Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.mft
File:                     u7bmAQQ3QyUFSIC308E15vx8yrE.mft (raw, json)
Hash identifier:          aH9XNcCydRQJbQ6twAKQ1zvcKv17IXs40ZEzMOgQJzA=
Subject key identifier:   0E:90:14:6F:38:33:9A:46:F5:39:B9:41:2A:A0:19:84:93:36:7D:44
Authority key identifier: BB:B6:E6:01:04:37:43:25:05:48:80:B7:D3:C1:35:E6:FC:7C:CA:B1
Certificate issuer:       /CN=A912804A/serialNumber=BBB6E60104374325054880B7D3C135E6FC7CCAB1
Certificate serial:       0215
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7bmAQQ3QyUFSIC308E15vx8yrE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.mft
Manifest number:          0210
Signing time:             Mon 11 Aug 2025 02:18:50 +0000
Manifest this update:     Mon 11 Aug 2025 02:18:49 +0000
Manifest next update:     Mon 18 Aug 2025 02:18:49 +0000
Files and hashes:         1: u7bmAQQ3QyUFSIC308E15vx8yrE.crl (hash: gg2OgzO2LLj+DrTafNBEVNHf60Mmtcv+7/Bv4VvuBIo=)
                          2: CCB0DBA8CB2911EE9CE70483C4F9AE02.roa (hash: +L4H64N18c7HC9b7a2kMN0oPwzUDs4ByILHmodSVj7c=)
                          3: 003D7FEE15E811F0841B1A7DC4F9AE02.roa (hash: NzfvN2nV9saQebWeBwyNL6bb8Qj6DnzhJ2bxOu8Ukwk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.crl
                          rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7bmAQQ3QyUFSIC308E15vx8yrE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 Aug 2025 02:18:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 533 (0x215)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912804A, serialNumber=BBB6E60104374325054880B7D3C135E6FC7CCAB1
        Validity
            Not Before: Aug 11 02:18:49 2025 GMT
            Not After : Aug 18 02:18:49 2025 GMT
        Subject: CN=68995309-b41f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e2:08:d0:41:ef:67:f1:d6:e8:c2:2e:ce:f2:
                    15:42:36:bb:9e:bf:30:6b:41:b8:b9:90:44:b2:e4:
                    33:67:82:01:2c:cf:48:d4:57:98:67:d4:33:6b:0e:
                    19:e0:7e:86:f5:38:77:56:0d:a8:28:82:c2:66:5a:
                    73:ba:5e:ae:d3:b6:ad:63:2b:65:10:21:41:f3:e1:
                    ad:4c:6a:52:8e:a0:c6:48:98:3b:77:d3:d9:3a:60:
                    07:62:5e:2f:ca:83:5a:68:3e:ac:8b:76:0b:ee:30:
                    91:58:4f:37:44:da:03:13:9f:25:0c:be:bd:83:52:
                    ba:ab:02:66:8a:b2:6f:c8:c3:ee:77:92:4f:0f:2e:
                    f7:83:24:2a:cb:26:25:b7:57:96:85:cb:fe:d5:88:
                    e7:24:d1:46:57:a3:9a:b5:77:20:40:f0:f5:50:7e:
                    6a:56:be:03:3f:ff:2b:f2:7b:59:09:bc:04:b3:44:
                    6f:a5:2c:34:31:3d:05:75:5c:a5:fa:94:dc:6b:91:
                    b1:bc:ed:ca:e3:a8:a2:1e:e9:b8:d5:b7:a1:10:22:
                    4e:ce:17:e3:b7:d8:a2:90:b5:69:3c:20:bf:f9:b9:
                    1c:e7:16:79:de:82:d5:5a:d9:c2:56:cc:d3:a1:0a:
                    5d:e6:e0:91:8e:f6:91:17:b8:03:14:1b:cf:9a:6c:
                    c9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:90:14:6F:38:33:9A:46:F5:39:B9:41:2A:A0:19:84:93:36:7D:44
            X509v3 Authority Key Identifier:
                keyid:BB:B6:E6:01:04:37:43:25:05:48:80:B7:D3:C1:35:E6:FC:7C:CA:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7bmAQQ3QyUFSIC308E15vx8yrE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:54:dc:52:3d:1c:a8:62:b3:71:ea:40:80:f9:86:36:69:0f:
         00:c1:4e:5d:ea:bb:f5:a4:8e:d8:00:a9:9b:c2:cc:6e:27:7d:
         82:30:6c:07:4d:c0:0f:b8:b2:56:7a:17:c4:df:24:da:1d:fc:
         28:61:a9:31:3c:97:07:66:c6:32:8f:2d:96:9f:07:af:b1:a0:
         b0:da:37:7c:e4:de:b0:01:fd:a9:f6:e0:e7:50:93:84:72:6c:
         20:e2:9c:b0:c8:f6:e1:7c:89:36:13:2e:e4:82:01:f4:3e:40:
         4c:1f:22:13:b5:6c:38:29:5d:1c:a0:74:8e:1b:e9:94:0f:4e:
         7a:06:43:41:0a:c9:e0:53:f7:94:2f:6e:90:fd:c4:cc:87:38:
         85:9f:77:5e:7c:26:46:65:85:01:b3:bf:18:57:f5:fd:04:0e:
         2e:18:31:00:79:3b:a7:70:b4:9f:66:56:e8:44:24:fc:6b:1e:
         1a:91:4b:66:d7:68:47:60:05:eb:8c:33:1b:3e:ca:ab:2a:07:
         80:34:fe:20:9f:e3:4d:4c:e3:72:34:e8:29:29:90:6d:9a:9d:
         02:15:92:54:d2:cf:4c:d3:1f:ab:3b:c0:f2:9d:f5:41:10:47:
         9d:eb:3c:3e:5c:d4:4e:26:ea:5c:9f:96:50:50:de:c4:65:6c:
         a9:d4:65:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 00:33:05 2025 by rpki-client