Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.mft
File:                     UoaLCQH1W0B4uRpzRRym0iMSyKs.mft (raw, json)
Hash identifier:          5lPogKP8b2wX3lZEIrFbTJXHCIJRTO3azbxRZFq9DIA=
Subject key identifier:   0F:86:B1:72:2B:9D:07:F5:13:AE:D0:FF:6D:D9:09:50:49:1F:7D:35
Authority key identifier: 52:86:8B:09:01:F5:5B:40:78:B9:1A:73:45:1C:A6:D2:23:12:C8:AB
Certificate issuer:       /CN=A913E2B3/serialNumber=52868B0901F55B4078B91A73451CA6D22312C8AB
Certificate serial:       0C41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoaLCQH1W0B4uRpzRRym0iMSyKs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.mft
Manifest number:          0C33
Signing time:             Mon 08 Sep 2025 18:41:29 +0000
Manifest this update:     Mon 08 Sep 2025 18:41:29 +0000
Manifest next update:     Mon 15 Sep 2025 18:41:29 +0000
Files and hashes:         1: UoaLCQH1W0B4uRpzRRym0iMSyKs.crl (hash: Dr2TpEhmlIUw7A88io4T32OfcDSijxnm+gEnNrJ/LeE=)
                          2: 399AB6DA4ED511ED84336740C4F9AE02.roa (hash: xH17spaHhMO4029wjNj4ZW6FqoA9g6CON6QQbD7o3j0=)
                          3: 3AB1E0D44ED511ED84336740C4F9AE02.roa (hash: J+JzfdPnvnmB6Ay3Ml+qeWmcjb1XIfVxnUqGVNUN7Ko=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.crl
                          rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoaLCQH1W0B4uRpzRRym0iMSyKs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 15 Sep 2025 18:41:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3137 (0xc41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E2B3, serialNumber=52868B0901F55B4078B91A73451CA6D22312C8AB
        Validity
            Not Before: Sep  8 18:41:29 2025 GMT
            Not After : Sep 15 18:41:29 2025 GMT
        Subject: CN=68bf2359-3907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:cd:c8:61:6e:33:08:ef:2b:fc:bd:64:51:65:
                    c1:10:32:08:b8:38:8d:35:91:a8:75:4d:7f:cc:9e:
                    13:d6:c4:de:50:26:16:88:0b:9a:7e:63:f3:68:ba:
                    e6:d9:2f:0a:a5:9a:74:45:5b:39:a0:a7:00:48:1f:
                    53:30:f6:a2:b1:6e:e7:6d:28:d3:aa:72:03:ab:f4:
                    b2:e3:e6:8f:2d:4f:0c:f7:06:00:b9:0c:4e:e4:7f:
                    f6:ae:d1:33:a8:72:1c:4e:94:51:5f:fa:30:04:96:
                    d4:fb:54:c0:f8:df:65:e3:0c:c4:a2:a1:f3:ec:d7:
                    17:88:30:df:9a:47:6f:d4:55:b3:de:02:cf:6a:16:
                    01:56:e2:12:d4:c8:2b:27:7a:73:c8:39:bb:e8:33:
                    28:d0:cb:ff:3f:42:ef:4a:ee:2c:f5:9d:f4:22:85:
                    e3:e4:a2:db:17:6a:98:ac:ee:c8:36:bb:a5:dd:8e:
                    01:e6:14:d3:e8:a4:29:ed:69:77:56:b5:86:f9:e7:
                    c0:56:e5:4b:43:e6:47:3c:7a:29:84:06:4d:be:6c:
                    eb:b8:97:43:db:1d:a0:b4:ba:cf:66:b0:8d:65:00:
                    27:24:91:b2:30:57:e0:e8:b2:44:15:ef:fb:fd:8a:
                    de:75:54:fa:bb:3d:88:42:03:e1:ea:2e:43:bb:df:
                    5c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:86:B1:72:2B:9D:07:F5:13:AE:D0:FF:6D:D9:09:50:49:1F:7D:35
            X509v3 Authority Key Identifier:
                keyid:52:86:8B:09:01:F5:5B:40:78:B9:1A:73:45:1C:A6:D2:23:12:C8:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoaLCQH1W0B4uRpzRRym0iMSyKs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:b5:26:f3:c3:09:e7:c1:3c:d4:62:32:4b:02:3b:2a:0e:52:
         a2:55:4f:fa:43:d8:16:38:a8:d6:ec:f2:fa:90:9d:3e:02:31:
         90:c3:dd:69:97:35:1a:de:93:9b:99:0d:49:18:29:54:ec:c3:
         03:3a:d8:e6:ed:73:89:b7:8b:ca:70:cf:41:1e:0c:2c:52:da:
         c5:07:c1:16:8b:6b:6a:68:22:f7:3b:97:45:f3:b8:e4:8e:54:
         cb:55:68:d6:78:97:48:67:29:b8:38:86:69:fc:cb:70:d9:cd:
         5b:af:70:72:5b:1f:3e:01:60:4d:72:93:d7:51:71:15:d2:a4:
         01:f6:a9:50:3a:20:2d:f4:40:69:4d:f4:e8:66:eb:88:80:06:
         39:31:cb:56:fb:75:c2:bc:15:38:63:55:80:55:2e:e0:6a:8e:
         68:d9:15:1e:f1:f1:12:09:24:6c:de:1e:21:4f:d7:46:86:87:
         fe:c6:6b:ff:b3:23:10:b4:4a:07:16:5a:b3:ab:70:78:36:f7:
         8c:f0:2a:37:5f:80:9b:2b:87:1a:44:58:16:ee:7b:03:b2:b0:
         27:2e:54:c8:e7:f1:6c:9c:12:11:87:e7:a6:83:17:35:89:af:
         fc:8f:a3:0a:49:fc:bc:2d:49:a8:ef:40:ac:ad:f0:47:ee:bf:
         78:6b:d6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 01:15:12 2025 by rpki-client