Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.mft
File:                     uXp_AVpzYHTfOERcmAdDeCGdKZU.mft (raw, json)
Hash identifier:          6e8p1kl08eGyYehsXr3y6GWXPc0pNYfGRI3mWa53K+g=
Subject key identifier:   88:1F:ED:AF:6E:7A:42:51:55:36:1C:7A:7B:69:01:D3:67:AD:F8:55
Authority key identifier: B9:7A:7F:01:5A:73:60:74:DF:38:44:5C:98:07:43:78:21:9D:29:95
Certificate issuer:       /CN=A91320D4/serialNumber=B97A7F015A736074DF38445C98074378219D2995
Certificate serial:       010B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXp_AVpzYHTfOERcmAdDeCGdKZU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.mft
Manifest number:          0109
Signing time:             Thu 19 Jun 2025 04:26:18 +0000
Manifest this update:     Thu 19 Jun 2025 04:26:17 +0000
Manifest next update:     Thu 26 Jun 2025 04:26:17 +0000
Files and hashes:         1: uXp_AVpzYHTfOERcmAdDeCGdKZU.crl (hash: 14JJ7p8mepmqyqYZ7S8vr03Ri31T4VPitF2DuRbf1KY=)
                          2: BAB65090BD7811EEB634A117C4F9AE02.roa (hash: rOfi7pLc2YXhQ9Pw2aUr9rz0+D/rY6Ijcu5KC1k/f/s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.crl
                          rsync://rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXp_AVpzYHTfOERcmAdDeCGdKZU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Jun 2025 04:26:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 267 (0x10b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91320D4, serialNumber=B97A7F015A736074DF38445C98074378219D2995
        Validity
            Not Before: Jun 19 04:26:17 2025 GMT
            Not After : Jun 26 04:26:17 2025 GMT
        Subject: CN=68539169-32d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4b:51:81:80:4e:fd:c4:bf:54:0c:07:75:37:
                    4d:35:b1:82:94:f3:73:86:c4:c8:fb:fc:d7:6d:f3:
                    c6:72:ec:c9:f4:42:1c:b5:06:74:6c:05:44:35:05:
                    99:76:f8:31:f3:30:9d:c7:67:ae:8e:7b:01:a3:0e:
                    82:0b:01:dd:aa:1b:ae:50:aa:d2:17:d1:c4:ef:25:
                    35:4c:ad:7a:d6:6a:af:41:18:0b:31:01:58:1e:8b:
                    78:ff:08:d4:a6:34:d8:c9:56:77:18:1f:8d:4f:96:
                    f7:23:29:6e:d2:bb:c2:cd:87:fa:6b:f8:36:a9:74:
                    4c:f7:13:9f:e0:cb:bb:62:c1:2e:c8:0e:75:e5:58:
                    d7:1e:18:68:9a:f8:61:ed:9e:2d:50:38:03:6c:99:
                    d9:d1:3d:47:46:e9:bb:70:f2:80:f1:40:69:7e:d3:
                    25:85:e5:ee:ed:b1:68:92:5d:55:5f:25:da:c3:16:
                    d5:29:36:f4:ad:eb:11:83:b2:43:c6:b4:86:cd:ed:
                    37:b0:4a:0a:fa:e7:7e:15:27:75:89:8d:cd:9e:8c:
                    2d:60:81:9a:65:29:7b:89:c9:00:6c:b3:dc:70:a9:
                    7e:c0:a2:ef:f9:3f:81:f5:f0:6f:c2:8c:95:77:a0:
                    84:99:56:a3:cd:bb:41:1c:26:23:81:3d:c7:63:ac:
                    e2:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:1F:ED:AF:6E:7A:42:51:55:36:1C:7A:7B:69:01:D3:67:AD:F8:55
            X509v3 Authority Key Identifier:
                keyid:B9:7A:7F:01:5A:73:60:74:DF:38:44:5C:98:07:43:78:21:9D:29:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXp_AVpzYHTfOERcmAdDeCGdKZU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:4b:e9:0f:90:01:3e:52:b1:a9:be:05:ed:5b:0a:bd:e5:90:
         1a:1d:b7:a7:b9:08:38:58:3c:54:d3:7b:60:d0:32:04:75:cd:
         a8:e2:fb:31:e9:09:7c:a5:12:7e:f1:e7:9e:a2:0b:6d:4c:40:
         e7:af:78:01:67:80:a0:3b:7d:b4:47:d9:2e:cf:5a:82:f4:51:
         ad:5b:85:ee:de:5d:e1:02:59:9d:0c:78:9c:5d:53:a6:ca:80:
         c6:dc:ee:5f:ef:0f:ad:07:e7:6d:ed:81:8c:fb:eb:6a:88:5d:
         89:e8:90:61:9d:04:ee:a7:7f:fa:d9:ad:f2:d7:9c:a0:36:df:
         f8:30:43:ef:34:34:cf:e2:db:35:c3:d7:06:02:96:13:19:52:
         a2:64:0e:70:94:f0:36:1b:54:a4:c3:8f:10:46:d4:71:31:ea:
         ba:26:6c:00:cc:9f:ff:12:17:bd:d9:1a:36:19:70:3c:23:19:
         11:fa:85:2c:24:63:d9:ee:85:27:f1:b7:55:cc:40:5f:49:3f:
         e1:ac:30:13:18:05:70:62:f5:28:b7:f9:e4:4b:35:25:4c:25:
         d8:ae:e6:4c:d8:49:ad:34:0d:bb:b1:60:2e:05:e0:9f:7e:95:
         1c:6d:c7:6b:60:8f:71:eb:5c:bd:8e:96:66:e9:4b:2e:68:ec:
         db:d2:3b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 11:22:04 2025 by rpki-client