Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
File:                     89ufFiAIvWZsv4yZYHgUz6sk1-c.mft (raw, json)
Hash identifier:          jHxtJ9I8qiAbHxQgCyxCPFS5UGC1KKGecfUr6wbcet8=
Subject key identifier:   1E:62:13:C8:FB:73:6C:7E:2B:2C:E0:76:65:FF:B0:F4:EE:C7:60:6D
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Certificate issuer:       /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial:       3640
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
Manifest number:          330A
Signing time:             Sun 20 Jul 2025 15:36:15 +0000
Manifest this update:     Sun 20 Jul 2025 15:36:15 +0000
Manifest next update:     Sun 27 Jul 2025 15:36:15 +0000
Files and hashes:         1: 89ufFiAIvWZsv4yZYHgUz6sk1-c.crl (hash: pCwaGkE1YunXI541jKAn9Qw61gBeXsh0WWoym9U0PsA=)
                          2: 2A3ED0C0314811EA82EC6962C4F9AE02.roa (hash: CNtwJmM4ITqlrRYaZt97Rasi+kzlPfWxGFJkimc9jPw=)
                          3: C808A5E6C4A711E9BE1A815DC4F9AE02.roa (hash: S9CnYVsi0ZwY60Fuyi3R/RktyraCWPKfeAAv0e6JV8A=)
                          4: 960764842D4211EA907A566EC4F9AE02.roa (hash: +Bs4NPsq9q/ky1a2463umAyjL4riVmWQqqV4/tkgOHk=)
                          5: 728D45FA2FA311F0B0179214C4F9AE02.roa (hash: jDQS6Swej/SS0Qwkwi5NVNzbhIWrwPNJrn51WbRp0TU=)
                          6: 6891872A27D711EA8E7B5876C4F9AE02.roa (hash: GGIVfSS7D8yyRRN5Onf3Qhya9r6F2GZq1J4YQCg2Pqg=)
                          7: 688029EE184B11EA85906435C4F9AE02.roa (hash: Ue2DWY3vlt6mbw6ETB1qQ+hJjxZhtzYVXCNlUWmoUzI=)
                          8: 4979428A0E0D11EAAAF12D09C4F9AE02.roa (hash: i2ciuBhBUtE7pnYNZqOA0C3Ue5UEpb0FfMCJW8LDAyI=)
                          9: 3A153A08C31F11E9B2558032C4F9AE02.roa (hash: 3TwS8SFtWWWkKCN8Ia5IBpMMbA7fOA7/nhg9LAU+sp8=)
                          10: A197DDE6BF2011E99B065B7DC4F9AE02.roa (hash: y3nJkKov+9nDSfAB9eiP5L2LmysH6Jg/joscc/qzkE0=)
                          11: 4025C8DC78E811E79F549F43C4F9AE02.roa (hash: GojqM9IVTeugO29k26q6M4r/oGc/SoY06X36Wa+R3d8=)
                          12: 8A70FA742B9B11F0BC27D350C4F9AE02.roa (hash: XcWxURpqLx92cZ8e08y7BE8hzpnhDPFpwBrpmfrLAtQ=)
                          13: F71994162B9A11F0A72AD831C4F9AE02.roa (hash: 4LwQJIi+PicUWAtgH2lKkElu7Xzm9pLNrRJX7FR7fBI=)
                          14: A7B53200784E11E9AE591940C4F9AE02.roa (hash: 04lfGGc3BNbFGhp2l0QHVx1Fset5cm8gW0lAn5CPync=)
                          15: 3F9678DA78E811E79F549F43C4F9AE02.roa (hash: WnVyFGdGh4nH1+BIoslG+uUUOp+ePN6X0FSgq3J9+n0=)
