Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.mft
File:                     uvWtoyyg00zzzPU6vfht5vjtkAU.mft (raw, json)
Hash identifier:          LUh+16HL3dX22vNAGIwSktBFL2KkdvzIEbfxl/roKn0=
Subject key identifier:   18:20:86:E6:C9:C0:12:0B:B2:57:92:BB:08:73:07:55:49:9B:66:3F
Authority key identifier: BA:F5:AD:A3:2C:A0:D3:4C:F3:CC:F5:3A:BD:F8:6D:E6:F8:ED:90:05
Certificate issuer:       /CN=A9146AD7/serialNumber=BAF5ADA32CA0D34CF3CCF53ABDF86DE6F8ED9005
Certificate serial:       1A14
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.mft
Manifest number:          1983
Signing time:             Thu 04 Sep 2025 16:34:54 +0000
Manifest this update:     Thu 04 Sep 2025 16:34:53 +0000
Manifest next update:     Thu 11 Sep 2025 16:34:53 +0000
Files and hashes:         1: uvWtoyyg00zzzPU6vfht5vjtkAU.crl (hash: o0s3xJaGnom7hmIAZVzKThB4k7KhPZUKYtaYGj+HHWk=)
                          2: 6B09C1DAB16811ECBB0AD94EC4F9AE02.roa (hash: Qz3uK0x8TmBAlmnPYdm9Em6r/+RMom/8FHhDVc9i3gM=)
                          3: 5047D510C02411EC93BB8865C4F9AE02.roa (hash: PVGHL8sNl+GypqCV9Nbt0KEieAW3mlbAftZL/WUZxsk=)
                          4: 680B87D6F0F411EC8B1EB281C4F9AE02.roa (hash: B4yvVmLSnuqsnH1jc03a0dSFccIL2A7ZcVxNxt9Xwuk=)
                          5: 4F9AA82CC02411EC93BB8865C4F9AE02.roa (hash: Sc0huKFJaR77IvAZnF61IoAHkjTM8P4+L9d/0GJ4tIA=)
                          6: 6B78FC0C892511EFA94C8B24C4F9AE02.roa (hash: DcZlXqxJU0ffDD2b5HPGEz8WWfykJap2CMKvzj3AWqU=)
                          7: EB61BF32FDCD11EEB0EABC0CC4F9AE02.roa (hash: nvDXFuMbASKQcxa2tU3FunOBPS4uwAfHeJjVkN0kFQk=)
                          8: 4532BD9C14EF11ECA529523DC4F9AE02.roa (hash: lcfreWfdZCTI1W22R8ETqsSK5D5Kx4e7mgheGCbSj1c=)
                          9: 4EE22C48C02411EC93BB8865C4F9AE02.roa (hash: vUX3RU0X1V+oe312SGKD4qBeeq4yD2Hm5bT9njfYEwg=)
                          10: 1C6550B237FD11EFB7E92B72C4F9AE02.roa (hash: Zg1HxtJHNn+xhlGzIL5uYjzbV2CXaOxPR+ZIHhFUiLI=)
                          11: 1321A11C9DF311E99A8DE961C4F9AE02.roa (hash: a159m0Dumns74n/DW56Q8reR56xBmLD89oVMS7W3Rnw=)
                          12: E125DC2E94D611EAAC882A28C4F9AE02.roa (hash: 3dUDXrKmdAr4EqL7pE8aDmFxq1keOgDEV4E7ok8FbKU=)
                          13: 6A90213E3FAD11EEA252F62FC4F9AE02.roa (hash: Co0oH18UWvs2mZktht06NywANpQZQV/ORKqi/8Frf4w=)
                          14: 669662644C4B11EE9AC4B26BC4F9AE02.roa (hash: hQ7KdpbSVedFa9m4PpJQNuiHB98SPLS+0rqDHaeBr0g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.crl
                          rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Sep 2025 16:34:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6676 (0x1a14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146AD7, serialNumber=BAF5ADA32CA0D34CF3CCF53ABDF86DE6F8ED9005
