Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.mft
File:                     ufrcQefh-XVse8mz3jlyy_bPYLU.mft (raw, json)
Hash identifier:          YXJUmogfyk5wKSD3uODuyJC+TCQ8v0LGrzyQMHTZJos=
Subject key identifier:   5C:87:7D:65:12:49:11:6B:59:0F:30:58:AF:97:57:DD:C2:C2:E5:F1
Authority key identifier: B9:FA:DC:41:E7:E1:F9:75:6C:7B:C9:B3:DE:39:72:CB:F6:CF:60:B5
Certificate issuer:       /CN=A9140562/serialNumber=B9FADC41E7E1F9756C7BC9B3DE3972CBF6CF60B5
Certificate serial:       5A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufrcQefh-XVse8mz3jlyy_bPYLU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.mft
Manifest number:          59
Signing time:             Sat 09 Aug 2025 07:39:45 +0000
Manifest this update:     Sat 09 Aug 2025 07:39:44 +0000
Manifest next update:     Sat 16 Aug 2025 07:39:44 +0000
Files and hashes:         1: ufrcQefh-XVse8mz3jlyy_bPYLU.crl (hash: esZVPla74WUJq2zEgPAlvRIqII8SIW7jNOD1PNJx7os=)
                          2: 5FCE01D8EDFA11EF8193933AC4F9AE02.roa (hash: 97oa3zBzp7Gq4BpVUI5kKb706Ag3AZCc/4WlkzLjgfQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.crl
                          rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufrcQefh-XVse8mz3jlyy_bPYLU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90 (0x5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140562, serialNumber=B9FADC41E7E1F9756C7BC9B3DE3972CBF6CF60B5
        Validity
            Not Before: Aug  9 07:39:44 2025 GMT
            Not After : Aug 16 07:39:44 2025 GMT
        Subject: CN=6896fb40-8208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a6:45:ef:39:6a:8c:3e:eb:84:6f:49:62:5a:
                    a5:91:e1:02:48:d0:38:bf:af:f3:03:20:93:f1:01:
                    7b:8f:79:d2:7d:85:07:f6:23:3d:0a:b2:78:93:63:
                    af:be:06:e9:9b:b5:ec:87:b2:dc:66:f3:38:be:ac:
                    7e:67:60:ae:0a:ef:a8:e3:7d:e6:3c:00:20:f2:74:
                    4d:36:17:82:c0:b3:71:0b:1f:8b:41:25:fe:20:c3:
                    6d:12:02:a2:0e:b0:d3:8c:cb:ff:4e:be:bf:25:29:
                    f9:24:87:07:80:43:fe:f6:ed:52:52:21:d5:11:12:
                    73:3f:ef:81:a2:66:cb:20:99:d2:ca:05:ab:f9:47:
                    4f:7c:d7:5e:ce:59:8d:7f:23:6c:77:8e:ec:4d:1d:
                    a8:91:02:6a:a2:ed:27:b0:17:13:4e:32:43:db:bf:
                    83:e6:22:21:48:d4:ce:a4:a7:67:b7:b4:93:2b:a5:
                    e7:15:61:86:3a:bc:03:4d:88:b8:b0:b1:d5:38:02:
                    4c:ca:da:dc:c2:4f:dd:6c:7c:44:7d:7a:f5:f8:88:
                    30:77:46:76:cb:75:71:07:4f:22:53:64:cb:53:35:
                    2d:b0:86:6c:0d:81:01:6d:72:df:81:9b:d1:4c:f0:
                    35:68:f1:4a:71:d4:e0:12:e0:e9:71:7b:97:72:3a:
                    cb:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:87:7D:65:12:49:11:6B:59:0F:30:58:AF:97:57:DD:C2:C2:E5:F1
            X509v3 Authority Key Identifier:
                keyid:B9:FA:DC:41:E7:E1:F9:75:6C:7B:C9:B3:DE:39:72:CB:F6:CF:60:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufrcQefh-XVse8mz3jlyy_bPYLU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:fa:06:af:ec:42:b2:55:99:ca:f2:e6:04:99:67:b3:f5:e6:
         10:66:c7:74:d2:94:0a:ec:2a:e2:18:e4:74:f5:0f:30:b0:94:
         89:d7:68:ce:2e:d1:74:99:65:43:09:5d:51:48:24:48:e6:ae:
         9b:e6:7a:fd:27:28:c9:a6:71:55:1a:56:28:99:8e:e5:b4:46:
         80:01:ad:88:c4:38:49:79:7c:36:4f:82:c4:2d:ba:84:15:5c:
         e9:82:71:b3:df:b6:eb:3f:8e:35:d2:ff:fd:5b:30:a1:df:19:
         ac:3d:0d:02:81:52:59:d2:88:06:c0:43:fb:c1:87:4c:c3:4e:
         6b:9d:2a:3d:42:61:10:0d:13:2c:b4:cf:e6:98:50:22:d9:6d:
         db:59:f1:ca:3f:bc:08:c3:be:12:86:34:66:c5:0b:15:59:c9:
         c3:da:c7:19:2e:9f:5f:5b:07:b9:70:18:42:5d:11:9e:13:58:
         34:ae:6a:ed:9e:da:16:af:c1:16:bb:4d:1a:aa:2a:89:2c:30:
         02:c8:b3:60:f2:0a:9a:24:74:21:d6:cf:35:17:06:9d:fc:45:
         4f:13:0b:d9:9b:b9:92:f4:d0:aa:a9:d7:b1:25:81:80:18:62:
         0f:6a:11:c2:53:d5:5a:13:e6:69:39:c3:3a:c9:60:e8:da:26:
         d6:d5:3f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:30:04 2025 by rpki-client