Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919CA3C/D83646FEC1F211EB98564174C4F9AE02/uYUInIuVHhACl2u9XU0d0kGB8Z8.mft
File:                     uYUInIuVHhACl2u9XU0d0kGB8Z8.mft (raw, json)
Hash identifier:          KRqXhzH5Zw6CPniUOAukw+Co2SmxWzw5OdVbmsZ6aMs=
Subject key identifier:   2E:B1:25:4C:51:3F:9F:50:51:24:5E:18:21:69:8D:F7:97:DC:6B:8B
Authority key identifier: B9:85:08:9C:8B:95:1E:10:02:97:6B:BD:5D:4D:1D:D2:41:81:F1:9F
Certificate issuer:       /CN=A919CA3C/serialNumber=B985089C8B951E1002976BBD5D4D1DD24181F19F
Certificate serial:       05EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uYUInIuVHhACl2u9XU0d0kGB8Z8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919CA3C/D83646FEC1F211EB98564174C4F9AE02/uYUInIuVHhACl2u9XU0d0kGB8Z8.mft
Manifest number:          05E5
Signing time:             Fri 08 Aug 2025 23:24:44 +0000
Manifest this update:     Fri 08 Aug 2025 23:24:43 +0000
Manifest next update:     Fri 15 Aug 2025 23:24:43 +0000
Files and hashes:         1: uYUInIuVHhACl2u9XU0d0kGB8Z8.crl (hash: 7PEWJtjUZ3qgcWlfV+xPGNngykJanZGa5QffyvmTAKY=)
                          2: 432BBA90C1F611EBAD8D7477C4F9AE02.roa (hash: hkJ88WsZE+BHMinN6yfbuiaAGQUAch41Smzi5V2G9DM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919CA3C/D83646FEC1F211EB98564174C4F9AE02/uYUInIuVHhACl2u9XU0d0kGB8Z8.crl
                          rsync://rpki.apnic.net/member_repository/A919CA3C/D83646FEC1F211EB98564174C4F9AE02/uYUInIuVHhACl2u9XU0d0kGB8Z8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uYUInIuVHhACl2u9XU0d0kGB8Z8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1514 (0x5ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919CA3C, serialNumber=B985089C8B951E1002976BBD5D4D1DD24181F19F
        Validity
            Not Before: Aug  8 23:24:43 2025 GMT
            Not After : Aug 15 23:24:43 2025 GMT
        Subject: CN=6896873c-4f97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9b:98:67:62:61:84:f2:df:c7:ce:1b:e6:1e:
                    87:ae:79:f2:0f:ad:85:44:ea:c6:8a:e1:78:ca:a1:
                    c7:67:3d:ec:8a:37:b8:bb:36:c0:95:39:34:17:eb:
                    72:2d:b5:ba:be:e8:15:99:ab:00:1d:12:2a:29:51:
                    64:ac:ec:7a:60:b1:00:4d:ac:9a:fb:9f:ce:28:8c:
                    e4:46:47:1f:25:35:c2:77:f1:40:59:ec:a8:2a:1c:
                    f0:d1:ed:a8:4e:d3:8f:95:a0:32:6f:c8:b3:1c:83:
                    de:05:43:40:e5:5b:ca:e8:2c:2e:fb:89:81:4e:58:
                    18:3c:7d:11:cb:b5:23:78:5f:de:ca:e3:8b:fe:95:
                    17:9a:4d:b4:87:d5:91:63:61:7f:04:8e:b7:d6:ae:
                    a4:b9:d5:95:e3:ec:c3:cd:70:f8:27:4a:6f:ad:62:
                    29:e6:a0:b4:38:38:8c:88:5a:81:46:d5:1b:60:52:
                    55:a3:5e:b9:c7:c8:3d:64:b4:1d:40:4d:a7:d2:c3:
                    6e:84:15:ac:c2:e4:11:a8:11:ff:bd:75:ee:b1:47:
                    b2:9f:4a:67:e2:e2:29:bf:43:e2:98:78:e7:93:03:
                    97:57:b8:63:35:e1:97:9e:fe:e1:1c:0a:05:fd:7e:
                    c4:89:54:aa:e9:8b:60:a8:78:e5:44:f1:37:d7:82:
                    c6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:B1:25:4C:51:3F:9F:50:51:24:5E:18:21:69:8D:F7:97:DC:6B:8B
            X509v3 Authority Key Identifier:
                keyid:B9:85:08:9C:8B:95:1E:10:02:97:6B:BD:5D:4D:1D:D2:41:81:F1:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919CA3C/D83646FEC1F211EB98564174C4F9AE02/uYUInIuVHhACl2u9XU0d0kGB8Z8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uYUInIuVHhACl2u9XU0d0kGB8Z8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CA3C/D83646FEC1F211EB98564174C4F9AE02/uYUInIuVHhACl2u9XU0d0kGB8Z8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:9f:6f:c2:0d:1a:e3:42:3f:50:0a:f5:b3:05:4b:00:6f:bd:
         96:cd:8b:34:db:03:7c:d7:bd:79:c5:a3:2f:ae:bd:1d:be:31:
         6d:aa:ff:9c:2f:c4:c8:dd:fc:95:00:82:5f:ba:08:a3:ca:35:
         77:46:a7:67:20:b4:96:ed:f1:b6:f0:d6:b9:6d:eb:24:63:ba:
         c3:35:e9:7a:0f:3f:dc:47:f5:0c:99:e2:63:46:dd:80:d1:43:
         4a:91:58:15:df:f4:a5:3b:27:54:0a:3f:11:c3:7f:e1:ae:62:
         72:67:47:b1:1f:40:33:8e:28:bd:31:e5:1e:50:75:ee:3f:2a:
         07:ab:b2:8e:4e:db:5f:4c:d1:d4:52:85:dc:cf:ce:50:3f:d7:
         01:72:21:77:2a:cf:f8:55:e4:5c:b7:01:b6:a6:9b:b9:24:31:
         df:c3:74:5c:b6:37:4b:91:7b:f6:81:03:c5:2b:e5:dd:31:6e:
         12:57:77:6f:e7:e1:e3:0d:63:0a:83:07:34:cd:9c:2e:b0:50:
         9b:c8:a2:4e:ba:bf:27:e7:7e:a6:56:c9:cd:4e:58:e5:ca:f3:
         41:52:d6:1e:4c:09:d8:3b:5f:83:5b:28:43:b0:fe:e8:19:38:
         95:b0:3d:22:d4:c0:ed:f7:6f:8d:6e:15:84:14:84:bb:aa:13:
         66:51:2b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 20:58:46 2025 by rpki-client