Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.mft
File:                     UPIOqel1rkxMhmfLV_e89XAhXJY.mft (raw, json)
Hash identifier:          1Ml3T+SQVGgVfWsOgULQhqmVe47QxtqNdMDIePb9Q3U=
Subject key identifier:   30:67:B4:F2:B9:D4:07:CB:67:52:EA:FE:C3:6F:BB:96:8D:C8:62:D5
Authority key identifier: 50:F2:0E:A9:E9:75:AE:4C:4C:86:67:CB:57:F7:BC:F5:70:21:5C:96
Certificate issuer:       /CN=A915C62B/serialNumber=50F20EA9E975AE4C4C8667CB57F7BCF570215C96
Certificate serial:       24BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.mft
Manifest number:          2448
Signing time:             Sat 14 Jun 2025 15:46:51 +0000
Manifest this update:     Sat 14 Jun 2025 15:46:51 +0000
Manifest next update:     Sat 21 Jun 2025 15:46:51 +0000
Files and hashes:         1: UPIOqel1rkxMhmfLV_e89XAhXJY.crl (hash: t/MqKqs6JQ5diBTBzW+7AdyzzczFIkRrovh2nks3S7Y=)
                          2: 773D7A96B0DC11ECAEC09469C4F9AE02.roa (hash: JSTjxevpQh7Y9WIfXMl2eIjomxLJnjI/r2tIU+oc0Ig=)
                          3: D327C18CDFEC11ED9AB6E147C4F9AE02.roa (hash: DkDF5ioX13OuJfh2JylvgLRRw6+AIn++z0lBKozZ6IM=)
                          4: B8951CDCD23611EA8D9E515BC4F9AE02.roa (hash: 3p58ypdk04ElN+6HEttw9qJ/C60XU0tMI9YBNjvhXdM=)
                          5: E706A8B2BBF111EE8697E433C4F9AE02.roa (hash: cishBm9UdoGGvPuPGzEAmXBlRKMXNl1QLjdbaBeI7B0=)
                          6: 1A2298A2D23811EABDECA85FC4F9AE02.roa (hash: tFtHJDRq68MkxOGT5VgkwrnSGzaE039FiHh4oq6Q4EQ=)
                          7: 491B85B2E58911ED94960F39C4F9AE02.roa (hash: ClN9W30/fKlOIbsHfrCMHv+AzextbdwZ458osAxwB90=)
                          8: 06239EBADFEA11ED835B4D0EC4F9AE02.roa (hash: yndVn7hcuDMCdpxEcUDVR9meRxJpnYlQ5KdYems+Xe0=)
                          9: 59B3485028C111E7A885571AC4F9AE02.roa (hash: cpxWzbtBjfOYkdrL+G3YkBQCddhQ01gMHqlqKByoADs=)
                          10: 554E53D4B0B811EC9BE93E24C4F9AE02.roa (hash: zWhiAKzwQg9bP+RZqYCDyP/HTuRht7KXbJE7TpD4TKc=)
                          11: 5A2BB4DE28C111E7A885571AC4F9AE02.roa (hash: lmPij0yxhpci1H7hfOEpStvrCK/OQdYLZzjGWxHldlQ=)
                          12: D451FBE0DFEC11ED9AB6E147C4F9AE02.roa (hash: nJrkbLig1vTmSgjt6NVxXjjZt4z8n2VfbVQLKGqNIWA=)
                          13: D50024D6DFEC11ED9AB6E147C4F9AE02.roa (hash: 2+yQDxtXyRNPNjJL9oTb98cBeK8O2vaQ5rcmSwbKfuo=)
                          14: AFF73BD2BA0811EAB2479081C4F9AE02.roa (hash: Ei+ixlrSiwniV177dhajGnt3F/FQWmi7BjO5dNbr3pM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.crl
                          rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 15:46:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9405 (0x24bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C62B, serialNumber=50F20EA9E975AE4C4C8667CB57F7BCF570215C96
