Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft
File:                     UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft (raw, json)
Hash identifier:          VtzE/CdWXn3PoB+tSxupOg8eg4qO2BmXlxl2SjmRaok=
Subject key identifier:   7C:8E:47:22:39:43:60:63:6A:C1:E2:1D:A7:89:B5:A0:31:BA:9E:A5
Authority key identifier: 53:30:EE:EE:B0:D0:A9:53:5F:AC:85:05:E7:35:84:3A:F6:CE:60:AF
Certificate issuer:       /CN=A9159967/serialNumber=5330EEEEB0D0A9535FAC8505E735843AF6CE60AF
Certificate serial:       20B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzDu7rDQqVNfrIUF5zWEOvbOYK8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft
Manifest number:          2094
Signing time:             Sun 10 Aug 2025 15:55:46 +0000
Manifest this update:     Sun 10 Aug 2025 15:55:45 +0000
Manifest next update:     Sun 17 Aug 2025 15:55:45 +0000
Files and hashes:         1: UzDu7rDQqVNfrIUF5zWEOvbOYK8.crl (hash: Z4tJ080mdSY7JCbJRlG/GP25VMXQkOOqP2t8/R8BmUA=)
                          2: F79267D61E4011E6945BEB0DC4F9AE02.roa (hash: ebbHAc3H1xs8yb83KOxdepldMzKZEG2KB/oj0PgrPl0=)
                          3: 2991FB703EBC11F0B4390D6CC4F9AE02.roa (hash: ISWHnAnupcgdEe8p2mboULpSfRcbxX3lISCXNa8ynQ4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.crl
                          rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzDu7rDQqVNfrIUF5zWEOvbOYK8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8372 (0x20b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9159967, serialNumber=5330EEEEB0D0A9535FAC8505E735843AF6CE60AF
        Validity
            Not Before: Aug 10 15:55:45 2025 GMT
            Not After : Aug 17 15:55:45 2025 GMT
        Subject: CN=6898c101-00ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c3:d5:b3:f0:c2:ca:ce:96:21:58:d5:5a:b4:
                    68:5f:e0:40:11:67:f7:60:f0:e1:c7:a5:ac:e8:36:
                    1f:51:e7:5d:08:b5:07:5c:3e:03:49:1a:f5:15:76:
                    05:3c:0e:50:b9:03:28:f5:04:26:a1:c9:6a:e8:fe:
                    38:ac:1d:83:47:23:ee:62:a0:14:ef:81:14:7e:d1:
                    ec:e3:b5:aa:e3:02:02:03:73:7c:cf:32:7c:97:5d:
                    59:18:a9:cb:09:99:fb:fc:98:c3:17:66:a0:70:82:
                    86:e9:cd:24:38:97:8c:f7:b3:88:3f:e8:e9:08:7a:
                    96:10:73:f3:66:03:8c:8f:19:de:05:c5:2e:46:8f:
                    94:d9:13:7f:98:54:a6:ab:9e:4e:32:e0:7c:d9:b6:
                    2e:69:a3:df:00:19:37:0b:d6:56:e5:1a:11:b1:de:
                    56:5e:41:57:fa:69:7e:82:7b:b5:72:6b:6e:c1:b0:
                    ba:9d:0b:be:f5:22:73:50:63:6a:3b:88:04:ae:56:
                    48:47:60:90:06:4f:d2:c7:d4:0b:a6:00:44:1f:c7:
                    1f:4e:34:4b:4b:4e:41:e2:e1:f0:57:59:47:ea:12:
                    3a:02:00:73:98:f9:5e:c2:9e:29:44:a6:75:ac:35:
                    ab:ee:8c:f4:63:68:a0:10:c9:4b:fd:2e:6f:d1:9b:
                    fe:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:8E:47:22:39:43:60:63:6A:C1:E2:1D:A7:89:B5:A0:31:BA:9E:A5
            X509v3 Authority Key Identifier:
                keyid:53:30:EE:EE:B0:D0:A9:53:5F:AC:85:05:E7:35:84:3A:F6:CE:60:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzDu7rDQqVNfrIUF5zWEOvbOYK8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:00:f5:34:04:a3:70:a2:67:20:6e:84:a1:ab:c9:b8:19:a9:
         5c:18:c6:8e:5e:31:d9:89:e8:5d:45:f3:9e:25:d8:7b:bb:48:
         bf:64:4e:12:73:35:47:f7:4f:14:a0:8f:73:66:d6:46:bc:2a:
         1f:5f:11:25:6b:aa:c2:2b:cf:16:7a:0c:bc:c9:79:ce:e0:84:
         97:2d:ea:54:fa:7c:df:d1:19:1e:14:da:9b:9b:f9:6c:50:ac:
         be:4d:11:c7:b2:71:0d:8e:94:b5:52:c9:29:73:30:d1:5c:be:
         4e:30:14:c8:78:33:ee:2c:29:27:41:12:15:9c:5d:72:09:ef:
         d6:fc:bf:aa:c3:5d:4a:96:0d:88:35:63:0b:ff:87:3a:dd:c3:
         38:e1:07:e7:9b:0a:6e:99:9e:aa:ee:19:36:74:95:7f:f4:fe:
         75:9e:b8:b0:ee:91:16:b4:f0:16:a7:9f:db:e9:ac:37:94:96:
         40:37:33:09:e9:27:51:a5:e3:6e:86:27:61:5f:bf:5a:c0:c4:
         df:c7:46:3a:bc:49:93:ea:e8:bc:58:8a:c7:b1:e7:bf:c9:09:
         26:e0:08:59:39:dd:cc:e9:73:e8:cf:dc:c1:3b:76:17:9e:5b:
         9e:ee:1f:0e:74:ae:9a:b4:d8:84:13:21:b8:f8:5d:da:4c:9d:
         73:5d:c1:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:45:44 2025 by rpki-client