Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft
File:                     u8EDVhr9epMDbRxy3UwKfCpOKc4.mft (raw, json)
Hash identifier:          uUWbpgkDOdAaBO45uqcpwOeKHXL/vawNSWmYS2ND7Oc=
Subject key identifier:   15:11:5E:6C:B7:16:24:A1:71:89:F5:67:7B:1C:48:28:71:65:E8:CC
Authority key identifier: BB:C1:03:56:1A:FD:7A:93:03:6D:1C:72:DD:4C:0A:7C:2A:4E:29:CE
Certificate issuer:       /CN=A91F277D/serialNumber=BBC103561AFD7A93036D1C72DD4C0A7C2A4E29CE
Certificate serial:       0683
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u8EDVhr9epMDbRxy3UwKfCpOKc4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft
Manifest number:          066B
Signing time:             Thu 24 Jul 2025 22:24:39 +0000
Manifest this update:     Thu 24 Jul 2025 22:24:38 +0000
Manifest next update:     Thu 31 Jul 2025 22:24:38 +0000
Files and hashes:         1: u8EDVhr9epMDbRxy3UwKfCpOKc4.crl (hash: P7iIY1Vwpg3ZbOb3ec/bobrApaekTub/iUCYDmV4R7U=)
                          2: CEF8E22E711711EDB49CE11AC4F9AE02.roa (hash: MXG2UaX3e+u+Jgkl2hW9VaZ5bWI3Hg2FUtWl1xPKFxI=)
                          3: 70A77C348D6C11EBAFD23A2EC4F9AE02.roa (hash: A5KK9SQwb+EDWJ4jMnTUQq3SJ0SvbTU26Y/s1pM+n+I=)
                          4: 0BABC0DCB15D11EB8937582CC4F9AE02.roa (hash: myGu3py2MJoX+9pcsdAEfeXFlVuZbTSedA0MlFyQwmI=)
                          5: 715924988D6C11EBAFD23A2EC4F9AE02.roa (hash: IRx8YlQZD3iZNO8ZkV5fm0YkjEB3fazq27IMfHjcxDQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.crl
                          rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u8EDVhr9epMDbRxy3UwKfCpOKc4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 31 Jul 2025 22:24:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1667 (0x683)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F277D, serialNumber=BBC103561AFD7A93036D1C72DD4C0A7C2A4E29CE
        Validity
            Not Before: Jul 24 22:24:38 2025 GMT
            Not After : Jul 31 22:24:38 2025 GMT
        Subject: CN=6882b2a6-31c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:b8:95:cc:dd:af:fd:e3:f2:71:d3:50:2a:3e:
                    4b:b7:47:97:4d:e7:ec:93:30:2f:23:81:16:62:61:
                    c6:ea:c1:01:6a:5d:92:d3:94:5e:27:05:e0:64:55:
                    f4:16:26:a5:b6:10:60:c8:c3:eb:7b:af:22:08:fc:
                    09:04:eb:12:e2:b9:dc:94:b6:05:67:1a:e1:b4:b4:
                    c1:40:66:b2:c0:45:fa:d0:20:a5:3c:d2:5f:6e:83:
                    bd:d9:71:32:8e:89:e1:52:ce:6c:bf:70:19:bc:51:
                    e0:78:1c:4e:b6:8f:f5:75:ed:5c:d6:11:8a:77:d6:
                    72:c7:32:36:24:bc:10:61:96:86:ac:ee:41:08:05:
                    dc:fc:5c:73:13:23:8e:a5:95:cc:69:37:73:6b:49:
                    5a:13:dd:00:86:d6:45:bf:9b:93:8b:01:dd:df:3a:
                    ba:29:39:5a:f7:a2:19:30:ba:76:76:33:0f:3a:78:
                    6e:ac:3d:95:67:49:87:08:b2:12:bc:86:bb:89:4a:
                    78:be:81:e4:1a:af:a1:27:8e:40:1f:b8:eb:b7:6e:
                    3d:32:0d:69:f1:a4:63:62:82:d5:75:48:c8:3e:ee:
                    55:a4:ad:33:88:46:c0:67:91:ec:74:2b:ed:c5:f5:
                    52:f4:50:c5:b2:ab:2e:fb:35:f0:8f:0e:98:c1:9d:
                    5e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:11:5E:6C:B7:16:24:A1:71:89:F5:67:7B:1C:48:28:71:65:E8:CC
            X509v3 Authority Key Identifier:
                keyid:BB:C1:03:56:1A:FD:7A:93:03:6D:1C:72:DD:4C:0A:7C:2A:4E:29:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u8EDVhr9epMDbRxy3UwKfCpOKc4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:38:a8:87:2b:44:15:cf:ab:83:de:d0:5e:d8:98:3b:3e:16:
         35:7d:b5:d5:8d:b8:bb:05:f2:bc:15:28:a7:c5:60:1c:69:5a:
         df:8b:4c:69:f1:d2:48:cd:e1:d0:ab:76:23:16:a0:c0:9f:91:
         c4:f4:7c:59:74:70:c4:3d:94:0e:01:24:c6:05:c3:7c:d3:ad:
         b7:bf:4c:99:ad:5a:ac:74:41:55:b3:55:c3:90:d3:03:19:c3:
         65:60:1c:cc:a2:7a:1b:bd:19:0f:f4:ec:95:0b:66:ac:c5:f0:
         d2:22:b5:0a:1d:51:0f:d4:f1:28:df:43:7d:1f:1b:4e:9b:7b:
         6d:b2:ef:52:18:50:54:e5:58:99:9b:64:35:09:15:24:8c:a8:
         44:13:f2:10:a0:8a:8a:7a:b4:be:e3:72:f1:86:be:1d:75:44:
         d8:e9:af:4a:a9:96:99:42:70:0f:14:98:51:a8:7e:3f:4a:d6:
         52:e1:b0:22:1c:13:30:b9:38:ae:21:89:63:f3:76:59:21:aa:
         86:3b:fd:cc:bb:e0:55:84:f8:b3:a7:7a:2e:40:99:48:f8:22:
         25:2d:dc:ff:fb:2d:ce:0c:63:37:cb:11:bd:c4:a2:34:1f:c1:
         ce:04:d5:b9:bf:72:10:a1:2e:1d:fb:41:92:7a:89:09:c1:1e:
         5a:5d:f2:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 01:59:05 2025 by rpki-client