Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.mft
File:                     u9t70LjpZW5x4ZlOGWGHRXCPzvE.mft (raw, json)
Hash identifier:          wkECnMJeISR2UaSEWKu2el3jkZnA743dt3SxzJklYbw=
Subject key identifier:   C9:7D:2F:69:CA:33:F5:5D:6E:5E:5F:74:E7:69:FF:13:C8:14:F6:63
Authority key identifier: BB:DB:7B:D0:B8:E9:65:6E:71:E1:99:4E:19:61:87:45:70:8F:CE:F1
Certificate issuer:       /CN=A919B824/serialNumber=BBDB7BD0B8E9656E71E1994E19618745708FCEF1
Certificate serial:       0930
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u9t70LjpZW5x4ZlOGWGHRXCPzvE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.mft
Manifest number:          092A
Signing time:             Sun 10 Aug 2025 20:15:28 +0000
Manifest this update:     Sun 10 Aug 2025 20:15:28 +0000
Manifest next update:     Sun 17 Aug 2025 20:15:28 +0000
Files and hashes:         1: u9t70LjpZW5x4ZlOGWGHRXCPzvE.crl (hash: O3QFDJalzLItJy4X7VVv1gj2fUqXRFVnq3AYPesBQiI=)
                          2: EEC7D1CAA6C911EA8079FD17C4F9AE02.roa (hash: 1XpEnw/JwEEBYh3nZmy2aqDGrwdu6fQDgmNMuCskbDE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.crl
                          rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u9t70LjpZW5x4ZlOGWGHRXCPzvE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2352 (0x930)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B824, serialNumber=BBDB7BD0B8E9656E71E1994E19618745708FCEF1
        Validity
            Not Before: Aug 10 20:15:28 2025 GMT
            Not After : Aug 17 20:15:28 2025 GMT
        Subject: CN=6898fde0-5d7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7b:46:3e:39:f2:ab:f2:a2:2c:1d:9d:8a:b9:
                    bc:6c:64:75:08:8a:99:7a:82:df:1e:ad:54:8b:48:
                    c1:7b:b8:d0:fb:69:e4:54:2b:2c:57:ee:ff:c7:a3:
                    03:c7:cd:ab:4f:d7:a5:8f:06:32:44:c8:e7:81:7c:
                    77:f4:94:95:8b:88:f7:09:5c:d2:3c:69:d7:76:10:
                    9e:ec:e3:13:63:2d:05:28:b7:89:b6:78:5e:66:df:
                    b5:98:23:69:3d:c6:c3:71:33:40:5a:ea:46:0c:82:
                    58:ac:b2:06:9f:42:7c:4c:5d:fb:a7:b7:52:86:f0:
                    95:da:90:cd:c0:5a:48:88:f3:d4:ff:5d:42:23:42:
                    c3:a3:cd:be:ac:7d:e0:c1:de:ad:63:29:42:86:55:
                    86:bf:5a:b2:0d:40:8c:93:6c:34:91:02:0b:25:15:
                    28:c8:06:c6:2c:cd:b2:8c:cb:3c:ce:4a:49:ad:37:
                    0f:47:9e:2f:91:76:d6:eb:1a:b8:d5:49:67:3d:22:
                    36:f9:1d:52:c5:07:c3:2f:bf:04:3b:fc:de:46:96:
                    22:a3:03:d6:33:f8:58:de:19:a0:c9:d9:2a:3f:40:
                    95:9d:14:50:02:a9:3f:99:b2:59:6b:c4:56:f7:0c:
                    80:d0:cf:37:b5:a1:1f:f2:15:a0:b9:2f:64:21:bc:
                    22:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:7D:2F:69:CA:33:F5:5D:6E:5E:5F:74:E7:69:FF:13:C8:14:F6:63
            X509v3 Authority Key Identifier:
                keyid:BB:DB:7B:D0:B8:E9:65:6E:71:E1:99:4E:19:61:87:45:70:8F:CE:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u9t70LjpZW5x4ZlOGWGHRXCPzvE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:54:8b:13:80:67:99:57:34:e5:10:fa:77:1e:a4:9c:91:ab:
         28:73:bb:4b:6c:d4:6e:4e:b4:10:3c:ba:7f:b8:70:6e:47:7f:
         16:d6:05:11:62:52:82:a6:6d:13:ab:88:f3:1c:40:c4:ed:ca:
         27:0c:c5:c2:d7:41:74:82:01:9d:9f:59:e7:78:43:c9:b8:11:
         1f:39:71:01:93:e2:a1:ba:f3:3b:f8:20:26:33:b1:df:b7:31:
         84:f0:61:03:09:3e:1a:08:69:63:f4:9b:03:b8:62:ba:a7:a0:
         b7:17:cb:56:63:f3:af:5a:37:53:e1:90:22:64:ba:0c:7b:58:
         3a:66:0c:a5:24:2c:d9:7e:ad:c6:30:9d:72:9e:95:f5:ed:21:
         ec:84:45:1f:18:f1:85:48:e6:f8:05:b5:8a:3e:2c:1d:82:a4:
         17:ed:fb:e6:bb:d1:9d:d7:a6:e1:ed:25:3a:6d:0f:5e:ff:1c:
         55:89:5c:83:4a:70:4a:42:ea:27:ee:42:ea:77:41:71:c0:24:
         b7:5f:6d:dd:38:92:97:9c:00:3e:1a:b6:fd:74:85:f0:da:f7:
         45:5e:93:37:1b:4b:ed:63:01:2a:7b:4c:c6:35:d6:bd:a2:85:
         b3:e9:32:a5:51:14:bd:21:e0:29:a3:73:92:0c:f2:96:7d:ae:
         7c:f0:44:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:32:09 2025 by rpki-client