Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.mft
File:                     ueYM8Xn06svblJK6X3ys9FI5zPQ.mft (raw, json)
Hash identifier:          gWY1lAZojjl62RPZgVXdQgbHU6QyawnGHgJLbDxRqxM=
Subject key identifier:   BE:3E:BB:99:C4:32:56:15:C2:1F:48:92:BF:0C:5F:FD:0C:8B:86:50
Authority key identifier: B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4
Certificate issuer:       /CN=A91EE03B/serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4
Certificate serial:       0222
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.mft
Manifest number:          01DA
Signing time:             Sat 09 Aug 2025 03:49:06 +0000
Manifest this update:     Sat 09 Aug 2025 03:49:06 +0000
Manifest next update:     Sat 16 Aug 2025 03:49:06 +0000
Files and hashes:         1: ueYM8Xn06svblJK6X3ys9FI5zPQ.crl (hash: blS5Bf9mA81Hck9vuW3j+KMHPF7Vyz9juydSU4tI4kw=)
                          2: 7362D03E37C511EFBA013C34C4F9AE02.roa (hash: J9UTYAikWbU8vUFy05/O20RblyI0R/6cvmoWQQlqRao=)
                          3: 14C4C7D4002611EFBD462953C4F9AE02.roa (hash: 8kJgm21octV347LA5b0+h9xqKVWz2z1gfuxOcYechGQ=)
                          4: 43E73F1824D011F0805C1741C4F9AE02.roa (hash: 8mWGVJVNOJKNvpRmJNnFhHAnhQ0UCcRUPU+vCMi+chY=)
                          5: D2DF3ACCE25911EF9C741573C4F9AE02.roa (hash: bZo0jjpEK53JojulYhh2uIoOsNZVtFikF4T0wNpVaTc=)
                          6: 1DD3ED16BDB611EF8F65515FC4F9AE02.roa (hash: U47nsJ9WKaDxD3HIjdZJqDhU3aurE9CLsz0So1y6hAU=)
                          7: E35133A60ED911EE8A4E0A23C4F9AE02.roa (hash: J24XeGKSHMgr15vOmvjo3VznL//VuBbxY3mUjg6/Wbk=)
                          8: A13BE9EE8EE911EE8698A64FC4F9AE02.roa (hash: OB+tYh+ezOhErKjf4UNGv3Lw8UDs7ihuZFiU7SbyVcg=)
                          9: 139300E4BA6911EFA78E2F66C4F9AE02.roa (hash: oK/gg2jz6l2+odqa+6HnN0t0SaDFmpXk6CPlQPqG6OA=)
                          10: E17B507E25DF11F0B111A515C4F9AE02.roa (hash: 5/aPav0hnKaVORmHzg6d5/te9kJtJygeFIvna6mHtc0=)
                          11: 3F3EDA068CAB11EF8A61C244C4F9AE02.roa (hash: tlKS/saXcUEqSUdoVe/orILud6VMLOZGDh0+a8Ti4+w=)
                          12: 305C2134666211EFB1D51134C4F9AE02.roa (hash: mHWyoaXD9eCyhUezuYUM312SPpVtRjaHke+S1ZIIWUM=)
                          13: AE0A263AB00411EF95939E11C4F9AE02.roa (hash: 8TgidTWCD46pM3MBDeEQO24WX8WtEAaCQuUE2ZinLOI=)
                          14: E7DC24BCC4C211EF8670983EC4F9AE02.roa (hash: QKESfnhXPWNJehFGb7NWVBUPM3j+NPkYNguECdBBh5k=)
                          15: 7857C144B87211EE98B04B19C4F9AE02.roa (hash: cXTSb3uLzYaTxqsKZNZray6rmGcDuR03NUYbJYXT+ns=)
                          16: A069EA0C8EE911EE8698A64FC4F9AE02.roa (hash: KnQ67jxRd2r4K6SCZNe0nZs2NQzYLUias1vgx76E3mE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl
