Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9138C14/3E4C46305BC411EC96279354C4F9AE02/uw5VA3n-ooGogaZ0ebd8hgLQExQ.mft
File:                     uw5VA3n-ooGogaZ0ebd8hgLQExQ.mft (raw, json)
Hash identifier:          PpYnNh5y2Vjrof997oOpCUiL7t+DAL5e5NN3MLsTjcs=
Subject key identifier:   3B:10:F0:80:16:DB:6C:60:86:85:92:7B:C4:6C:51:D8:00:0B:B3:5F
Authority key identifier: BB:0E:55:03:79:FE:A2:81:A8:81:A6:74:79:B7:7C:86:02:D0:13:14
Certificate issuer:       /CN=A9138C14/serialNumber=BB0E550379FEA281A881A67479B77C8602D01314
Certificate serial:       0478
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uw5VA3n-ooGogaZ0ebd8hgLQExQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9138C14/3E4C46305BC411EC96279354C4F9AE02/uw5VA3n-ooGogaZ0ebd8hgLQExQ.mft
Manifest number:          046D
Signing time:             Thu 21 Aug 2025 00:16:44 +0000
Manifest this update:     Thu 21 Aug 2025 00:16:44 +0000
Manifest next update:     Thu 28 Aug 2025 00:16:44 +0000
Files and hashes:         1: uw5VA3n-ooGogaZ0ebd8hgLQExQ.crl (hash: 8xDOkt7mxu2U+vn4CHtL2knwBPzPToa+zJuijqGgKz0=)
                          2: 4911720A694F11ECB6F9B541C4F9AE02.roa (hash: znzxqt5ATB6md6snwQGOJ9T4JF8cX1CWxE59m4+gy6E=)
                          3: 53E4239C99F811ECA0663D19C4F9AE02.roa (hash: dR2muClPcLpQN+xv2JndS2S2ddR9spCzvVQI+l9CEQE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9138C14/3E4C46305BC411EC96279354C4F9AE02/uw5VA3n-ooGogaZ0ebd8hgLQExQ.crl
                          rsync://rpki.apnic.net/member_repository/A9138C14/3E4C46305BC411EC96279354C4F9AE02/uw5VA3n-ooGogaZ0ebd8hgLQExQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uw5VA3n-ooGogaZ0ebd8hgLQExQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Aug 2025 00:16:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1144 (0x478)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9138C14, serialNumber=BB0E550379FEA281A881A67479B77C8602D01314
        Validity
            Not Before: Aug 21 00:16:44 2025 GMT
            Not After : Aug 28 00:16:44 2025 GMT
        Subject: CN=68a6656c-15e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:97:04:9a:57:06:8b:a3:85:58:70:7d:e5:55:
                    cf:8c:63:b6:67:a3:6a:f5:8b:e0:c4:73:9e:64:49:
                    57:87:07:d1:ad:aa:8e:63:5a:f6:41:15:63:c4:83:
                    bb:91:e2:5a:13:f1:d6:0a:15:d8:ff:cb:d7:38:10:
                    f3:9d:1b:a1:be:5f:fa:7e:a8:93:96:6a:72:f6:b6:
                    1f:cc:f1:b3:2c:75:f6:04:20:7b:74:9e:57:4e:eb:
                    b1:fa:37:cb:d4:dd:ac:38:92:f1:49:1a:23:82:c9:
                    ff:bc:3c:cf:ec:2a:00:1c:5c:ac:92:85:e8:f8:26:
                    c6:d0:2f:3d:e7:36:13:b7:8b:2f:f2:73:53:21:3a:
                    7a:08:63:47:30:fc:fb:c8:a3:d4:f2:ba:8b:40:af:
                    6d:c7:ed:53:12:98:18:cb:bd:57:5d:83:b5:c4:6f:
                    36:79:a9:68:3a:dc:09:44:ed:33:d7:a1:72:59:56:
                    59:eb:58:90:84:99:85:3c:cb:ee:b4:65:01:50:f8:
                    48:ee:82:47:a9:69:0a:25:83:a6:dc:7e:8c:0a:f4:
                    33:86:c6:15:75:e9:dc:f7:b6:63:5e:15:c2:c1:d2:
                    46:87:53:a5:88:ef:06:36:c4:74:24:18:f7:96:83:
                    da:a7:4a:bc:7c:b0:e9:c9:b9:1b:f2:75:32:6b:2b:
                    87:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:10:F0:80:16:DB:6C:60:86:85:92:7B:C4:6C:51:D8:00:0B:B3:5F
            X509v3 Authority Key Identifier:
                keyid:BB:0E:55:03:79:FE:A2:81:A8:81:A6:74:79:B7:7C:86:02:D0:13:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9138C14/3E4C46305BC411EC96279354C4F9AE02/uw5VA3n-ooGogaZ0ebd8hgLQExQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uw5VA3n-ooGogaZ0ebd8hgLQExQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138C14/3E4C46305BC411EC96279354C4F9AE02/uw5VA3n-ooGogaZ0ebd8hgLQExQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:cb:5a:68:19:f7:5c:ba:97:af:74:46:82:65:ac:ae:67:5a:
         10:0b:46:cd:9c:69:85:1c:e0:9c:61:e3:ff:5f:b1:92:e9:a8:
         b6:e9:46:5a:10:9a:2c:62:54:38:fa:97:1f:8d:b5:db:b6:6f:
         5d:5f:bb:48:4a:d9:4e:07:97:6d:7c:54:4d:1e:db:2e:d7:2e:
         0e:46:cd:8d:a4:42:27:9e:d6:26:52:ed:ec:84:18:86:30:08:
         6d:cb:fa:1b:20:82:02:1c:18:b5:e9:9a:8a:34:a6:5c:0d:bf:
         e7:f0:22:c5:b0:de:79:14:bd:1c:1c:32:a0:20:09:cf:00:c2:
         3a:bf:eb:0e:ad:11:99:de:b8:e8:bf:10:21:7a:11:ac:ff:35:
         df:d5:05:85:a2:5f:be:f0:8a:1a:05:6e:aa:4c:e2:6c:84:dd:
         0d:f8:d7:c2:fc:31:4a:d7:a9:b9:36:b1:0a:be:1d:fe:c9:09:
         99:db:90:1b:85:78:86:29:f6:85:48:2a:82:37:fe:21:ed:58:
         90:fb:bf:fc:2d:3a:cc:c9:7f:80:18:e9:a8:f3:e4:d0:96:33:
         e3:58:d8:73:22:b7:d4:14:61:df:99:bb:d5:12:a2:5e:5b:85:
         47:5f:e9:11:98:8f:19:67:be:e9:4e:d2:8c:1b:d7:2b:a1:e9:
         66:18:2d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 07:00:09 2025 by rpki-client