Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.mft
File:                     7TaUIY3LHq89GvXGq8Axptt-bOU.mft (raw, json)
Hash identifier:          1jEFWsya6puUaWbP/ABKS6XwmmMQlo/ldKlGYRoOMLU=
Subject key identifier:   5A:7A:87:71:9D:99:91:02:7F:83:D1:C7:30:B6:D0:B9:BA:06:10:99
Authority key identifier: ED:36:94:21:8D:CB:1E:AF:3D:1A:F5:C6:AB:C0:31:A6:DB:7E:6C:E5
Certificate issuer:       /CN=A919EAF3/serialNumber=ED3694218DCB1EAF3D1AF5C6ABC031A6DB7E6CE5
Certificate serial:       19C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.mft
Manifest number:          19B0
Signing time:             Fri 08 Aug 2025 16:32:42 +0000
Manifest this update:     Fri 08 Aug 2025 16:32:41 +0000
Manifest next update:     Fri 15 Aug 2025 16:32:41 +0000
Files and hashes:         1: 7TaUIY3LHq89GvXGq8Axptt-bOU.crl (hash: 0B22NMZmlVLXW85f1U1E93PbBaAusA7+MYvx0158VBg=)
                          2: 2958A208394011EF8BFF2329C4F9AE02.roa (hash: 0hRL6yZO6PYkNxlevkrCS0rz63r1YCZDrVAR2Fyxyls=)
                          3: 545743246D1911E7A4448D81C4F9AE02.roa (hash: 93fAGoBbKb8s2g7H+M2m6OkfN68jU6Ckev28RigcvkM=)
                          4: 361BDEB6315011F0A08FB267C4F9AE02.roa (hash: l9XdWoi7pZ0Z/aLBaCXXv7SbiureJhqjsfmA2AlQcsM=)
                          5: DCD75050315011F0BC916269C4F9AE02.roa (hash: Bf1fxzL+4m9g8KrBwC7vnrDgD/7yz2XeDX4e5Hb6WLU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.crl
                          rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6597 (0x19c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EAF3, serialNumber=ED3694218DCB1EAF3D1AF5C6ABC031A6DB7E6CE5
        Validity
            Not Before: Aug  8 16:32:41 2025 GMT
            Not After : Aug 15 16:32:41 2025 GMT
        Subject: CN=689626aa-f52a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:28:82:69:a8:bd:d4:15:c1:d6:d6:c1:94:73:
                    7f:35:14:30:a7:b5:f2:a9:39:35:3a:ba:60:be:33:
                    79:76:93:5c:59:fa:52:f0:5f:b2:b7:95:c8:45:d3:
                    ed:35:90:5e:57:f5:f1:1b:75:5e:6e:5e:70:05:e0:
                    15:54:90:d2:01:6a:8f:5b:09:5b:b3:3c:22:ff:e1:
                    8c:99:a2:57:8f:03:98:ea:28:d5:c0:33:bc:e6:42:
                    52:e9:b0:fd:48:86:7b:09:0e:b3:d0:59:85:f4:a0:
                    f3:71:ef:10:54:8b:cb:c4:7c:7b:e1:3c:dc:2a:1b:
                    2b:64:67:67:85:0d:96:9f:83:22:7a:36:94:e8:dc:
                    4f:5a:ff:9f:c3:a8:dc:cc:95:c6:0a:57:06:da:6f:
                    2b:ba:8b:5e:db:cd:42:06:66:e9:fc:8e:ea:93:02:
                    6f:c2:d1:15:39:63:99:d0:5f:a3:0e:de:69:76:3b:
                    7f:1a:84:6f:5d:a1:dc:17:11:f2:18:22:67:54:4c:
                    77:ea:92:cd:a3:11:85:87:1a:c7:18:bd:8c:b6:55:
                    da:f6:28:1a:cd:5f:16:10:dd:a7:8c:6a:58:e5:46:
                    ea:dc:a2:fb:cf:e2:60:68:6e:00:71:4f:8b:90:77:
                    3b:38:7e:f0:f7:ff:9d:fc:99:b8:15:4d:6f:d7:85:
                    04:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:7A:87:71:9D:99:91:02:7F:83:D1:C7:30:B6:D0:B9:BA:06:10:99
            X509v3 Authority Key Identifier:
                keyid:ED:36:94:21:8D:CB:1E:AF:3D:1A:F5:C6:AB:C0:31:A6:DB:7E:6C:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:f3:b0:17:d8:43:41:6e:c6:47:91:ea:eb:f6:f6:7d:de:dc:
         84:3d:a8:ff:7c:66:50:16:03:c5:fc:12:9b:7f:e3:d4:41:68:
         18:4d:3f:13:68:0c:85:5f:68:be:a8:8c:78:b4:ad:9e:7e:76:
         55:60:df:ea:44:05:cc:61:8a:03:87:be:97:3f:da:3e:0b:a4:
         da:41:f4:12:42:ea:27:6f:27:b9:ec:21:e1:61:57:44:2a:a2:
         90:7b:6f:63:d0:8a:75:05:ef:e1:fc:8b:73:bf:e8:d7:06:9d:
         a6:3c:c1:78:4f:9d:a6:55:2b:cc:5e:b7:95:ad:a8:9b:e2:13:
         e3:55:da:05:8f:36:ff:c9:8f:3f:ce:66:41:60:48:5c:a2:92:
         52:27:15:49:e9:c1:eb:b7:16:89:eb:74:1e:14:fa:88:cd:f1:
         26:c9:b9:b3:c1:22:a0:32:1b:4b:7d:6b:6f:e7:3d:2d:f1:5d:
         18:86:40:12:6f:cb:5f:74:b7:ce:f2:28:b2:e9:82:c7:b2:c0:
         61:2e:07:01:4a:5f:ae:87:d0:44:86:f4:de:7f:c2:ca:49:d8:
         b6:c9:37:68:01:65:f2:b6:31:22:14:e5:a7:62:e0:1b:66:77:
         95:20:41:2e:cd:68:5a:93:a0:b8:51:78:69:78:da:8f:6d:b3:
         e1:28:04:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:05:23 2025 by rpki-client