Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.mft
File:                     ukny4CpjXdB19WQWbxEfX63lp8s.mft (raw, json)
Hash identifier:          wP4p6vycH63aIYMEMVNcZ3a0KLEUPAG3FrGcy4JwTp4=
Subject key identifier:   C2:3A:42:FF:B4:87:98:89:3B:E3:47:AD:2B:EC:2C:18:0C:71:18:84
Authority key identifier: BA:49:F2:E0:2A:63:5D:D0:75:F5:64:16:6F:11:1F:5F:AD:E5:A7:CB
Certificate issuer:       /CN=A916988B/serialNumber=BA49F2E02A635DD075F564166F111F5FADE5A7CB
Certificate serial:       06A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukny4CpjXdB19WQWbxEfX63lp8s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.mft
Manifest number:          0689
Signing time:             Fri 18 Jul 2025 23:05:08 +0000
Manifest this update:     Fri 18 Jul 2025 23:05:07 +0000
Manifest next update:     Fri 25 Jul 2025 23:05:07 +0000
Files and hashes:         1: ukny4CpjXdB19WQWbxEfX63lp8s.crl (hash: 7v44X8PFnvydZYdtapp8oPEPKUS0eE8beA/K+SYtCZw=)
                          2: 74C0B54E62BD11F0ACD7497FC4F9AE02.roa (hash: YrkXkz/yu0G19ivHemFgEHMeNLmhc/fcMSP5ZLKhRqw=)
                          3: D1B6FD008D6D11EB9DB49A32C4F9AE02.roa (hash: B5LAg04dviX2z0y/fP3YPZo7B9FlYxyAimnZWCXnG6o=)
                          4: D24316B48D6D11EB9DB49A32C4F9AE02.roa (hash: bQSq5ulDmleOdsxLvtgc5ASW2V63/ouOWZ5o5ZVuoR4=)
                          5: D2CFD4468D6D11EB9DB49A32C4F9AE02.roa (hash: +78td8DudFE3NBUUSYhesW8UdPg8DBg2PU3GJp9moVc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.crl
                          rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukny4CpjXdB19WQWbxEfX63lp8s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 23:05:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1696 (0x6a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916988B, serialNumber=BA49F2E02A635DD075F564166F111F5FADE5A7CB
        Validity
            Not Before: Jul 18 23:05:07 2025 GMT
            Not After : Jul 25 23:05:07 2025 GMT
        Subject: CN=687ad323-5dad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:1a:97:c4:fe:f2:87:f5:d2:d5:5b:41:b3:74:
                    ea:47:07:fe:cc:5f:37:48:a9:7f:3e:d9:db:02:f0:
                    dc:4e:17:3c:8e:ac:5d:02:d4:55:a3:99:97:50:6e:
                    5a:f5:0e:46:b5:85:80:a1:29:67:57:3a:22:ad:b8:
                    c2:77:77:d9:40:ea:27:fe:fe:fa:83:ee:5b:17:ac:
                    ab:54:4e:2e:35:f7:c0:15:65:87:5c:6f:8d:63:af:
                    6f:62:31:06:bf:3d:21:33:68:1a:69:66:28:1e:42:
                    d1:6b:2a:14:8b:3f:c8:af:41:11:92:57:c0:60:4d:
                    46:43:f1:c6:0c:b4:91:ef:7a:5c:ff:ca:66:c3:fe:
                    72:a6:f4:dd:42:6a:26:85:e0:07:91:75:72:24:86:
                    ce:36:5d:1c:0b:5e:ed:4f:94:03:ff:48:fa:43:9b:
                    2b:e4:e1:5c:59:54:06:d4:9f:53:b4:2a:19:d0:d0:
                    73:88:d1:3c:3e:df:09:64:a2:ba:e8:c6:37:7f:47:
                    ad:6a:1a:3e:2a:47:ff:cb:eb:9c:05:ca:74:c1:50:
                    6d:4f:a6:ab:a6:15:41:39:00:20:41:1c:e0:eb:20:
                    38:66:aa:4a:73:31:c3:7c:e4:5e:53:e9:71:7b:3c:
                    76:3f:a9:3f:52:11:e0:8d:41:d4:3a:7c:3e:b4:60:
                    ed:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:3A:42:FF:B4:87:98:89:3B:E3:47:AD:2B:EC:2C:18:0C:71:18:84
            X509v3 Authority Key Identifier:
                keyid:BA:49:F2:E0:2A:63:5D:D0:75:F5:64:16:6F:11:1F:5F:AD:E5:A7:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukny4CpjXdB19WQWbxEfX63lp8s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:7c:49:7d:9c:62:3d:86:e0:8d:62:ea:6e:8e:bd:6e:46:3b:
         56:9f:99:e5:01:56:01:e4:67:63:36:8f:50:c5:40:93:a1:61:
         82:66:1d:83:75:c2:8c:8e:69:c0:ba:f9:6e:22:ca:e7:fb:3d:
         e0:ef:66:4e:1d:24:3c:55:cb:f8:ad:7a:0a:4d:63:91:b9:d8:
         d0:a3:32:8d:b0:f5:9c:fd:a4:f2:74:ff:cc:82:15:9c:2b:a6:
         8f:d3:94:3e:3c:87:9e:98:f0:19:1c:10:ad:75:1e:97:17:ff:
         d2:5f:26:77:06:ff:07:48:4c:a4:b7:bf:2b:07:be:f8:e5:b5:
         7d:15:2b:1a:d3:1c:ce:4b:5f:4c:b2:55:06:1d:40:a7:16:41:
         e5:45:64:1f:8f:91:68:f7:89:58:e4:2d:fa:ae:bf:ff:10:ca:
         77:de:f0:b0:ba:94:7b:1a:f9:dc:77:3d:f2:9b:1c:00:7e:1a:
         6f:e6:17:7c:8f:e5:ca:84:0b:24:9f:a9:b5:d4:56:74:5d:04:
         64:8f:76:55:b8:a6:39:d6:ab:a9:65:68:ea:40:fc:db:a7:3a:
         23:98:b2:a8:83:2b:55:be:4d:a6:fe:55:46:6f:3f:9d:dc:18:
         97:6e:73:e6:4e:91:b2:86:67:96:f4:22:42:eb:17:db:da:2d:
         10:2e:ad:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 15:12:44 2025 by rpki-client