        Validity
            Not Before: Jun 14 15:46:51 2025 GMT
            Not After : Jun 21 15:46:51 2025 GMT
        Subject: CN=684d996b-0fcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:57:5d:96:9d:2e:78:19:8e:4f:3b:72:5c:f2:
                    d4:52:31:61:1c:52:ea:ff:81:19:08:32:f7:2b:1f:
                    b6:8c:67:ff:ab:46:07:f6:5d:39:ac:02:b9:b9:90:
                    70:ac:ea:6c:07:8f:2f:cf:bc:e4:00:58:9f:d6:ba:
                    db:6a:3d:a2:f5:fe:eb:5f:a2:49:e4:47:7a:1f:eb:
                    81:2a:5a:c3:a6:42:11:b9:27:be:17:85:cd:83:32:
                    7d:15:8f:51:51:71:c6:7d:12:38:63:a2:6b:2e:f2:
                    35:d0:d6:64:cc:d1:c8:ed:7c:91:0c:e4:1a:ed:58:
                    c9:93:36:d0:25:fe:3b:62:e1:03:2c:35:19:47:ce:
                    62:c2:28:0f:f9:ff:0c:ac:35:63:ea:4a:17:73:eb:
                    e0:f8:2b:f4:14:51:9d:84:fe:71:61:8c:27:07:91:
                    4b:05:69:91:f9:73:56:ad:10:3c:b5:a6:13:bc:cf:
                    62:0c:9c:83:e9:9b:d6:79:e9:02:2f:88:57:70:e3:
                    da:91:2c:8b:10:4b:c2:68:d0:1e:a6:9c:0b:ef:8b:
                    8a:bc:7f:3f:15:02:bc:e5:e7:aa:dc:46:a7:89:26:
                    8b:e8:e9:44:e4:36:10:c1:9a:b0:31:5d:37:c3:6e:
                    87:00:5b:a1:87:9e:04:8f:b5:91:4c:61:2c:c7:85:
                    23:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:67:B4:F2:B9:D4:07:CB:67:52:EA:FE:C3:6F:BB:96:8D:C8:62:D5
            X509v3 Authority Key Identifier:
                keyid:50:F2:0E:A9:E9:75:AE:4C:4C:86:67:CB:57:F7:BC:F5:70:21:5C:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:6b:e6:5e:ff:6c:e6:7e:f4:4e:b6:7a:fc:84:35:29:8c:b5:
         13:7e:e4:7e:13:71:bc:7f:56:6b:e5:2d:26:31:a9:03:de:51:
         73:46:cb:0b:1b:99:fb:24:c8:5a:73:17:0c:11:16:30:5c:22:
         4a:54:43:b7:43:ca:4b:5e:b5:6b:93:3d:f1:67:83:87:ce:e1:
         46:e3:e2:34:b8:c3:5b:ae:df:f5:55:29:b2:1c:45:57:32:ef:
         2c:d8:0f:ac:cc:8e:97:1d:c9:8c:40:b6:b6:26:fc:c5:37:98:
         01:29:3d:96:3c:43:35:85:0d:43:27:87:f6:35:7e:70:a1:77:
         4c:db:ae:e1:ba:f2:9b:fe:71:af:97:c0:b3:ab:05:7a:d6:38:
         f1:68:d7:b1:8e:21:09:65:91:12:bd:62:69:ab:f9:21:c4:9d:
         e5:1b:4f:47:9d:d3:2f:4d:6b:d4:eb:14:7b:a8:7c:16:eb:f1:
         b6:13:cd:0e:f4:fc:f9:73:23:87:a5:00:89:f6:74:6e:93:63:
         99:06:28:4d:8b:c6:7a:30:5e:68:8b:14:b1:fc:88:fe:ea:23:
         f4:3a:ea:99:69:48:6a:bd:71:1a:4f:1a:4e:75:84:4f:3a:22:
         72:74:41:9f:8f:9d:83:d2:2f:8e:fe:e8:af:1a:97:37:c2:8b:
         63:5c:44:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:31:38 2025 by rpki-client