Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.mft
File:                     4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.mft (raw, json)
Hash identifier:          ktKU2QJaMr0Kva8u9fQLhGuA0aFXQuWRHkAQ7G+xB9A=
Subject key identifier:   44:3B:52:BB:15:27:20:0C:58:04:5B:04:C3:9B:03:66:00:8F:EA:F1
Authority key identifier: E2:E0:43:A9:32:EC:E0:43:9E:2A:8E:F1:DC:40:64:D3:21:4C:27:E6
Certificate issuer:       /CN=A91BAE1C/serialNumber=E2E043A932ECE0439E2A8EF1DC4064D3214C27E6
Certificate serial:       039D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.mft
Manifest number:          0399
Signing time:             Sat 09 Aug 2025 01:18:52 +0000
Manifest this update:     Sat 09 Aug 2025 01:18:52 +0000
Manifest next update:     Sat 16 Aug 2025 01:18:52 +0000
Files and hashes:         1: 4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.crl (hash: VMyXeYv9Jd4F156/SilE0wuXYBaiAtz74YNIZXAKxXM=)
                          2: 4BD764E8AA6511EC9A354C33C4F9AE02.roa (hash: +7SXGk64WdhbzbBHPQcKc3z8KwO03i6JIK3eFusKvxk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.crl
                          rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 925 (0x39d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BAE1C, serialNumber=E2E043A932ECE0439E2A8EF1DC4064D3214C27E6
        Validity
            Not Before: Aug  9 01:18:52 2025 GMT
            Not After : Aug 16 01:18:52 2025 GMT
        Subject: CN=6896a1fc-abaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:79:e4:c8:fa:b1:39:7d:1d:05:0d:b9:56:0f:
                    28:9c:0c:cc:b8:1f:78:8e:82:33:25:50:5b:72:bb:
                    b5:d4:98:ad:37:02:b6:74:e4:34:e1:57:e2:07:28:
                    2b:c7:b8:70:a6:47:0e:be:b5:12:56:16:5a:ed:94:
                    59:c7:71:02:ac:1d:51:6a:56:85:af:5f:b6:73:f4:
                    99:4a:88:c7:b0:95:65:d1:e8:c3:3d:37:92:d9:e8:
                    6e:fe:d4:95:6a:fd:b3:78:85:ef:ac:14:36:08:bc:
                    2b:ab:85:4e:03:1d:14:e9:95:d2:49:68:2d:64:fa:
                    07:f6:ac:f3:92:fd:48:c0:c9:de:ac:c3:91:76:33:
                    16:a2:0d:5b:ca:fd:9b:d3:50:b5:7e:b1:34:81:9f:
                    91:64:d8:fd:7c:d4:7b:96:75:c6:85:cf:93:39:95:
                    8c:c2:12:2b:b3:c3:aa:76:cf:00:d4:a4:da:09:fc:
                    f9:f1:6a:86:2d:89:11:c0:e5:42:f3:22:7f:4f:52:
                    82:38:03:ae:f2:bb:9b:d3:e4:77:09:02:37:e4:40:
                    e2:5d:fa:cf:e8:ec:e0:6a:19:01:79:9c:31:66:47:
                    c0:15:3a:7b:bf:99:e8:59:59:82:49:5b:fc:0f:83:
                    40:44:ef:48:ea:47:6a:aa:0d:bc:ee:8c:a1:54:1b:
                    49:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:3B:52:BB:15:27:20:0C:58:04:5B:04:C3:9B:03:66:00:8F:EA:F1
            X509v3 Authority Key Identifier:
                keyid:E2:E0:43:A9:32:EC:E0:43:9E:2A:8E:F1:DC:40:64:D3:21:4C:27:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:60:6a:f4:cf:17:6f:63:e4:cb:45:5c:2e:dc:eb:91:4f:6a:
         0f:88:39:d5:1b:ad:e3:5f:32:2c:42:09:bc:a5:d6:9c:be:07:
         e5:9b:3f:16:5d:7b:88:f8:b0:91:65:db:f6:5a:72:8e:3d:90:
         0b:79:71:4e:2a:66:2c:a4:e9:d4:e1:36:da:e8:d1:06:a4:2a:
         45:84:93:e3:22:fb:f1:84:3b:d8:d9:ba:4e:3f:74:13:57:d4:
         12:06:b1:c6:e8:5b:6e:8a:cd:d7:83:04:8e:92:ea:68:9c:eb:
         4c:73:86:be:33:c6:c7:f3:a0:77:d2:d6:c8:3f:8e:c0:51:27:
         c4:dc:87:9c:61:ec:d2:06:4c:24:27:d0:df:94:e8:2d:b4:19:
         38:24:a0:d7:ec:85:0d:9b:15:14:2b:d8:02:2e:45:71:58:97:
         b3:05:cb:10:1b:39:25:2e:41:21:20:72:ac:32:c1:c5:ce:3a:
         f6:d4:f2:9b:1b:6a:c3:63:72:04:b9:7d:7f:8d:b5:8d:d1:1b:
         8a:b9:9c:6d:70:05:16:32:61:ee:8d:4b:2c:fa:52:be:fd:d6:
         a3:84:da:f6:17:66:a1:be:eb:cd:e8:fc:b5:cd:11:f3:ec:bb:
         18:ff:2e:6d:33:a4:8c:70:97:1b:38:01:e2:23:b9:56:96:20:
         dd:59:29:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:09:04 2025 by rpki-client