Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft
File:                     u1uBVrA35dIiY-rH9qEcBS_fYz8.mft (raw, json)
Hash identifier:          XC2FZiTAK5aZTtBi/uOoBoDJF/y1Um8haZap6bn6Xss=
Subject key identifier:   3B:47:46:02:1C:EF:28:76:FF:6E:F6:C0:9F:F0:7C:85:39:52:CF:21
Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
Certificate issuer:       /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Certificate serial:       350B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft
Manifest number:          3442
Signing time:             Sun 10 Aug 2025 15:19:24 +0000
Manifest this update:     Sun 10 Aug 2025 15:19:23 +0000
Manifest next update:     Sun 17 Aug 2025 15:19:23 +0000
Files and hashes:         1: u1uBVrA35dIiY-rH9qEcBS_fYz8.crl (hash: 6MMdHF3ogBvGdO4zB0jal64WF69ce20AODs5CLQphdQ=)
                          2: 47E1F234B45111EEA556091EC4F9AE02.roa (hash: MUgpGvnpkewn251zM5+9m0/+F8vMSfuS6+jNZpfHvgc=)
                          3: 6159E3148BEB11ED9A3CD825C4F9AE02.roa (hash: qzbXivpb0JIa597930ox0hSBuWQ7KjKDNIli1RBqDkg=)
                          4: 22C2A76E854811EFA776AC73C4F9AE02.roa (hash: sSX7DNQqfge4ejL0oQv0Vd+5TBaBgIDn0NKDxugYUZY=)
                          5: 9826D5EEB45011EE829AF51CC4F9AE02.roa (hash: xKsyGzAN2c32GCPMOdzL9UsUOFCUvwfUwAzlRCnyX9k=)
                          6: 00E33588AD6A11EFBAD17A59C4F9AE02.roa (hash: eFmh82GukzWgT6djS8c7+wivzDuQ+NMo4zOollz6JbE=)
                          7: F180E2B24FD011EFBC17A55DC4F9AE02.roa (hash: a8K9VZNH2cU3Wb/3J3sb0wkiwGzXly4cMmkQuNOQcPc=)
                          8: 9B6837A8AD6911EFA86BAA58C4F9AE02.roa (hash: pWg9J7cYk+HXhg4hXPdqT10Vpf+1vT1PV33YnS6AG6c=)
                          9: E9E37A28AD6911EFB6E53159C4F9AE02.roa (hash: z+Wb4gqIzNLeSAdA2Pq8enJbmWtWlhXLEadFxTzm+BI=)
                          10: AA5075824F1811EFB6ECD54CC4F9AE02.roa (hash: zl75vWdRPXnP/XOghAc53jzYLr8BLgxiVkpvltTQaAc=)
                          11: BA5D9D9472A611F090D1E918C4F9AE02.roa (hash: A+xiqIJrmMSIdlnZ3N8NdD4L1FaAis2pLriye6agjJ4=)
                          12: 0A5276E04BB611EE8F105367C4F9AE02.roa (hash: /CXIwsodeDV6hc0P1vlVjGHFyr0hi79zRbh9IHZPKLQ=)
                          13: 6B016F4EB6C911EF9370FA5AC4F9AE02.roa (hash: 70B3F87XSLKvXUF998Hdc/HoObUhGZVos2Z7tXO0ymU=)
                          14: 752AA0E2693111F0BA89C368C4F9AE02.roa (hash: GW1ltw/eXf6seCPkHx63gBoyyxiRUdg6XUcPnXicJAI=)
                          15: 60DB91E48BEB11ED9A3CD825C4F9AE02.roa (hash: cHqxUZqTQHQkS9uClycnmDqyKizAF8Nm5ODi8+cgf8M=)
                          16: B06C3C12AD6911EF9690E658C4F9AE02.roa (hash: R80o79Cf/gewMorDyo1D6ic4qzsusUsJXg7M2vOiDxY=)
                          17: FFAD463CB6C811EFAE27D256C4F9AE02.roa (hash: HocrnYD4sH7ksGOE0tlJzfX5xEpSjRMS91r9PGL/s1E=)
                          18: 26E8E0566DF011F0B88F3F58C4F9AE02.roa (hash: 3byGRjTOjwf1xthbWEUAa+eHuN1uN4XXcTWnaRVW6NM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl
