Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft
File:                     u1uBVrA35dIiY-rH9qEcBS_fYz8.mft (raw, json)
Hash identifier:          p2cKPpe5XgnM0oKvqQUp5FvUyNKp9rzbIZwLWmMu2hE=
Subject key identifier:   1D:39:43:17:63:B9:96:B3:C0:54:EA:E2:08:BF:97:A7:35:55:03:27
Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
Certificate issuer:       /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Certificate serial:       34CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft
Manifest number:          3414
Signing time:             Sat 14 Jun 2025 15:20:11 +0000
Manifest this update:     Sat 14 Jun 2025 15:20:11 +0000
Manifest next update:     Sat 21 Jun 2025 15:20:11 +0000
Files and hashes:         1: u1uBVrA35dIiY-rH9qEcBS_fYz8.crl (hash: 6T/FdwwBKKw8f1Ukwm2AyxNNvxJEfCyXC/2p8nqMBqk=)
                          2: AA5075824F1811EFB6ECD54CC4F9AE02.roa (hash: zl75vWdRPXnP/XOghAc53jzYLr8BLgxiVkpvltTQaAc=)
                          3: 47E1F234B45111EEA556091EC4F9AE02.roa (hash: MUgpGvnpkewn251zM5+9m0/+F8vMSfuS6+jNZpfHvgc=)
                          4: 0A5276E04BB611EE8F105367C4F9AE02.roa (hash: /CXIwsodeDV6hc0P1vlVjGHFyr0hi79zRbh9IHZPKLQ=)
                          5: ABD794FA669A11EFAA2C7969C4F9AE02.roa (hash: 9Qn8aFf7p6N36Fv6YEyF55suUiOU5orxeM/BoE6pOUU=)
                          6: 6159E3148BEB11ED9A3CD825C4F9AE02.roa (hash: qzbXivpb0JIa597930ox0hSBuWQ7KjKDNIli1RBqDkg=)
                          7: D38D71F0854811EFA29BE474C4F9AE02.roa (hash: IDgcdtogLK4WY97A8X0xizLzh/LAABb6GSfrSIGEwSQ=)
                          8: 22C2A76E854811EFA776AC73C4F9AE02.roa (hash: sSX7DNQqfge4ejL0oQv0Vd+5TBaBgIDn0NKDxugYUZY=)
                          9: 6B016F4EB6C911EF9370FA5AC4F9AE02.roa (hash: 70B3F87XSLKvXUF998Hdc/HoObUhGZVos2Z7tXO0ymU=)
                          10: 60DB91E48BEB11ED9A3CD825C4F9AE02.roa (hash: cHqxUZqTQHQkS9uClycnmDqyKizAF8Nm5ODi8+cgf8M=)
                          11: 9826D5EEB45011EE829AF51CC4F9AE02.roa (hash: xKsyGzAN2c32GCPMOdzL9UsUOFCUvwfUwAzlRCnyX9k=)
                          12: B06C3C12AD6911EF9690E658C4F9AE02.roa (hash: R80o79Cf/gewMorDyo1D6ic4qzsusUsJXg7M2vOiDxY=)
                          13: 00E33588AD6A11EFBAD17A59C4F9AE02.roa (hash: eFmh82GukzWgT6djS8c7+wivzDuQ+NMo4zOollz6JbE=)
                          14: F180E2B24FD011EFBC17A55DC4F9AE02.roa (hash: a8K9VZNH2cU3Wb/3J3sb0wkiwGzXly4cMmkQuNOQcPc=)
                          15: D28E7D62854811EFA29BE474C4F9AE02.roa (hash: 7+m/rprtwB3rQB9AuZkZXxKmZXlWFQztBa9eRId8M7Y=)
                          16: 9B6837A8AD6911EFA86BAA58C4F9AE02.roa (hash: pWg9J7cYk+HXhg4hXPdqT10Vpf+1vT1PV33YnS6AG6c=)
                          17: 6C71053CAE2311EFAEB8B36AC4F9AE02.roa (hash: UB5jeT2vrtRpFNW5uH0buWOahHBRPdxwoEQZBy8ZiUA=)
                          18: FFAD463CB6C811EFAE27D256C4F9AE02.roa (hash: HocrnYD4sH7ksGOE0tlJzfX5xEpSjRMS91r9PGL/s1E=)
