Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/C13116F228D311ED8FBD6D6CC4F9AE02/Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.mft
File:                     Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.mft (raw, json)
Hash identifier:          F4/nUxQ9raoJXRrFs8YT+1Edb4TOGoM+Y7JPiKFB0G4=
Subject key identifier:   A7:FF:FA:58:EC:FC:37:4D:D3:46:02:4C:44:74:A5:62:29:96:BC:D4
Authority key identifier: 52:FE:2B:6B:7F:49:7F:94:F1:D4:92:D1:91:7B:48:64:78:BF:59:D6
Certificate issuer:       /CN=A9125475/serialNumber=52FE2B6B7F497F94F1D492D1917B486478BF59D6
Certificate serial:       026E
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125475/C13116F228D311ED8FBD6D6CC4F9AE02/Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.mft
Manifest number:          0265
Signing time:             Sun 10 Aug 2025 14:20:26 +0000
Manifest this update:     Sun 10 Aug 2025 14:20:25 +0000
Manifest next update:     Sun 17 Aug 2025 14:20:25 +0000
Files and hashes:         1: Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.crl (hash: NEe1ShkaUnNtqLLDQYrX+rM3TCHP1VPrMTQcHaTo6vY=)
                          2: 84094296EF5E11EF81B0790EC4F9AE02.roa (hash: Ckg4hw6DabBO2d7okoEF2pancj6gViKBZRAEfAu13oo=)
                          3: DFA79FA2EFD811EE87F4440AC4F9AE02.roa (hash: hQScYTUNqe8SfNNwSXoRwPKv/1EvvMjHkzfsNEe+pKg=)
                          4: C3923CE6EFD811EEB93EE009C4F9AE02.roa (hash: EgTNqiKvmZXEy9LjOSG2dN0ynTpnYuhjXlrpPTL50KA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125475/C13116F228D311ED8FBD6D6CC4F9AE02/Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.crl
                          rsync://rpki.apnic.net/member_repository/A9125475/C13116F228D311ED8FBD6D6CC4F9AE02/Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 622 (0x26e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125475, serialNumber=52FE2B6B7F497F94F1D492D1917B486478BF59D6
        Validity
            Not Before: Aug 10 14:20:25 2025 GMT
            Not After : Aug 17 14:20:25 2025 GMT
        Subject: CN=6898aaa9-a303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e1:be:51:2f:86:86:bb:a5:7e:ad:e6:e3:9f:
                    a8:0e:b6:de:e8:47:cd:fe:2d:29:38:f5:38:d7:b6:
                    16:68:24:5c:3a:22:8d:c6:71:69:7f:6b:57:92:f0:
                    5b:af:0d:39:ad:33:b7:a0:8b:42:91:f9:13:32:95:
                    0b:79:93:2b:5e:02:86:3e:15:82:0c:79:7f:4b:5a:
                    39:c5:a6:7c:96:2a:be:56:70:1d:9e:7e:2f:43:a1:
                    ae:3b:a7:8c:bd:c0:3c:3a:77:ec:d7:59:83:35:b4:
                    93:25:7a:6c:fb:e2:16:4a:8c:99:e7:2c:b5:be:ea:
                    d8:7f:74:9b:4d:1f:13:eb:39:35:44:14:c0:5d:f8:
                    51:e6:99:23:c8:0b:73:e5:b1:54:67:ce:39:59:56:
                    2b:89:63:9d:13:88:94:6b:35:33:fb:d1:b9:62:83:
                    c0:12:3c:cc:a7:5f:32:d9:57:04:2c:32:8d:61:ce:
                    20:46:f7:d7:22:b6:01:d7:f3:7b:fc:1c:58:49:df:
                    d6:cf:d4:39:73:e7:fc:40:3a:9b:be:dc:9b:22:10:
                    c1:a9:c9:aa:a2:33:b1:9e:91:82:94:06:27:a2:8c:
                    67:83:dd:dc:c8:2c:2c:c9:1a:de:8b:dd:ce:d1:5a:
                    20:bf:8a:28:21:3f:09:6f:bd:f3:6b:78:26:08:0c:
                    28:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:FF:FA:58:EC:FC:37:4D:D3:46:02:4C:44:74:A5:62:29:96:BC:D4
            X509v3 Authority Key Identifier:
                keyid:52:FE:2B:6B:7F:49:7F:94:F1:D4:92:D1:91:7B:48:64:78:BF:59:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125475/C13116F228D311ED8FBD6D6CC4F9AE02/Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/C13116F228D311ED8FBD6D6CC4F9AE02/Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:c8:da:e7:f4:e0:ad:c6:1e:10:62:90:9a:0a:66:ce:c4:bb:
         9f:fc:dd:65:5c:77:fb:49:cc:cd:be:01:62:9c:dd:2a:88:8e:
         c8:ab:36:69:58:26:47:c4:6d:f6:f2:38:e5:04:55:f1:62:fa:
         ab:42:06:2d:6a:65:84:87:d4:d2:58:7e:a4:ef:e5:e6:2c:f3:
         a5:60:bd:58:d8:3d:fc:26:97:94:23:be:e6:5f:f5:f9:b1:07:
         8a:df:6f:c4:e2:98:9e:ec:18:6a:67:33:fa:e6:75:48:28:10:
         1c:c9:6b:d9:aa:9f:d4:4c:15:e1:7f:3b:d4:e5:87:52:06:fb:
         b9:46:d6:99:91:7f:cf:dd:23:56:d9:de:55:6e:ca:b6:2d:0d:
         7d:05:24:2e:62:e4:ae:9f:46:57:14:39:ba:13:e1:9c:e8:62:
         29:26:b4:af:4e:27:aa:ca:6d:07:90:b9:7e:ab:fb:56:2a:28:
         6a:a6:1f:22:ae:3c:fc:80:f5:b2:58:54:08:62:2e:86:dd:c0:
         69:b1:78:47:c5:f1:84:dd:20:6c:d4:6b:d4:90:63:c0:be:c1:
         40:31:3e:03:0e:05:42:c8:56:b9:9d:e8:aa:d8:e4:dc:4c:d3:
         94:36:67:42:01:12:35:a3:90:fb:38:c6:c8:0d:57:7e:bb:9c:
         7e:70:0c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:10:48 2025 by rpki-client