                          rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 546 (0x222)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE03B, serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4
        Validity
            Not Before: Aug  9 03:49:06 2025 GMT
            Not After : Aug 16 03:49:06 2025 GMT
        Subject: CN=6896c532-bc1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:e4:25:f2:74:90:19:39:17:95:03:15:55:c7:
                    39:56:ce:fb:8d:ce:5f:ff:c1:b8:cc:58:3c:b5:d3:
                    ee:8f:36:0d:37:20:93:0b:5e:52:b8:49:a9:86:58:
                    fd:fc:fc:bb:27:a4:ab:82:6c:bd:56:03:cd:aa:d5:
                    6c:5b:77:6d:a4:3a:6b:01:20:54:c2:de:f5:27:b6:
                    96:fb:2e:cc:99:b8:9f:49:3c:bc:78:7f:3a:f9:38:
                    a9:86:61:56:c5:4e:94:fb:06:2f:4e:7e:2f:68:d9:
                    ed:28:24:02:a7:66:70:80:51:f8:a3:fb:15:f7:95:
                    8d:3c:71:fc:81:e0:68:0f:3f:4a:4c:6d:bc:d5:27:
                    41:44:07:3e:20:9f:9e:46:a4:bc:da:3c:0d:e9:dd:
                    16:a9:92:4e:43:5c:31:62:16:d1:d4:b2:4f:b1:69:
                    c7:d2:fe:d0:f0:fc:ec:80:f5:05:78:ce:3e:6a:bf:
                    bd:33:6e:1b:29:85:b1:87:c3:7e:99:16:0a:13:9e:
                    53:1b:0c:99:c1:60:29:1c:12:23:6e:64:86:b3:6e:
                    62:da:ec:80:96:c6:7a:fc:f4:38:cc:bd:60:bd:c2:
                    0d:f2:e4:19:ce:5b:24:4a:df:93:fd:a8:38:89:1b:
                    75:08:c8:3a:1a:01:9a:4c:36:1f:05:66:e3:75:f9:
                    92:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:3E:BB:99:C4:32:56:15:C2:1F:48:92:BF:0C:5F:FD:0C:8B:86:50
            X509v3 Authority Key Identifier:
                keyid:B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:d4:f7:75:89:74:eb:40:99:c1:cc:0e:3c:b6:f4:10:e5:27:
         0c:78:f3:04:18:b0:e0:96:a7:d2:90:52:30:b1:f8:97:2b:0c:
         e3:82:8d:ce:1a:af:c4:5e:96:34:c6:96:f3:da:8d:01:94:51:
         cf:44:fb:71:8c:c5:41:19:05:0e:66:c3:3a:9c:45:35:d3:88:
         33:88:68:59:40:37:6e:0f:b2:75:24:45:50:63:b4:31:2a:00:
         97:83:09:a3:f8:94:73:00:69:06:06:bb:c3:d4:3d:85:9c:00:
         bd:7c:52:81:cf:3c:13:3f:b8:72:84:34:62:6c:a0:1c:d9:f0:
         09:5d:e8:9f:b9:07:89:53:08:c1:32:80:bd:39:d1:d8:01:86:
         8b:aa:d1:2b:7a:75:14:30:0e:27:18:11:91:9f:4a:e3:04:e8:
         83:ac:03:13:9b:46:6f:e4:77:f1:aa:1c:2d:ea:70:b7:59:ba:
         b0:de:bc:19:f0:19:d8:6d:b9:f9:f6:62:9c:1a:08:0b:5c:d1:
         0f:fe:a7:ba:9d:83:f5:8b:ac:71:e8:77:ea:ce:21:1b:52:3f:
         37:ad:36:83:fa:87:7a:c7:69:5c:76:af:8b:56:ed:e7:40:bb:
         31:c6:a7:a9:5e:33:30:9b:68:ec:63:7e:b2:09:eb:aa:9d:22:
         c6:b5:e8:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:22:17 2025 by rpki-client