Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.mft
File:                     u-Sfy0H1Amo1v2yTuR_f88iMc24.mft (raw, json)
Hash identifier:          yRNZXUzeY8EfJjpfk5RYpXxozvFICny3SFHoysFgoTs=
Subject key identifier:   5F:C8:DF:FF:EC:D0:B5:7F:86:AA:F3:A6:D8:D8:1F:8F:7D:DB:01:D4
Authority key identifier: BB:E4:9F:CB:41:F5:02:6A:35:BF:6C:93:B9:1F:DF:F3:C8:8C:73:6E
Certificate issuer:       /CN=A91DEA56/serialNumber=BBE49FCB41F5026A35BF6C93B91FDFF3C88C736E
Certificate serial:       08BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-Sfy0H1Amo1v2yTuR_f88iMc24.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.mft
Manifest number:          08AB
Signing time:             Fri 08 Aug 2025 20:52:05 +0000
Manifest this update:     Fri 08 Aug 2025 20:52:05 +0000
Manifest next update:     Fri 15 Aug 2025 20:52:05 +0000
Files and hashes:         1: u-Sfy0H1Amo1v2yTuR_f88iMc24.crl (hash: XvA2nGs8vfyIB0WUj9Mj0Y4zqvhTdV5ZW9XFSUz+gbQ=)
                          2: 660823EABF3C11EAAF328582C4F9AE02.roa (hash: McY2AJFANrzWmI75qEuoRVmbI5bYcHMLwYH623aHbh0=)
                          3: 65051AB6BF3C11EAAF328582C4F9AE02.roa (hash: 4sHi+d6qz1n7lwCxnRDnO0jNP13ZRhYE6FAGlfuub+c=)
                          4: 65877060BF3C11EAAF328582C4F9AE02.roa (hash: 8Ve/Cl0hRolwdHsLuG0VDkNM1FdRmkmQ9YowmP0sm+M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.crl
                          rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-Sfy0H1Amo1v2yTuR_f88iMc24.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2239 (0x8bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DEA56, serialNumber=BBE49FCB41F5026A35BF6C93B91FDFF3C88C736E
        Validity
            Not Before: Aug  8 20:52:05 2025 GMT
            Not After : Aug 15 20:52:05 2025 GMT
        Subject: CN=68966375-f1b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:72:9c:f8:ac:54:5f:7a:7b:08:a7:43:fa:0e:
                    0f:30:70:57:2b:2f:98:ff:4f:68:9c:b7:ba:b4:e9:
                    b9:c9:ad:9e:75:02:ce:13:e7:61:b1:01:26:53:00:
                    a8:2b:a5:06:74:d8:e2:2a:40:af:12:fc:a5:ef:39:
                    0a:f7:2e:6b:4d:2f:74:c8:81:10:e9:8f:b3:89:3d:
                    34:24:2a:d5:db:e2:42:71:ac:28:c9:12:0f:67:b4:
                    87:a0:4f:ab:90:02:1d:9b:bf:b4:3f:7f:dd:d2:9a:
                    9d:27:4e:f6:73:fc:a6:5d:e0:bb:09:bf:48:83:56:
                    08:66:4f:d2:2e:c7:30:11:6e:54:78:f7:9a:94:96:
                    d9:9a:77:b5:4d:90:0a:13:fe:6d:e2:25:a0:e3:73:
                    cb:76:48:f5:0b:ec:81:55:42:fd:b9:0e:65:a8:96:
                    16:a0:c4:90:ca:87:8e:65:90:58:68:96:95:67:6e:
                    78:9a:58:f1:17:5f:cc:86:4e:77:c9:fc:5e:49:c5:
                    e0:24:c7:39:0f:3b:7b:04:a7:b0:2d:b3:b5:09:f6:
                    9c:5c:ef:af:73:3c:41:88:02:4f:8f:85:8c:c9:a2:
                    eb:f8:d4:ff:2a:c4:1d:8c:6f:b6:c9:bf:53:90:0e:
                    75:53:29:f1:fd:2d:b4:a8:1f:ec:d2:05:24:dc:89:
                    7b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:C8:DF:FF:EC:D0:B5:7F:86:AA:F3:A6:D8:D8:1F:8F:7D:DB:01:D4
            X509v3 Authority Key Identifier:
                keyid:BB:E4:9F:CB:41:F5:02:6A:35:BF:6C:93:B9:1F:DF:F3:C8:8C:73:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-Sfy0H1Amo1v2yTuR_f88iMc24.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:51:c2:54:0c:64:46:b7:27:c0:e9:98:58:43:ee:bb:94:ba:
         25:8f:f3:1a:75:4d:48:21:f5:cb:9d:a6:c1:72:eb:9d:3a:87:
         a0:e6:d1:bc:3a:f8:92:dc:3a:34:d3:da:61:29:7c:8d:4b:ec:
         45:d1:8c:6f:c6:3d:fe:61:e2:c6:88:f5:cd:67:36:0a:d5:ed:
         40:f6:b4:9b:0f:03:26:6a:81:69:84:c6:f7:8e:7b:e6:0a:5b:
         52:ce:f0:35:6f:34:92:dd:27:f3:9f:6f:54:45:c1:ac:89:14:
         6f:5a:1e:3a:0d:97:17:7c:bb:37:69:e0:b8:f9:1a:4b:7a:f6:
         d5:fc:7e:56:fd:36:e7:c3:c4:d8:3c:95:50:58:76:2d:b1:72:
         bb:5d:a0:5f:a2:11:5a:9c:4a:b8:77:16:58:12:09:69:71:bc:
         15:82:8b:a2:5d:69:a8:a5:61:ca:66:2a:60:9f:27:fe:0c:e2:
         57:0f:b5:48:84:13:29:de:11:25:32:76:59:5e:be:49:21:29:
         ee:c4:2c:d3:44:0e:b0:52:9c:de:e9:ab:47:0b:e5:ed:d3:ab:
         05:d6:8c:09:da:e0:da:bc:9c:f1:ad:4a:1d:0b:a2:bb:1c:54:
         5d:c9:51:b2:c2:4a:a2:fd:56:7c:4f:ad:48:05:a8:b3:fd:46:
         c5:95:97:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:08:15 2025 by rpki-client