Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft
File:                     CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft (raw, json)
Hash identifier:          ZK729AEYIjQ7JFfC1wn9s1vDg5bTzfzZsSVj94gN5B4=
Subject key identifier:   77:DD:DA:AD:F3:C2:55:4B:88:F6:FB:8E:3E:EA:43:ED:29:F5:6F:BF
Authority key identifier: 09:40:7F:70:F9:77:16:00:F4:FB:AA:75:C0:FE:96:90:D8:C6:5A:30
Certificate issuer:       /CN=A912559E/serialNumber=09407F70F9771600F4FBAA75C0FE9690D8C65A30
Certificate serial:       013B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUB_cPl3FgD0-6p1wP6WkNjGWjA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft
Manifest number:          0133
Signing time:             Sat 09 Aug 2025 04:56:59 +0000
Manifest this update:     Sat 09 Aug 2025 04:56:58 +0000
Manifest next update:     Sat 16 Aug 2025 04:56:58 +0000
Files and hashes:         1: CUB_cPl3FgD0-6p1wP6WkNjGWjA.crl (hash: orDkfM2VQstQMB620irYmxDZeK5kAE53BXvRz1FxG7g=)
                          2: AC218F2E2CDE11EFBC062E74C4F9AE02.roa (hash: lEc4QJGwk5bvYmoYAomdEIkxOdB1PEJOkUqud1Iy0CI=)
                          3: AB501A702CDE11EFBC062E74C4F9AE02.roa (hash: oNFEmYACURX8AL5CKdRsG7Ba4gG8bP0+lhNlBuOmVKY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.crl
                          rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUB_cPl3FgD0-6p1wP6WkNjGWjA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 315 (0x13b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912559E, serialNumber=09407F70F9771600F4FBAA75C0FE9690D8C65A30
        Validity
            Not Before: Aug  9 04:56:58 2025 GMT
            Not After : Aug 16 04:56:58 2025 GMT
        Subject: CN=6896d51a-5bee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:73:1d:c0:fa:37:51:17:39:8b:fd:7d:61:fb:
                    ea:8a:dc:ad:c6:c3:90:6c:a6:29:a1:a6:14:c4:3b:
                    42:6f:42:46:eb:2d:58:23:aa:2d:93:16:7c:65:02:
                    b9:1d:83:1c:f6:83:6c:0f:1f:29:35:20:0c:fa:c4:
                    32:cc:8c:a8:0e:30:ff:93:9d:57:fb:a4:4e:85:6b:
                    f6:9e:24:fd:14:47:f7:a4:82:98:1c:74:d1:81:26:
                    24:d9:3c:69:45:a5:d2:29:30:3b:7b:50:de:9d:d2:
                    2b:c1:01:b3:5f:21:37:b3:59:82:df:d0:b8:06:24:
                    f7:8e:cc:a6:ed:31:b6:6a:20:80:8b:2f:e1:04:b9:
                    1b:d0:c6:b8:ad:8d:17:6e:a4:86:96:9d:88:d7:4f:
                    a1:42:c3:c0:e6:44:41:8f:6a:c5:a7:22:28:d8:78:
                    8c:e5:64:86:25:04:22:36:91:71:6c:3b:98:4e:90:
                    37:b2:65:06:4c:2d:fe:83:58:a3:b7:e6:e7:28:d7:
                    ff:fc:4e:a3:af:90:29:4c:5e:a4:ce:90:05:97:0c:
                    c8:e6:56:fc:0f:ae:2e:7b:11:3d:fd:6f:3f:94:79:
                    28:b2:c4:0e:84:00:83:40:6a:d9:bc:e8:3a:c4:dd:
                    b7:75:c9:7b:92:27:1f:fc:40:65:c6:60:7e:e0:fc:
                    43:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:DD:DA:AD:F3:C2:55:4B:88:F6:FB:8E:3E:EA:43:ED:29:F5:6F:BF
            X509v3 Authority Key Identifier:
                keyid:09:40:7F:70:F9:77:16:00:F4:FB:AA:75:C0:FE:96:90:D8:C6:5A:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUB_cPl3FgD0-6p1wP6WkNjGWjA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:3c:4f:9b:d0:c2:11:1d:88:b5:69:e9:42:b8:6d:4a:15:b1:
         d8:e2:e1:cd:27:30:15:57:e6:7f:45:60:12:69:98:e6:b9:7b:
         c1:18:83:57:5b:51:8d:e4:06:98:ae:04:f9:b1:52:e5:ff:74:
         a7:7f:b4:fb:0e:10:22:2e:e1:b4:05:c7:27:27:4b:9d:3b:82:
         de:17:22:30:93:02:10:e3:f3:21:63:36:6e:22:0f:e7:62:09:
         09:b2:b9:0b:3a:a0:75:ef:6c:92:4e:45:dc:57:f7:d7:20:63:
         6e:62:5d:47:43:34:cd:76:c8:c1:34:23:62:29:79:ef:e4:05:
         a5:d9:81:dd:dd:22:25:12:69:d2:62:b3:33:63:5b:c2:fc:e9:
         92:37:a3:00:95:11:37:f0:98:3f:ce:fd:05:34:00:ff:af:c0:
         3a:dd:2c:2d:d0:e1:90:00:40:a6:1b:6e:95:89:1a:6c:e1:98:
         ad:cd:b6:d1:55:34:21:0c:5b:88:e3:3e:73:f9:89:c4:46:14:
         40:ee:9f:ad:8f:2e:52:e9:34:bc:45:f8:9a:4e:1b:9c:1c:0c:
         5a:be:30:ad:a1:63:97:a9:1f:06:57:77:ff:94:aa:1d:bf:ac:
         10:18:d0:1e:8c:c5:0b:77:cf:af:ee:74:b0:ea:61:65:06:3d:
         ce:98:f0:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:08:58 2025 by rpki-client