Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft
File:                     UG14DtF5dIDxUlE0f8KEQ9culQc.mft (raw, json)
Hash identifier:          ab1CeECka3G/ktRZ+5I+0dUSXKN7BAWgStMltwoejH4=
Subject key identifier:   6E:7F:56:30:D9:B6:25:E6:40:19:87:8E:FC:DC:2A:02:5B:FE:26:25
Authority key identifier: 50:6D:78:0E:D1:79:74:80:F1:52:51:34:7F:C2:84:43:D7:2E:95:07
Certificate issuer:       /CN=A917EB0C/serialNumber=506D780ED1797480F15251347FC28443D72E9507
Certificate serial:       0C01
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UG14DtF5dIDxUlE0f8KEQ9culQc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft
Manifest number:          0BE2
Signing time:             Fri 18 Jul 2025 19:05:47 +0000
Manifest this update:     Fri 18 Jul 2025 19:05:46 +0000
Manifest next update:     Fri 25 Jul 2025 19:05:46 +0000
Files and hashes:         1: UG14DtF5dIDxUlE0f8KEQ9culQc.crl (hash: 3vpew2sEGYMo02ujAiOMyX0lo1367fzJhas8PCtWW9A=)
                          2: E5B6117E2BC611EAB1456E4CC4F9AE02.roa (hash: 8xiW94BgUeQq9ZYVRmXYA3GrrXRDCnXkWRMC2enXdlY=)
                          3: FB2EC05CA3B111EE92169F16C4F9AE02.roa (hash: ZnbBQLWijX811JvZiE0GpFPKxpLE1gcXnN9dflC4yH4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.crl
                          rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UG14DtF5dIDxUlE0f8KEQ9culQc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 19:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3073 (0xc01)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917EB0C, serialNumber=506D780ED1797480F15251347FC28443D72E9507
        Validity
            Not Before: Jul 18 19:05:46 2025 GMT
            Not After : Jul 25 19:05:46 2025 GMT
        Subject: CN=687a9b0b-ab87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6a:c9:dd:38:3d:6e:61:17:3d:98:7e:5d:5f:
                    a9:c6:63:d3:77:e2:aa:eb:fb:6a:bd:60:17:5f:e9:
                    60:ae:3f:f4:61:e9:ab:48:bb:71:a3:59:d1:41:66:
                    65:4b:dc:13:72:39:21:a4:bd:33:3b:99:27:5d:df:
                    dc:aa:f5:3f:a8:c4:62:80:c3:e0:d8:78:2c:5a:2f:
                    74:06:c8:c9:8e:bf:7d:f6:70:15:48:5f:0b:a7:fd:
                    54:e8:08:c2:2c:63:12:48:70:dd:c2:20:3c:62:62:
                    a9:7b:36:6b:cf:46:47:2c:6e:f8:44:04:4a:55:92:
                    06:d3:55:2c:eb:c5:e0:22:8a:88:1c:b9:94:3e:ee:
                    1f:2f:f8:ea:d9:8a:ac:39:29:36:ed:ce:0e:5f:1e:
                    83:3d:91:b6:05:5e:45:f7:98:94:3b:2d:6a:06:91:
                    33:0b:52:f9:e8:c3:48:da:d2:92:5e:f0:f6:fa:b1:
                    d3:1f:48:19:fd:15:40:6e:e2:c2:4d:59:ff:13:6b:
                    20:66:87:3a:ad:85:f6:09:bb:be:4f:26:b6:73:f7:
                    5f:68:8c:c5:38:e9:86:0d:e5:49:17:d8:76:1b:a9:
                    f6:cd:ec:89:13:f0:62:44:0e:cf:af:e9:01:3a:8f:
                    43:f4:cb:21:dc:1f:aa:f2:16:f8:0d:48:0b:6e:d1:
                    8b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:7F:56:30:D9:B6:25:E6:40:19:87:8E:FC:DC:2A:02:5B:FE:26:25
            X509v3 Authority Key Identifier:
                keyid:50:6D:78:0E:D1:79:74:80:F1:52:51:34:7F:C2:84:43:D7:2E:95:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UG14DtF5dIDxUlE0f8KEQ9culQc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:b1:f7:d5:5c:ef:b6:ee:f8:01:70:3a:9c:dc:dd:2f:53:97:
         4c:bf:30:97:db:36:c0:07:15:3e:7f:82:dd:4e:7d:ca:e3:54:
         75:05:b9:4f:4e:3f:12:d1:01:cf:f4:6e:0d:e6:ec:6e:02:b1:
         0e:e5:e3:3b:aa:3c:a0:29:eb:d3:35:13:e2:cf:ab:50:6b:67:
         0e:33:f6:44:88:71:f9:8b:b2:4c:b4:30:1b:17:53:f2:cd:d7:
         29:f8:ee:3b:7b:87:d1:ac:7f:c7:83:2b:bc:87:1c:63:99:c3:
         56:f0:fd:a9:46:d2:24:ca:0d:26:66:8a:83:cb:2b:99:ed:45:
         46:4e:4c:7f:9d:20:51:40:79:e5:00:84:7c:75:a0:50:9f:0d:
         78:19:54:cb:49:5e:3f:ad:00:c4:89:c3:65:78:54:f1:8a:54:
         07:26:5e:b2:7f:34:50:27:62:41:d1:8b:a3:55:47:d4:91:c4:
         f2:3b:95:58:c4:7c:b7:3d:de:ff:13:9c:0f:b4:7f:47:66:4b:
         c1:32:7b:d7:18:3b:ab:fc:7f:ad:af:00:6a:44:e8:1b:37:53:
         4c:c9:7a:de:46:df:22:d0:5a:52:30:5b:7a:ab:05:72:0e:49:
         8f:e8:f3:09:7d:63:d2:61:3d:73:f0:f7:53:a0:2d:49:73:41:
         25:a7:c1:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 10:19:13 2025 by rpki-client