                          16: 7909FCC06DF211EA806B671BC4F9AE02.roa (hash: n1uQ3psy32mhvWgrDG8XabzbP0HRNswXJpwX9GNWb0Q=)
                          17: 36A429EE2B3611F0B7DC5A48C4F9AE02.roa (hash: LNgjjyY/WilUkmdF71uI82bNARaJUwUHwbNfofFJRJA=)
                          18: 8F34BFAADF7E11EF9F3F8268C4F9AE02.roa (hash: SmDboYhKwuZzIbakrz2sFj299ozGSUzEkefc5ZQryT4=)
                          19: 807F931E2B4011F092798182C4F9AE02.roa (hash: INx4bVdYMvSHghZ0xdqhGXOwcG2dcHCpKPSYAkk1Aqs=)
                          20: 76CA0E007B7711E9B2348367C4F9AE02.roa (hash: Aqjk/ey4kfQ9KmDeGfHlcEni3U1JZA62YkQHgWZ63GE=)
                          21: 5C660A1C2B3B11F0A840B56CC4F9AE02.roa (hash: V8p9VLJZ8dMS88VKEm96PHdQIWrnvcVVOHp3tmAkW/w=)
                          22: 6BEE929EBE7A11E99ADDFD75C4F9AE02.roa (hash: 2PqMKVtMkvOBGPgFd5BfOiYOKvcIs4eb/CMfm9Ab4Eo=)
                          23: 3F4717D0D89B11E9AB8A5F14C4F9AE02.roa (hash: /ylY6kHbRD4NOz703RJDwu8cDni8qw0ZW1DbwZ+fss4=)
                          24: 7D281FE0CAF911E9912CF92FC4F9AE02.roa (hash: 0jRu1Q749u0XB4exazW+ZBlH5vm1gyXDoRwoNde6qEk=)
                          25: 971C7F142B3711F0BDDC4B6CC4F9AE02.roa (hash: Q8s+ua9os0/qPZz3BvJ88AjBjAfsCASOdv+NGC+k3nU=)
                          26: 93069024F98111E9BCD2807EC4F9AE02.roa (hash: nu16uL/KRDV0B4CFnROJ1c3kxYgCVInbvWC3GWFkhZI=)
                          27: E97B1E5482E211EEA80A0583C4F9AE02.roa (hash: sRW6XbJvReNKsnh89cUtNQ1Ew8IXlSAaCZ7MuKNN8cw=)
                          28: B7E4B4D8676411EA90B16258C4F9AE02.roa (hash: ZJxL1MdbhAv+jZrXHgGesgnpKK6b8TXGM55sEaDPeH8=)
                          29: 9CC241B2016511EA91E3CF4AC4F9AE02.roa (hash: SPFm8oPbTa4hyaYD8F5IhdItQAiErrjahVrh6ptJJLQ=)
                          30: B883270E356B11E7A51C314CC4F9AE02.roa (hash: a1VKqNti3NCefO4XBY1n0yK29kxA5TkKwL+YsvdOyIo=)
                          31: 2E388BFA2B3C11F0A85EF417C4F9AE02.roa (hash: gkXHLtQWFa9f6rndMvKtXFF4obGAs/Fqy9XdAfm7ZJA=)
                          32: 95A84A924C0211EAB9CDB321C4F9AE02.roa (hash: KAtnbP5v+/Daga6upo9I8UD7tM68ca8fNEaqzjrU8fw=)
                          33: 96A289D42B3711F0BDDC4B6CC4F9AE02.roa (hash: 8gdeueQHUneqlXN+gXju3YJcGEi4s/J3EJf9JJXgCLY=)
                          34: 6CF60CB6785811E99A6E965AC4F9AE02.roa (hash: Pdp5ex3WILw7iG17rFPSyS12eBInNFBGiUmFxLOiLr8=)
                          35: 691CFE18184B11EA85906435C4F9AE02.roa (hash: XBLnLS8CoZPqneN92hjne4admIXeH2doDZ0IFbFaSn4=)
                          36: 6C906DE4BE7A11E99ADDFD75C4F9AE02.roa (hash: AcBpX+mvudevZxRHrFr2+gPNpS9AeBUJGg4GNiQw8SI=)
