Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.mft
File:                     uEwjlp7XnA4xwTwUUAEuIkbT-U0.mft (raw, json)
Hash identifier:          N5cK10GWXG8ndvSwaWmZL52O3NMTmk5chLeEttIah8M=
Subject key identifier:   EA:E6:16:4B:19:4E:08:56:96:FE:18:EF:AD:12:6A:F2:89:B0:81:06
Authority key identifier: B8:4C:23:96:9E:D7:9C:0E:31:C1:3C:14:50:01:2E:22:46:D3:F9:4D
Certificate issuer:       /CN=A911F2DF/serialNumber=B84C23969ED79C0E31C13C1450012E2246D3F94D
Certificate serial:       010C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uEwjlp7XnA4xwTwUUAEuIkbT-U0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.mft
Manifest number:          0106
Signing time:             Sun 19 Oct 2025 07:59:40 +0000
Manifest this update:     Sun 19 Oct 2025 07:59:40 +0000
Manifest next update:     Sun 26 Oct 2025 07:59:40 +0000
Files and hashes:         1: uEwjlp7XnA4xwTwUUAEuIkbT-U0.crl (hash: EJi48naayRbuYF6SPfrUGftBY0krBqR6po8sa0k1Mr0=)
                          2: 92E390AC958E11EF87A4040BC4F9AE02.roa (hash: ziX6uRrjdN8XtvPVmk67ZGOFErPjsTpewvnUOr01Tm8=)
                          3: 7FAE29E8958E11EF9CC0DD0AC4F9AE02.roa (hash: 3kGsoUmf1FpifCPtPS1E6u6lzuQTEBurC189TVcNMdw=)
                          4: 659B37E4958E11EFAFF1870AC4F9AE02.roa (hash: XEN2blQh3Cs+gyEWpdkV0R6BegNBQ93goCybhrow5bM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.crl
                          rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uEwjlp7XnA4xwTwUUAEuIkbT-U0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 07:59:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 268 (0x10c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F2DF, serialNumber=B84C23969ED79C0E31C13C1450012E2246D3F94D
        Validity
            Not Before: Oct 19 07:59:40 2025 GMT
            Not After : Oct 26 07:59:40 2025 GMT
        Subject: CN=68f49a6c-2c4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ca:5c:ba:5e:9a:40:b7:94:a9:65:f4:4b:06:
                    44:50:ea:14:77:3a:d6:5d:49:97:67:ae:b2:56:70:
                    60:80:30:af:60:c3:ef:38:ba:40:1a:79:9b:01:78:
                    69:b0:e4:f4:00:ac:99:30:34:6b:89:6f:8d:91:99:
                    75:8d:60:b5:70:7b:5f:0f:bb:cf:eb:77:bf:bd:65:
                    7d:8c:12:db:e9:77:d3:29:56:4e:72:7b:ec:80:09:
                    d6:a0:4d:15:a6:fb:5d:09:4e:8e:d7:02:42:4d:8b:
                    87:7d:fd:8a:4b:b7:b5:e0:68:2d:2e:36:f1:57:e8:
                    16:77:59:bc:44:10:79:03:1e:aa:95:92:4a:8f:76:
                    fe:9e:b5:e4:2a:2d:2b:64:55:88:96:66:ec:33:f9:
                    3a:87:f5:6a:9d:02:8f:ed:e0:aa:b3:1d:42:4e:b1:
                    ba:d0:06:30:da:fa:76:89:1f:44:91:ba:34:53:07:
                    c4:3a:ae:76:9e:f5:ba:e6:44:af:8f:13:78:5d:15:
                    84:00:6f:4b:8d:64:a2:39:48:59:2c:fc:a1:0d:8d:
                    61:49:1e:2d:3c:fa:87:7b:44:c2:68:0e:b2:a2:d9:
                    3a:e5:96:f6:1e:c7:b6:66:0f:bc:56:06:46:13:55:
                    ca:35:56:0f:b6:98:05:70:b1:a6:2e:a4:06:3a:30:
                    d1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:E6:16:4B:19:4E:08:56:96:FE:18:EF:AD:12:6A:F2:89:B0:81:06
            X509v3 Authority Key Identifier:
                keyid:B8:4C:23:96:9E:D7:9C:0E:31:C1:3C:14:50:01:2E:22:46:D3:F9:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uEwjlp7XnA4xwTwUUAEuIkbT-U0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:76:9d:08:74:86:46:a5:91:b5:24:27:92:9e:fe:e2:b2:67:
         d5:e0:59:de:cb:2d:91:40:6f:68:20:8b:c7:b8:14:cc:c1:bc:
         d5:f7:f3:2f:e0:70:e4:79:eb:80:f5:f4:04:89:fb:f3:da:31:
         af:ca:36:39:2e:f5:e0:cf:0a:7d:30:2b:81:f6:0d:45:9e:db:
         7a:38:91:6c:ab:bc:a5:7f:7b:5c:51:8f:6a:05:97:ad:0d:20:
         f2:57:dd:da:39:62:2c:0d:40:e3:7e:a9:62:ed:a8:e5:de:c4:
         6c:c6:ef:8e:a1:b8:9c:de:66:2d:c7:1c:20:63:8f:89:c9:a7:
         fa:1d:6f:85:c5:72:bf:2b:95:3e:6e:dc:14:2f:d8:19:f4:1f:
         81:86:6a:e9:93:0b:fd:d3:55:c3:2b:31:1c:2f:d2:6e:d1:ac:
         57:c2:ac:6f:b7:02:38:33:7e:df:9e:30:77:47:e4:23:3e:6c:
         22:fd:32:08:11:e2:e5:bd:2f:5d:2b:5b:2b:a9:31:0f:ea:a4:
         22:db:c1:12:e0:c5:33:6d:f3:3b:65:34:70:d8:18:62:4c:63:
         00:77:0a:24:3a:d9:d8:8c:95:fb:6a:d1:fe:62:1a:b9:19:49:
         61:2c:a7:d2:d3:8d:2b:51:e4:d0:44:63:38:f3:db:01:6d:7e:
         22:f6:ba:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:57:14 2025 by rpki-client