Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft
File:                     uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft (raw, json)
Hash identifier:          JRqUl+UoS3P4VdBmDFVqTgUZUPr0yMpc/7Nlcx0G6t4=
Subject key identifier:   7C:AC:66:1C:3C:8B:C6:D9:E9:D3:95:78:AA:88:55:17:C1:90:F0:83
Authority key identifier: B8:8B:D5:D5:B9:B8:64:6D:8E:43:E6:4C:12:7B:84:81:A4:18:C6:36
Certificate issuer:       /CN=A915825D/serialNumber=B88BD5D5B9B8646D8E43E64C127B8481A418C636
Certificate serial:       88
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft
Manifest number:          84
Signing time:             Sat 19 Jul 2025 06:56:19 +0000
Manifest this update:     Sat 19 Jul 2025 06:56:19 +0000
Manifest next update:     Sat 26 Jul 2025 06:56:19 +0000
Files and hashes:         1: uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.crl (hash: IhpeYbyfpZWiztX57g3s5YnIgaQfaJZI90SjtbC21v4=)
                          2: B035E67615D311F09BAD2971C4F9AE02.roa (hash: m6K1ejQzgZZN/JIHhR+mHfBRgRA0KhwEs/admphjKvc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.crl
                          rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 06:56:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136 (0x88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915825D, serialNumber=B88BD5D5B9B8646D8E43E64C127B8481A418C636
        Validity
            Not Before: Jul 19 06:56:19 2025 GMT
            Not After : Jul 26 06:56:19 2025 GMT
        Subject: CN=687b4193-f21f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:14:76:6e:af:ea:49:c3:7c:6a:56:5e:d7:41:
                    60:3d:f1:35:b4:30:c1:73:7c:e8:2e:11:1d:59:22:
                    96:30:b5:89:4d:75:fd:bb:84:5c:1c:0c:03:c4:09:
                    6c:05:c7:bc:f3:35:c9:99:04:58:be:cd:73:a2:f5:
                    2f:27:e2:b1:79:a8:8b:36:88:cf:8b:4e:c1:1b:8c:
                    fa:6d:61:71:fa:bd:02:ff:09:d5:6c:01:28:4a:53:
                    49:96:10:6c:86:07:c0:79:9f:3e:eb:ba:ed:42:c7:
                    1e:b2:a4:42:86:94:88:f0:5e:4b:d4:35:14:de:80:
                    e7:11:9a:7b:a8:28:89:70:da:fe:8c:f5:67:b4:35:
                    4e:e7:c9:06:4f:e4:67:df:88:a0:46:2b:04:01:d8:
                    04:49:67:33:b1:01:8d:86:a2:ba:1e:d4:54:8e:de:
                    35:bb:8c:4b:3f:4a:04:dc:ae:f8:b3:47:3b:68:3c:
                    7d:66:6b:56:2e:c2:13:31:be:26:6d:5c:a1:f2:ef:
                    de:0f:7a:32:0b:7c:b2:f7:95:5c:7a:9c:6e:08:2a:
                    55:db:af:e1:b6:31:17:d5:7e:75:db:3f:c8:ca:e3:
                    c8:32:17:8d:c3:70:cf:55:cd:db:f6:16:12:58:eb:
                    db:64:ea:83:87:7f:6e:fd:a2:ca:d8:d1:09:1f:e2:
                    df:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:AC:66:1C:3C:8B:C6:D9:E9:D3:95:78:AA:88:55:17:C1:90:F0:83
            X509v3 Authority Key Identifier:
                keyid:B8:8B:D5:D5:B9:B8:64:6D:8E:43:E6:4C:12:7B:84:81:A4:18:C6:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:91:f2:87:09:58:bb:38:cb:55:5d:38:be:25:66:86:b1:b2:
         76:44:1d:4c:ee:b7:f0:d5:f9:b9:71:82:fa:81:dc:1a:41:44:
         6d:cf:ad:1d:73:97:d4:f0:6e:01:4d:77:cd:9c:f7:2b:f4:4e:
         d3:dc:21:13:6d:69:7a:3a:49:b8:6d:5b:8d:e1:8d:69:3b:59:
         c2:55:d4:a8:63:b0:69:85:a0:e2:d0:77:29:54:31:9c:fb:8a:
         29:51:49:24:88:1b:9d:d4:19:c3:13:37:0d:03:95:a4:c2:ca:
         a2:92:1e:6e:eb:78:8e:a3:66:c7:95:b9:4e:62:83:43:52:96:
         7a:b7:61:c7:77:0c:e3:14:34:e1:0f:9c:d7:c9:c2:99:a1:64:
         eb:a3:7e:a5:8a:f8:20:a9:26:f3:f6:5e:4e:ce:24:bf:f0:c4:
         8d:14:00:5d:39:d3:63:66:c1:26:8e:eb:3a:c6:9b:1f:75:cc:
         dd:b1:91:75:11:b4:62:8a:fd:cc:38:4e:b3:ab:57:04:06:ed:
         b6:fc:38:d7:a6:93:f9:a9:7a:92:49:16:10:13:51:7b:46:88:
         92:46:47:55:c6:4b:3e:7d:4e:a6:5a:87:17:f3:49:bb:36:21:
         4b:42:5b:1f:7c:32:1d:d0:1b:a8:57:1e:1c:8f:31:45:94:70:
         9f:2e:b1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 19:15:29 2025 by rpki-client