                          19: E9E37A28AD6911EFB6E53159C4F9AE02.roa (hash: z+Wb4gqIzNLeSAdA2Pq8enJbmWtWlhXLEadFxTzm+BI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl
                          rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 15:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13518 (0x34ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915370F, serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
        Validity
            Not Before: Jun 14 15:20:11 2025 GMT
            Not After : Jun 21 15:20:11 2025 GMT
        Subject: CN=684d932b-f42e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6d:a2:1a:a2:08:30:38:36:07:16:1d:6d:45:
                    5f:9e:aa:6f:ec:82:c8:e4:85:52:46:b3:0b:d3:26:
                    c8:6a:61:7d:52:fc:bf:18:a0:89:3a:c3:ee:c0:66:
                    73:a3:32:0b:8e:1e:9a:b8:10:5e:ab:25:ff:ce:4d:
                    ab:f0:f8:e6:e3:e0:11:ec:25:a9:93:7a:55:0f:66:
                    4d:b1:ce:fc:b0:db:4d:6f:06:da:60:e6:3d:7e:3e:
                    07:d0:09:ac:00:c1:ae:44:ab:3c:44:0d:23:1e:8a:
                    f4:91:4e:3f:b1:91:10:05:c7:75:96:b9:ea:66:50:
                    e8:2e:d8:13:ff:0c:d9:8b:b3:ab:d6:5a:d7:fb:6b:
                    38:2d:12:6e:87:3c:af:19:1a:27:89:af:fc:cf:96:
                    0b:e4:6d:5d:89:22:ce:f0:a7:99:7e:6f:4d:c7:16:
                    ad:b9:3c:b8:ab:c7:e5:3d:45:f5:0d:b4:be:73:41:
                    c0:18:67:cd:3a:df:11:ac:b9:c6:fb:21:10:c2:a0:
                    2e:c9:58:c7:6a:4e:ac:66:57:7b:b5:1b:70:21:aa:
                    38:f1:b7:6b:85:ad:24:c0:b0:9e:cc:79:39:02:b1:
                    ce:aa:a6:72:22:42:0f:1f:c9:89:cd:34:a5:df:0d:
                    13:fa:25:2c:36:df:22:1c:3a:33:0c:18:be:ea:58:
                    c3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:39:43:17:63:B9:96:B3:C0:54:EA:E2:08:BF:97:A7:35:55:03:27
            X509v3 Authority Key Identifier:
                keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:7b:95:54:b7:96:77:85:d8:e3:37:5f:4d:de:05:ee:43:1b:
         04:9b:98:d0:38:ee:5b:4f:51:23:8b:0a:a0:bb:b3:92:5e:3b:
         19:0b:b0:4d:79:31:4e:e7:90:da:e6:76:42:83:fa:88:24:8f:
         65:a5:23:46:21:d0:5f:5f:43:98:27:6d:92:1f:12:30:eb:34:
         90:51:e8:44:fe:aa:d2:11:e1:0b:e5:80:9d:fe:f6:d4:18:b4:
         f1:36:16:b5:f1:3f:69:6f:e5:43:58:b0:04:74:de:e3:1a:a4:
         8a:8b:85:da:d9:65:a9:07:4b:86:95:38:cb:52:e6:66:73:e8:
         f4:19:61:51:4f:36:54:a2:0f:e3:16:38:5c:a6:f3:2f:07:17:
         ac:0b:71:62:51:cf:4d:97:9c:14:20:63:2f:df:37:a9:94:6e:
         a1:af:7f:76:bd:c5:2b:0e:1c:61:f5:b4:a1:02:cf:91:e1:fe:
         e3:4d:a7:89:b9:0a:b8:6b:7c:0d:ae:dc:cb:0f:91:32:79:7c:
         7a:0c:23:60:29:69:7f:80:41:d0:d0:ac:10:bf:d0:a2:f1:81:
         14:28:bc:84:8a:47:d7:0f:e8:db:d7:ad:59:04:69:8e:40:cd:
         82:32:8c:63:26:49:e8:bd:30:37:c4:87:1c:a8:fc:31:14:d8:
         99:60:61:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:31:31 2025 by rpki-client