                          37: 0259CB6ABE7911E990831772C4F9AE02.roa (hash: wKOBp6pfgzScIqq1Y5Aq/wLs5uR6pO+UMIgkXEbqkKM=)
                          38: C563005A45C711F0A8D67529C4F9AE02.roa (hash: rf2KqwsvH6KBtE4TV4d57herNtuuJVoLoX4UF6PtFEI=)
                          39: 6E30D6B6BE7A11E99ADDFD75C4F9AE02.roa (hash: 6ziMLUDwR4XjDj0dTcooivNvkl4e8aoFTmI8x8LxIO4=)
                          40: 59F5C224337811EAAD3FAA39C4F9AE02.roa (hash: IT0gqa2rUcxL24HAoWNInEMWT+HFDwiq5WpDxk6Cb5w=)
                          41: 9E189DF2C4F411E9829EC138C4F9AE02.roa (hash: 4a39GCSRC4qB6TdrSDSgzJa1CQ3f90CkNweJJ+deDS0=)
                          42: C38EA6882B3411F0929A5143C4F9AE02.roa (hash: 1ftKxi53udwRZlcIfmsn+TIlrSuLjuthPp7NNwJDMOM=)
                          43: 5A87E8B01A7E11EAB32DB717C4F9AE02.roa (hash: TF4/nOrzyf5duBfEQYUwJ6zNvE5ah2P0TT9FhC7BegY=)
                          44: C320F64A2B3611F0BDD48B67C4F9AE02.roa (hash: NoF/adr6CU3/1WmIYuRBfC9Tw8iKLWcWubaIQkeBELE=)
                          45: 6C1DC926C3E111E9A0172583C4F9AE02.roa (hash: Y9YreMnj4c/Gmbs8JYt4xiAjkQnraU6hVdNLY4y3pHE=)
                          46: 4848A8C83A0411F086BFFE49C4F9AE02.roa (hash: LNw5+sLJw93Ljk8pAD7eW1mz96SP+WRWVowhApelsQA=)
                          47: 6D6A6B7ABE7A11E99ADDFD75C4F9AE02.roa (hash: EtDux/1s+X2yH1VSgNQ2Z9uhe6Rn1M1EShWbZlWx77o=)
                          48: 6AE530BABE7A11E99ADDFD75C4F9AE02.roa (hash: kOCol53zijYnRgxhtuZJM0PBTUMvBy2fQhDYz7C5XyU=)
                          49: 011F48EE2FF411E78B4D5566C4F9AE02.roa (hash: jdOuSxLCZnpT91YPdCxaOI+6MskPlS16Xo3cbB7dQ60=)
                          50: 810804742B4011F092798182C4F9AE02.roa (hash: V0aDVbU0XbHbKbalHyNOqQG0zsF1tUcPluJLgFV8ZHc=)
                          51: BE6B7B76337911EA8016C03DC4F9AE02.roa (hash: t0t2H41OSs9bcuWnHLre1o5kYbLG5xg69/nQyymgcE4=)
                          52: 00C137A2BE7911E990831772C4F9AE02.roa (hash: T1EiYlg921dIuqeleHn3qhJut72TmCqiSVWqxjVEiGY=)
                          53: FE17729EC4AB11E99055C166C4F9AE02.roa (hash: ktaEtLzIPsDQwxFvG+9rKB72y1n/rnEv9RvoZpoIjaA=)
                          54: 5E40CDC83D2311F0BC3F7332C4F9AE02.roa (hash: aODiDC05OquXHUOLc2NnbAW6C8X1zpJ/31MX44v9kNU=)
                          55: 6EEB5A22BE7A11E99ADDFD75C4F9AE02.roa (hash: zRNl4cGh1wy+6vX2KZejZ9MEfSlh/bELbw2UrGz7fQ4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 15:36:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13888 (0x3640)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
        Validity