        Validity
            Not Before: Sep  4 16:34:53 2025 GMT
            Not After : Sep 11 16:34:53 2025 GMT
        Subject: CN=68b9bfae-e872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d6:7e:2f:de:4a:91:08:fa:4a:31:54:98:12:
                    db:2d:37:0e:16:9d:c1:4d:82:4e:2c:48:97:f8:68:
                    af:1b:56:c5:14:38:da:eb:78:d5:88:58:b4:16:c0:
                    09:c4:21:3d:d6:c2:ae:c5:1f:28:e1:f5:6e:5f:17:
                    c8:16:6c:ab:76:08:6d:d9:70:0b:5b:a4:94:9e:6f:
                    15:65:95:15:40:88:b7:38:b8:50:3f:96:01:1f:b9:
                    ce:f0:9e:12:96:1d:8b:f6:da:6d:91:15:7a:fc:3a:
                    d0:11:91:5c:95:8c:70:0e:c3:0f:e4:46:02:1f:19:
                    1e:5a:74:db:93:01:d4:cb:ab:4c:63:64:33:84:bf:
                    aa:ee:ac:5a:da:35:fd:45:96:e1:87:6c:07:f9:c3:
                    ab:e6:19:1b:9d:11:ff:4a:ee:2c:a4:bf:6f:48:bc:
                    4c:79:af:5b:c8:0e:ea:47:3d:0d:37:19:16:e7:8c:
                    a4:81:16:31:89:36:e9:aa:bf:51:e4:4b:61:88:41:
                    5d:c8:49:ce:1f:2f:e8:84:95:6b:8c:bb:5f:0d:94:
                    73:34:90:ee:b4:e0:2f:a2:ca:2f:6a:9e:57:cd:ba:
                    e5:90:09:fc:9e:4a:07:0b:2c:aa:fc:69:78:ea:76:
                    34:c0:62:fa:dd:68:22:f9:54:0d:62:92:be:96:bf:
                    f7:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:20:86:E6:C9:C0:12:0B:B2:57:92:BB:08:73:07:55:49:9B:66:3F
            X509v3 Authority Key Identifier:
                keyid:BA:F5:AD:A3:2C:A0:D3:4C:F3:CC:F5:3A:BD:F8:6D:E6:F8:ED:90:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:18:19:26:eb:44:85:ef:8f:7c:27:d8:f9:c9:3d:fd:77:69:
         1d:88:65:be:40:7b:d1:5c:af:2d:a4:f8:af:c6:e6:94:83:3d:
         1b:fa:b3:0c:78:7c:c3:2a:3e:17:df:20:2f:03:71:2b:e7:e0:
         2e:84:2e:4f:a1:aa:eb:ca:31:59:5c:9d:83:0f:fa:cc:7a:0b:
         28:9f:d6:c5:8b:7c:b5:03:84:a9:20:32:ef:01:4f:b6:67:fe:
         9a:a9:ee:64:f8:92:3f:e5:49:71:da:24:a5:e2:25:55:00:f2:
         c1:22:6a:34:96:e0:e5:f0:52:a3:77:33:82:94:c7:05:63:d9:
         af:d7:08:8c:af:7f:5c:17:a7:38:d1:49:6b:b7:69:69:fc:98:
         ad:35:8a:42:eb:65:53:eb:59:a1:28:49:bd:ce:a6:b3:c3:92:
         17:e1:40:32:a2:5d:a8:18:8b:f0:99:3e:03:8e:28:eb:19:29:
         3a:e8:56:26:64:9c:b3:31:a0:a5:80:bc:4b:06:7e:68:ef:e7:
         dd:5f:93:46:02:43:6c:bf:fb:12:a5:46:65:6f:f5:59:d9:1c:
         c9:04:52:00:9f:18:6d:23:75:ae:ac:c9:ff:75:49:07:bb:59:
         df:91:48:c7:51:79:fe:08:b7:54:c2:9e:f4:c5:3a:33:90:4c:
         05:6a:57:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 04:22:52 2025 by rpki-client