Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft
File:                     0UdMHaQ5s05IfCjCRynmh-CUfXM.mft (raw, json)
Hash identifier:          MW66Lf1Nhjih1D4nR/XUnbgCleALmsQVLXRcXT1JAbM=
Subject key identifier:   81:FE:A1:F3:04:EB:11:3B:5D:DC:E8:BD:D2:D1:B2:7C:DB:E3:96:FE
Authority key identifier: D1:47:4C:1D:A4:39:B3:4E:48:7C:28:C2:47:29:E6:87:E0:94:7D:73
Certificate issuer:       /CN=A91840A8/serialNumber=D1474C1DA439B34E487C28C24729E687E0947D73
Certificate serial:       066C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft
Manifest number:          0650
Signing time:             Fri 08 Aug 2025 23:08:56 +0000
Manifest this update:     Fri 08 Aug 2025 23:08:56 +0000
Manifest next update:     Fri 15 Aug 2025 23:08:56 +0000
Files and hashes:         1: 0UdMHaQ5s05IfCjCRynmh-CUfXM.crl (hash: g5mrT/u9bHqzB5Ba6DchiQ4MhO9FCi65LZF5ccV0FP8=)
                          2: AB4B141CA24211ED92C4107BC4F9AE02.roa (hash: gznbpzQsXm6xdg/ldBzHxBtH3yLXVXqXYnLIiSuqeug=)
                          3: DD7CA58EA23F11EDBCDB6D73C4F9AE02.roa (hash: 5xwHH4/f23qWAT+TboZC+tRvenA32AbWJXTfPPug25w=)
                          4: E9FB74DCE57711ECBC483554C4F9AE02.roa (hash: t68ri8+sG+PCgnACutRhiIQMtoo2iXpsz04+S32xy6c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.crl
                          rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1644 (0x66c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91840A8, serialNumber=D1474C1DA439B34E487C28C24729E687E0947D73
        Validity
            Not Before: Aug  8 23:08:56 2025 GMT
            Not After : Aug 15 23:08:56 2025 GMT
        Subject: CN=68968388-26b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c0:6d:9b:c2:32:36:19:e1:ad:4b:27:f3:46:
                    b5:9a:26:44:8e:a6:26:a0:f9:ca:c2:09:03:ff:d7:
                    c1:f7:87:fd:4d:12:5f:8c:18:44:b1:4b:86:24:64:
                    6f:80:49:12:30:eb:22:b6:e7:92:21:bc:a9:de:70:
                    19:7a:91:ec:fe:a8:9f:82:e8:ee:1b:a2:cc:45:bc:
                    f9:1d:e8:8f:84:f7:f3:ee:8c:a8:ce:05:49:4d:31:
                    10:01:e6:d2:e1:79:1b:3e:16:b0:34:7d:74:ba:e0:
                    6b:e8:f9:ea:0e:0d:2d:45:7c:7f:dc:4b:be:53:f8:
                    a5:46:74:7d:a6:6f:86:11:61:23:4a:39:76:78:d0:
                    3b:9d:a1:b4:cf:5f:73:fd:a8:dd:01:a6:ad:72:37:
                    45:23:a6:fb:bb:9b:18:15:18:ce:3b:92:3d:c5:51:
                    9d:f0:5a:bd:65:78:88:12:05:66:21:36:88:70:c0:
                    85:85:18:05:c4:f5:08:4e:5b:2b:0e:35:ed:c3:84:
                    01:00:b6:f3:13:b1:30:f0:4e:53:ca:d2:ec:4e:23:
                    0c:f4:54:f0:3c:9c:ba:dc:31:d6:63:46:a9:a5:8f:
                    3f:65:7c:15:ff:5b:2c:a4:a4:64:18:1b:2e:94:04:
                    72:c4:ca:01:6d:3f:4c:30:bb:05:fc:dd:bd:14:33:
                    e3:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:FE:A1:F3:04:EB:11:3B:5D:DC:E8:BD:D2:D1:B2:7C:DB:E3:96:FE
            X509v3 Authority Key Identifier:
                keyid:D1:47:4C:1D:A4:39:B3:4E:48:7C:28:C2:47:29:E6:87:E0:94:7D:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:79:29:27:97:e0:0f:72:56:ae:81:93:67:ef:f1:e6:08:14:
         26:4b:c4:e9:b9:f9:65:6e:54:da:6e:39:55:c0:ea:93:86:16:
         80:b4:0f:6d:21:93:b0:83:0b:b2:ab:a7:3f:7d:5d:5b:38:85:
         24:28:d8:1b:51:1e:b9:94:76:ea:38:c2:c3:fd:7d:e4:89:2c:
         d7:53:b6:b1:58:0b:f4:28:d1:10:6a:63:93:ea:09:d5:8c:dc:
         d9:d3:94:49:41:a9:e4:96:86:d1:89:43:de:90:d3:39:d8:0b:
         72:93:7b:53:8e:15:bf:8b:18:11:66:23:50:65:9a:f4:e5:87:
         ae:79:b6:cd:59:c5:04:cd:a1:29:4e:23:13:9c:05:7f:29:07:
         83:2e:01:b4:d3:b5:69:e6:44:d1:2a:1c:01:19:24:03:86:33:
         33:b8:fe:fb:f9:0e:cf:7c:ef:4b:59:a1:ef:a7:ea:49:ab:89:
         c1:f3:04:e6:b9:40:37:01:6c:39:a5:a8:8b:57:83:5b:1a:66:
         35:71:1d:d7:74:d4:6b:d5:cd:84:08:3d:46:b7:86:fa:25:6a:
         bb:a5:ad:4b:82:a5:12:69:ca:c9:a2:f8:56:f5:5d:a9:ae:8b:
         d3:ee:16:e1:12:98:55:68:63:6b:af:b0:fc:c1:67:e1:8c:c0:
         24:cc:cc:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:02:22 2025 by rpki-client