Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.mft
File:                     ueYM8Xn06svblJK6X3ys9FI5zPQ.mft (raw, json)
Hash identifier:          7AStYapzDb6G/XV+kdM8jyqqyMC75ObK8l/YeF7Z0ZA=
Subject key identifier:   C4:B7:71:87:91:0D:10:46:0C:7B:6C:01:7F:80:6E:C7:3E:EE:76:DF
Authority key identifier: B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4
Certificate issuer:       /CN=A91EE03B/serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4
Certificate serial:       0204
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.mft
Manifest number:          01CC
Signing time:             Mon 21 Jul 2025 03:37:42 +0000
Manifest this update:     Mon 21 Jul 2025 03:37:42 +0000
Manifest next update:     Mon 28 Jul 2025 03:37:42 +0000
Files and hashes:         1: ueYM8Xn06svblJK6X3ys9FI5zPQ.crl (hash: 3PA38Sj4OWAgc+EF6hRNbNXTgtLNR2XFLEThju9xpj4=)
                          2: 7362D03E37C511EFBA013C34C4F9AE02.roa (hash: 9qnuOOqog1w0/6Ft0fo80AwEmtyxbUWJdcXWk0vjBP0=)
                          3: 14C4C7D4002611EFBD462953C4F9AE02.roa (hash: hi6S2Mh9Zc0AeJAKr2eaBvvBpbecYaUaD50MlmI4NaA=)
                          4: 43E73F1824D011F0805C1741C4F9AE02.roa (hash: tNRSiapsZeWkhtpGA+SHpuAF0dORUNQbpmMkQLwDzaU=)
                          5: D2DF3ACCE25911EF9C741573C4F9AE02.roa (hash: mzsLMpqKZHnpS1jxQCrwB8rjSWZK0J6cgj7y6Sy2ob0=)
                          6: 1DD3ED16BDB611EF8F65515FC4F9AE02.roa (hash: NYziG9pEfTMgU56vyqT4ECUx0+xGwWZL89cQ95occgk=)
                          7: E35133A60ED911EE8A4E0A23C4F9AE02.roa (hash: +LKQHGBjyQavtGbDYZoM0TZlAhYLHnodgT2xhs31P7o=)
                          8: A13BE9EE8EE911EE8698A64FC4F9AE02.roa (hash: BbLe+tzPbnaYWKG7gM1VjEH/wcUFNySxqBWUmVUdKKg=)
                          9: 139300E4BA6911EFA78E2F66C4F9AE02.roa (hash: 1qb949nIw/0R9oQhGQh78XGami+Biv1wB24LyYGiBVo=)
                          10: E17B507E25DF11F0B111A515C4F9AE02.roa (hash: hvgmafeqE7JpAOUh9MIGSNa3kJtd7cqjjE/RR/pff6g=)
                          11: 3F3EDA068CAB11EF8A61C244C4F9AE02.roa (hash: n8rocIcqcCEqWOhQW6COhKUHQ1TT+r5yq9m/cXvntlg=)
                          12: 305C2134666211EFB1D51134C4F9AE02.roa (hash: 678Vn3LLWwx5u4uELhujFENcUsNRng8pzaOjm9n/20Y=)
                          13: AE0A263AB00411EF95939E11C4F9AE02.roa (hash: Hb3S2H5mvG6APMmAW4C0vTeaq85iORr/31KWRV1IZtk=)
                          14: E7DC24BCC4C211EF8670983EC4F9AE02.roa (hash: uEWJ7/SbDN/8MDuGUTA/PUoegQuUTtnZid1qI1+pgB0=)
                          15: 7857C144B87211EE98B04B19C4F9AE02.roa (hash: VfjibvprvBmnfdE90FAhNj0D7QO9B7oG8yc/kCD9FSM=)
                          16: A069EA0C8EE911EE8698A64FC4F9AE02.roa (hash: 1Kpd2YjRlMJbYQzqvODxmlNt6RPiHgoY7Xsf29roK9M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl
