Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft
File:                     u6vT8W4QD9nJXUdIhOTanLb6do0.mft (raw, json)
Hash identifier:          lHfkJQEZz/w2ThaxESvBmgkC8WOjpqKch+sqBVLAnjY=
Subject key identifier:   6C:64:C7:85:C9:BA:07:6D:1A:8E:2A:09:38:7C:F3:73:D0:53:0E:18
Authority key identifier: BB:AB:D3:F1:6E:10:0F:D9:C9:5D:47:48:84:E4:DA:9C:B6:FA:76:8D
Certificate issuer:       /CN=A91886E3/serialNumber=BBABD3F16E100FD9C95D474884E4DA9CB6FA768D
Certificate serial:       01F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6vT8W4QD9nJXUdIhOTanLb6do0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft
Manifest number:          01F2
Signing time:             Sat 19 Jul 2025 02:39:37 +0000
Manifest this update:     Sat 19 Jul 2025 02:39:36 +0000
Manifest next update:     Sat 26 Jul 2025 02:39:36 +0000
Files and hashes:         1: u6vT8W4QD9nJXUdIhOTanLb6do0.crl (hash: c/juLHkVMzINAXVwBG4clrd0t1FoGfHIl+RHeEOTU3g=)
                          2: 60820A4271AC11EDAA89DE61C4F9AE02.roa (hash: d6lR5DCUUt64f3jfT2Upe1NvnvCxTNK9tDR0OuYVOnY=)
                          3: 61141C1671AC11EDAA89DE61C4F9AE02.roa (hash: Wx96a0pCwu7Is08OfwVpC7A3eb6MBe8Us9jhb4i3wps=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.crl
                          rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6vT8W4QD9nJXUdIhOTanLb6do0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 02:39:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 504 (0x1f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91886E3, serialNumber=BBABD3F16E100FD9C95D474884E4DA9CB6FA768D
        Validity
            Not Before: Jul 19 02:39:36 2025 GMT
            Not After : Jul 26 02:39:36 2025 GMT
        Subject: CN=687b0568-acd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:46:fd:92:dc:6c:85:b9:d8:c8:62:15:13:b2:
                    e5:12:da:f3:69:5d:1b:2c:9a:c5:17:07:92:28:12:
                    12:6f:24:44:34:e2:b4:85:95:1d:95:8c:7f:84:21:
                    fb:71:a0:42:f4:b9:1a:0d:f4:eb:09:c7:f0:84:79:
                    e5:10:7c:0c:39:15:10:50:76:56:20:49:fb:3d:31:
                    d6:1e:1c:f7:b1:82:98:f0:9d:ad:4f:fb:30:d9:d3:
                    ba:03:94:36:35:cb:d1:93:67:3a:56:b5:d8:c7:77:
                    60:6a:7d:f0:3d:0b:1f:93:df:f5:21:64:1f:2b:7a:
                    6f:80:18:47:df:e0:5f:92:e8:bf:a6:29:c2:e7:f5:
                    c4:1e:79:a1:74:05:bc:d8:8a:f9:54:de:45:4e:83:
                    88:96:ba:ab:ae:1a:49:44:06:4c:5a:0c:b5:3b:28:
                    12:5d:92:50:82:df:a0:e5:2d:bc:90:ee:b3:54:1d:
                    4b:eb:6e:cb:8d:d0:61:16:da:72:2e:fd:f8:46:25:
                    64:3a:07:8e:37:5c:70:c8:ea:fe:84:45:bd:48:fc:
                    7d:28:c3:03:32:82:c5:c0:73:95:80:da:79:e2:f8:
                    5f:48:fb:6a:16:95:ba:e0:cb:a6:3c:c8:bf:a6:cf:
                    9e:ee:dd:d5:33:6c:7a:20:3d:f9:4f:ea:ff:49:88:
                    0b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:64:C7:85:C9:BA:07:6D:1A:8E:2A:09:38:7C:F3:73:D0:53:0E:18
            X509v3 Authority Key Identifier:
                keyid:BB:AB:D3:F1:6E:10:0F:D9:C9:5D:47:48:84:E4:DA:9C:B6:FA:76:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6vT8W4QD9nJXUdIhOTanLb6do0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:e0:0d:9c:66:8b:9b:67:d2:44:75:eb:4e:d2:75:12:25:97:
         01:e6:11:bb:b9:88:89:a7:65:c8:90:76:c9:6f:6c:48:68:12:
         21:c6:30:28:9a:6f:50:3b:da:06:1d:31:2d:29:3c:3c:97:9d:
         b8:97:66:9e:63:8f:f3:e5:e6:8a:31:b0:f8:02:1c:62:59:6f:
         94:d8:ce:d7:2b:21:5c:07:54:f0:7c:6d:15:17:75:77:cb:78:
         d7:c7:a3:5b:0d:99:c3:2b:5c:a0:9b:fa:9f:10:6f:a1:78:e9:
         a3:a1:03:74:25:60:e7:e4:05:cd:26:56:e3:0a:e4:89:dd:29:
         50:19:1d:88:d8:1b:c1:62:13:3b:4a:9d:5a:cb:67:7c:08:83:
         da:3d:8e:f1:40:06:b8:39:1f:1a:53:a9:d2:d2:92:23:90:7c:
         f1:5b:32:c9:47:07:ce:94:ac:b7:8a:75:35:a4:e3:15:b6:6f:
         fa:0a:64:4c:68:3c:ab:ff:18:d5:2a:35:b3:a0:2c:dd:b9:1f:
         62:09:db:64:3d:b7:e3:a3:46:9d:04:1a:44:26:b7:de:08:aa:
         c9:b1:1a:bd:5a:54:e4:75:a2:a4:82:cd:a8:45:4b:b3:1c:b8:
         9e:47:3c:4d:9f:84:15:cc:c2:f6:22:b8:81:d3:10:c3:f4:1e:
         53:ae:e0:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 19:00:03 2025 by rpki-client