                          rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13579 (0x350b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915370F, serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
        Validity
            Not Before: Aug 10 15:19:23 2025 GMT
            Not After : Aug 17 15:19:23 2025 GMT
        Subject: CN=6898b87b-48db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d0:7c:8b:eb:ab:7b:2c:1c:f3:37:9d:2c:b5:
                    2d:d8:91:07:f4:93:ea:82:08:5d:35:e2:6c:38:86:
                    71:80:27:76:22:6b:82:fd:18:3e:de:db:f9:1f:db:
                    94:96:95:e4:03:ff:f4:99:3e:6c:19:c9:d9:75:20:
                    cb:b6:6e:59:34:e1:6d:1e:32:ab:7b:ae:e8:c2:96:
                    ad:e7:f4:1f:c5:5a:3b:44:d8:2f:0f:a5:0e:5b:a9:
                    b7:d7:1c:d1:e9:90:3e:e4:ef:32:e1:2e:3b:ad:e0:
                    d3:b4:3b:be:42:45:ea:98:07:7d:c5:bd:d5:a7:f8:
                    37:ee:0c:35:71:44:32:33:08:bf:e7:ae:1d:1e:d2:
                    2e:18:31:4f:11:b7:99:8d:68:64:69:54:45:a9:ef:
                    6b:1e:36:95:ee:94:08:3a:7f:b3:fe:f3:76:58:3e:
                    92:f3:99:07:69:ed:5e:ae:03:2d:14:0a:9c:d7:c3:
                    ac:4f:fe:df:b9:0d:98:a4:b8:82:a8:48:5a:b5:8c:
                    22:4b:98:3c:d0:e3:a1:2f:26:4c:80:62:aa:7c:7f:
                    f4:e9:82:53:8f:ff:d7:e2:9b:b1:1e:26:7c:9c:c0:
                    a6:03:be:54:75:4b:33:98:84:d7:a5:11:9b:68:90:
                    fb:ad:44:04:34:7a:e2:a2:ba:82:09:eb:e1:d7:28:
                    37:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:47:46:02:1C:EF:28:76:FF:6E:F6:C0:9F:F0:7C:85:39:52:CF:21
            X509v3 Authority Key Identifier:
                keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:cf:b7:7a:8d:a7:6b:a0:40:7e:62:38:ce:d4:23:07:c8:6e:
         20:42:9e:e2:5d:7c:cc:1a:94:b4:6b:e5:ba:ad:41:d8:49:41:
         e3:b5:e7:8f:80:86:af:f7:59:d2:7a:a8:c1:23:54:4d:76:db:
         5b:87:52:45:a5:da:4a:e8:74:af:59:9a:cb:99:da:64:8c:bd:
         f5:6a:2c:6a:d8:35:65:e0:e1:3c:e1:84:4e:79:76:c9:36:65:
         e3:f6:10:b4:a0:7b:f6:66:a1:2b:f9:87:41:1c:fd:2a:66:f0:
         e9:10:ee:44:f9:67:45:fe:a4:fe:49:93:15:55:bc:3f:e8:1d:
         8a:12:da:95:34:02:f4:50:d9:32:5c:5f:e3:ea:a5:9d:35:85:
         b3:e3:c0:c3:0d:8d:d9:82:df:f2:03:68:16:db:e1:15:72:a7:
         86:d1:dd:13:5e:d9:0d:5c:29:74:6e:19:33:05:ee:0c:c4:25:
         f1:e8:15:48:45:55:ed:11:d2:76:a5:83:0a:73:e4:ae:17:e7:
         91:5c:7e:3c:8a:13:23:20:51:c4:bd:19:08:f9:91:1d:64:ce:
         e2:b3:65:56:41:c6:a5:e7:09:05:5b:cc:31:d1:44:9b:1a:da:
         a5:54:67:37:cd:d3:a2:cf:d6:4e:0a:0d:77:ce:5d:c5:c6:eb:
         55:dc:a7:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:13:14 2025 by rpki-client