                          rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 03:37:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 516 (0x204)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE03B, serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4
        Validity
            Not Before: Jul 21 03:37:42 2025 GMT
            Not After : Jul 28 03:37:42 2025 GMT
        Subject: CN=687db606-6798
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c2:60:cf:84:e0:9f:24:a7:be:fc:77:80:c5:
                    77:16:dc:28:fb:5d:3b:53:c8:26:5c:69:64:72:47:
                    e7:d1:58:7f:e5:7f:82:b5:a7:9d:b4:11:33:19:89:
                    6c:39:5d:1d:84:fd:b8:33:07:4e:81:5c:ff:e0:a0:
                    02:29:28:1b:d9:28:9e:3b:a1:5b:80:b7:e5:7d:70:
                    c1:3c:29:52:65:23:24:5a:1b:c2:bb:bb:f9:a7:94:
                    19:3b:62:af:04:eb:8f:63:7a:00:d0:82:fc:b0:98:
                    5b:9b:ef:80:25:4a:c2:58:8a:44:ec:7b:ca:ce:80:
                    44:dd:8a:48:2e:a1:33:51:dd:aa:1c:47:77:2a:66:
                    02:3e:27:e0:a3:69:b7:f2:51:a1:77:40:c4:32:99:
                    97:34:c4:e2:25:4a:68:56:d3:8d:2b:94:f9:df:77:
                    1c:37:4f:84:d6:78:84:0f:c4:0d:6e:9e:cd:a1:b0:
                    c3:71:3a:58:f6:89:e6:b6:56:29:2b:20:9f:52:c6:
                    6e:05:c0:49:af:7b:ac:c7:ea:7e:a4:81:53:8f:d8:
                    95:f7:8d:1a:dc:c0:5f:c8:fc:c5:8b:4d:1d:c1:76:
                    74:ab:23:6b:47:06:0a:b4:d5:b4:fe:df:20:b6:02:
                    94:47:22:ae:09:3b:d9:27:7b:94:73:2e:d5:9b:e2:
                    1a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:B7:71:87:91:0D:10:46:0C:7B:6C:01:7F:80:6E:C7:3E:EE:76:DF
            X509v3 Authority Key Identifier:
                keyid:B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:f8:f9:f3:36:97:81:1a:1a:2b:9b:b4:47:f2:3d:bb:cf:84:
         6e:cb:b6:3c:3a:ca:da:84:ad:bb:3f:8e:6f:bd:56:b8:b7:a0:
         dc:8e:a8:6b:3e:3b:e5:3c:af:11:96:df:9c:83:e2:55:9b:5c:
         6d:a0:36:85:58:b2:a9:30:ba:8b:34:37:c5:15:07:87:50:69:
         93:92:51:ff:69:60:32:dc:7b:ba:92:bc:d3:15:37:a4:92:c3:
         e8:ec:81:16:38:51:e3:ef:6c:5f:f9:7b:99:d3:46:77:60:3a:
         59:a9:25:07:ab:d5:ae:f5:38:9c:76:79:57:17:13:fc:c7:a3:
         c3:af:45:76:59:5f:b4:d9:97:5d:6c:3f:fb:d2:9c:0e:71:6c:
         81:b0:32:61:ad:fb:5d:f1:4d:0c:6a:27:33:ae:7a:49:c6:10:
         a5:7b:f8:a6:cc:8c:f6:e7:71:ad:e8:eb:ff:ec:9e:14:43:52:
         11:41:93:1a:6c:63:f7:61:e8:58:63:b7:52:cb:dd:bc:05:ea:
         74:61:5e:20:04:eb:f1:f6:a9:0a:c3:e0:a9:f6:37:17:c7:17:
         a8:e1:25:b9:d6:d9:47:a5:56:f7:5b:6f:a1:88:5b:7c:f1:01:
         8f:e2:e7:e5:61:a5:1c:ca:fa:2f:c6:e4:a1:c9:9f:e6:a4:b0:
         47:95:42:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:31:20 2025 by rpki-client