F08BEB2E2DC4F9AE02.roa (hash: aySEvRngppKs/Lyekhtc0uzM27zK/l0cRA6UmOeIzlU=)
                          3: 753F0588084611F08BEB2E2DC4F9AE02.roa (hash: v1ibDjxmzIv2LQG97YVedEX5wevRpNJDRuNHyDfGpBg=)
                          4: 75A4B2D4084611F08BEB2E2DC4F9AE02.roa (hash: JronbENc2C4chw8Lr5GoQXHOGuejfoIjiKRSNDdiR4Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.crl
                          rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uH-tZU7EIXxlANDwaxm-MZ09rfc.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 24 Nov 2025 04:29:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126 (0x7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155725, serialNumber=B87FAD654EC4217C6500D0F06B19BE319D3DADF7
        Validity
            Not Before: Nov 17 04:29:23 2025 GMT
            Not After : Nov 24 04:29:23 2025 GMT
        Subject: CN=691aa4a3-4234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:97:03:0a:5f:37:6b:83:e7:d2:18:a1:c5:77:
                    6a:06:52:0e:44:a2:61:ac:7a:8c:97:01:fb:fc:ed:
                    7f:af:05:2f:01:b6:24:34:89:1f:cc:2d:8e:2b:de:
                    c1:0c:79:4e:0e:2d:d1:91:2e:6b:3f:cf:4c:f0:ef:
                    66:96:10:03:38:40:0b:ee:6d:7c:b3:6b:2e:ed:c4:
                    3a:60:04:a2:77:99:15:4e:94:10:25:06:8d:2a:82:
                    16:2c:c6:0c:f7:02:5a:17:e6:f0:95:fb:ad:d4:37:
                    5e:59:7e:22:dc:47:89:bb:81:9a:54:7e:f4:52:d0:
                    fc:48:ef:9e:f2:2f:7a:85:48:12:8b:4f:4f:84:a3:
                    61:46:8b:11:5b:65:38:23:21:66:21:f8:80:d2:91:
                    75:28:e2:51:b6:a9:ad:57:08:7b:c2:b6:ce:bc:d4:
                    75:22:90:23:f0:cf:d0:25:4d:d9:d0:7c:87:d1:a3:
                    88:c8:d5:1e:73:87:77:c9:cf:d4:f3:35:8c:e3:35:
                    d7:8c:9c:8e:97:49:e7:0c:2c:87:66:71:38:ce:aa:
                    1e:b0:c3:d2:4e:27:1a:28:63:6c:88:fe:16:da:57:
                    5b:31:11:c3:8d:97:77:2f:b4:f3:14:ae:20:32:31:
                    aa:72:b6:6b:da:47:79:bc:bc:e0:7f:c2:67:ac:38:
                    6b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:65:5E:BA:38:99:75:F7:9B:5D:F5:30:7E:16:5A:0C:91:09:97:31
            X509v3 Authority Key Identifier:
                keyid:B8:7F:AD:65:4E:C4:21:7C:65:00:D0:F0:6B:19:BE:31:9D:3D:AD:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uH-tZU7EIXxlANDwaxm-MZ09rfc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:2a:18:49:d2:1a:47:2f:d3:1b:32:42:c3:de:ec:d5:b0:ff:
         b2:d9:ad:d3:98:f7:f7:00:8d:99:c7:37:e1:f7:6f:23:27:f1:
         59:b2:ff:37:08:d4:98:a3:bd:e2:71:36:89:fe:75:f8:a9:69:
         69:fe:f2:b6:9c:a5:a4:e9:0d:93:16:a7:b9:3d:b4:5b:97:05:
         52:99:6d:5f:3f:1c:34:54:fc:af:75:89:32:a5:c4:ec:b9:ec:
         33:4e:43:41:82:ad:b6:53:23:f0:e5:61:c0:07:69:ce:60:d0:
         3f:bf:5f:ac:99:0b:52:20:98:7d:d4:1b:78:8d:46:8c:48:24:
         45:e9:db:df:83:31:e6:69:26:a6:c9:b5:ea:b3:06:25:24:f8:
         b7:54:a8:06:6f:a3:53:91:f3:a5:e5:20:ad:e1:6b:e0:be:a3:
         db:65:8f:d5:1f:ff:30:89:49:e2:78:5c:a3:d4:94:6a:4a:d4:
         44:96:97:5f:ee:7e:4b:c2:65:39:e2:1b:f6:2a:11:f0:df:ff:
         98:fb:51:58:70:5d:b2:81:79:9c:34:b5:de:79:84:8b:74:2d:
         2a:cb:28:c2:be:8d:45:34:7e:c9:3c:de:a8:e8:c9:56:5a:f2:
         cf:de:99:5c:05:0b:f4:02:b3:86:97:a8:37:02:30:7d:88:e5:
         ba:fb:30:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 07:02:50 2025 by rpki-client