            Not Before: Jul 20 15:36:15 2025 GMT
            Not After : Jul 27 15:36:15 2025 GMT
        Subject: CN=687d0cef-c410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:c9:81:c2:99:8f:fd:dd:51:bb:d1:f0:37:48:
                    3e:f9:1a:74:3c:c0:fa:f2:9d:b1:6b:45:1a:e0:ca:
                    12:47:94:6c:09:98:ce:eb:4a:99:ad:a7:c3:4f:2c:
                    a1:4b:21:9e:47:28:d6:0c:24:f2:4f:51:51:91:17:
                    50:02:a2:b9:1b:86:16:82:23:97:44:87:fe:13:04:
                    5d:33:20:7b:d6:9b:6a:82:6d:b0:35:e1:cb:aa:21:
                    b1:9a:52:cd:79:e2:b8:3e:68:bc:1f:52:48:31:42:
                    6c:15:b8:35:fa:35:5d:31:2b:b1:55:aa:b6:45:c4:
                    93:5d:0e:d3:73:4b:b3:a9:da:5f:ad:b1:65:e8:63:
                    68:a5:42:e8:e2:08:4f:3e:14:e3:2c:29:3a:b3:e6:
                    db:49:45:61:18:9e:62:cf:5c:c8:48:08:55:6e:26:
                    98:4c:b3:aa:37:93:65:88:2b:d4:84:ff:fb:71:47:
                    49:e0:1d:94:e2:72:d7:8b:9f:08:e2:d0:8a:25:e4:
                    e6:22:5f:54:55:03:3f:af:b3:e2:c5:7e:5c:94:6e:
                    e2:d8:1b:47:53:c2:36:37:0b:93:92:97:2e:cf:48:
                    d3:2d:1a:38:ec:cc:eb:a8:2b:59:ac:27:21:61:ca:
                    3a:8b:a4:5d:5c:51:ec:a1:34:00:8f:de:b5:03:73:
                    5a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:62:13:C8:FB:73:6C:7E:2B:2C:E0:76:65:FF:B0:F4:EE:C7:60:6D
            X509v3 Authority Key Identifier:
                keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:93:02:1a:ff:da:16:a8:91:bb:2e:a2:ef:47:47:81:54:61:
         b1:1c:d5:ef:ec:7d:78:b0:e4:2b:3a:c0:ea:3b:8d:f0:68:28:
         bb:15:ab:c0:52:17:2c:42:65:fe:60:6b:4a:14:2f:19:72:42:
         91:e3:7d:7a:23:d6:19:79:fb:5e:92:8f:4c:2f:ae:63:c1:6e:
         96:c9:e2:69:e9:6c:c2:f1:47:9e:16:8e:5a:21:eb:a5:ee:92:
         79:92:9f:4b:32:48:21:d4:50:21:22:60:82:49:7e:64:6f:7e:
         06:be:29:69:45:dc:c2:d3:d7:de:70:79:5f:d0:bc:48:6e:8f:
         eb:d7:6b:6f:6c:c3:2f:06:e2:79:7d:9f:4e:07:20:4c:b0:40:
         27:d0:95:73:bf:d8:e7:74:d9:ef:8a:c2:38:a3:0a:ba:9f:4e:
         9c:26:bc:fa:8d:d1:c9:92:b0:c9:f2:63:c2:24:f6:86:b1:cd:
         63:8b:11:ae:8c:4b:28:a8:80:a0:7d:49:e1:58:20:45:e7:65:
         1a:a7:bb:fc:ef:7b:41:a6:d8:35:76:89:05:7b:43:62:7d:b8:
         4b:aa:7d:db:03:2b:19:fc:eb:89:18:87:d3:ca:6e:4b:d8:0f:
         41:7e:1f:b0:f8:2e:c4:95:74:4a:d9:fa:e8:ea:96:7b:20:53:
         f2:c2:50:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 00:29:54 2025 by rpki-client