Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915DAF1/0B2B90A42D7511EB936E3458C4F9AE02/u59Cz844jtxLKepl3rYWKyVtIQI.mft
File:                     u59Cz844jtxLKepl3rYWKyVtIQI.mft (raw, json)
Hash identifier:          TLM/qjWSY1z+YZNZlRKhd8444lamSHLkz5E41B2FBkM=
Subject key identifier:   A2:D8:3F:7B:03:3F:40:54:FF:9B:31:CB:88:CC:6C:98:07:B7:73:2D
Authority key identifier: BB:9F:42:CF:CE:38:8E:DC:4B:29:EA:65:DE:B6:16:2B:25:6D:21:02
Certificate issuer:       /CN=A915DAF1/serialNumber=BB9F42CFCE388EDC4B29EA65DEB6162B256D2102
Certificate serial:       0770
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u59Cz844jtxLKepl3rYWKyVtIQI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915DAF1/0B2B90A42D7511EB936E3458C4F9AE02/u59Cz844jtxLKepl3rYWKyVtIQI.mft
Manifest number:          0766
Signing time:             Sun 10 Aug 2025 21:40:23 +0000
Manifest this update:     Sun 10 Aug 2025 21:40:23 +0000
Manifest next update:     Sun 17 Aug 2025 21:40:23 +0000
Files and hashes:         1: u59Cz844jtxLKepl3rYWKyVtIQI.crl (hash: W73Q/VdcsqCkbJ//nGM1iaH4jPS52zsWkWAmQs6+PZA=)
                          2: 84F992E67BB911EFA4CC334CC4F9AE02.roa (hash: YklgGoKPIC5Pmt2tOtwd4ysgwGERG7auCGi5OoDyTlg=)
                          3: 5A9BEA702D7611EB9827C368C4F9AE02.roa (hash: ebO9+Vms5oQoG4HlIUTD5BkVkXKCz/huR2BUpn+lQwI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915DAF1/0B2B90A42D7511EB936E3458C4F9AE02/u59Cz844jtxLKepl3rYWKyVtIQI.crl
                          rsync://rpki.apnic.net/member_repository/A915DAF1/0B2B90A42D7511EB936E3458C4F9AE02/u59Cz844jtxLKepl3rYWKyVtIQI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u59Cz844jtxLKepl3rYWKyVtIQI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1904 (0x770)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915DAF1, serialNumber=BB9F42CFCE388EDC4B29EA65DEB6162B256D2102
        Validity
            Not Before: Aug 10 21:40:23 2025 GMT
            Not After : Aug 17 21:40:23 2025 GMT
        Subject: CN=689911c7-66c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:48:03:64:e9:4e:c3:bf:31:bf:fe:3c:64:1e:
                    87:f8:11:c8:ea:74:dc:70:d3:88:6a:20:2f:1c:c9:
                    29:7a:07:3f:af:71:a8:56:95:c5:36:79:ea:53:f7:
                    e8:9f:b6:4a:27:68:8b:94:99:6a:bc:cd:8e:6a:00:
                    29:c1:37:b8:a3:f1:8f:cf:3f:84:ce:98:7e:7d:2e:
                    8b:36:26:94:d8:b1:fb:3d:82:9d:81:29:c9:2c:86:
                    b9:bc:ef:2d:41:21:79:c6:f7:ae:19:dd:1c:d9:f6:
                    e9:a9:15:65:88:cc:35:00:73:58:51:b0:6b:f6:45:
                    35:8a:42:22:b9:97:07:f7:e3:53:d6:d4:19:a8:f2:
                    52:cf:8b:99:88:4c:b5:04:26:43:84:8b:a4:a8:a9:
                    32:75:a8:60:f7:18:04:29:26:25:c8:08:e4:18:6f:
                    62:bc:ac:36:4c:05:5b:39:ff:4c:b6:cc:b5:a1:e2:
                    7e:ad:2a:38:17:8d:da:a4:1f:46:d6:d3:98:50:62:
                    13:69:f2:1c:34:ad:86:05:bc:05:c6:cf:73:f9:43:
                    73:fa:c5:af:2c:a9:c1:bf:11:66:f9:88:4c:9f:17:
                    1d:32:0a:cb:54:2c:e3:87:f1:cd:b9:fd:cf:d3:b6:
                    7e:82:f6:d8:e2:b2:6a:4e:b1:cd:95:88:18:af:ef:
                    fa:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:D8:3F:7B:03:3F:40:54:FF:9B:31:CB:88:CC:6C:98:07:B7:73:2D
            X509v3 Authority Key Identifier:
                keyid:BB:9F:42:CF:CE:38:8E:DC:4B:29:EA:65:DE:B6:16:2B:25:6D:21:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915DAF1/0B2B90A42D7511EB936E3458C4F9AE02/u59Cz844jtxLKepl3rYWKyVtIQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u59Cz844jtxLKepl3rYWKyVtIQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DAF1/0B2B90A42D7511EB936E3458C4F9AE02/u59Cz844jtxLKepl3rYWKyVtIQI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:20:5d:b5:fc:32:f0:ec:f1:81:35:8d:76:dc:06:36:28:ec:
         3b:d8:47:9c:9c:cd:b5:d6:11:e2:7f:eb:7b:1e:e4:36:87:44:
         20:43:9c:57:77:50:0d:17:64:0e:21:4c:d4:12:e8:2a:39:7d:
         4a:b7:58:e8:41:5d:d2:58:67:71:80:d4:ba:a4:82:f9:f6:7e:
         0a:18:66:50:ac:f4:97:55:a9:23:ce:57:63:29:60:73:b0:08:
         40:93:07:ea:f1:23:17:af:8b:8d:90:d5:6b:a1:4f:cc:32:69:
         c7:23:c3:19:f9:af:28:de:fe:2a:09:68:e0:c1:d9:46:e9:dd:
         b3:b1:08:36:2e:47:7b:c8:d1:7e:17:17:dd:c7:8d:aa:72:26:
         58:55:82:6f:53:78:f3:16:ed:62:9c:73:c9:f0:42:7b:5d:ed:
         f8:9b:fa:71:89:19:7f:36:51:70:2c:80:21:9f:6f:62:62:28:
         c7:e4:9b:4f:13:0e:03:cc:15:b8:c5:57:6e:6e:5e:d3:7e:54:
         ea:d9:96:84:26:0e:30:95:25:bd:3b:d1:0c:41:da:88:f7:94:
         c8:82:63:ed:8d:c1:04:04:6d:fa:41:c1:9b:e4:d8:6e:7e:c6:
         ff:13:23:4c:61:33:fd:1a:6a:e5:ec:8e:24:36:36:be:a8:47:
         d7:14:16:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:15:27 2025 by rpki-client