Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113217/D72196D0215C11EEBCB5B24EC4F9AE02/uzAHjPaHeH06Wz5TTAiXFqhrE7s.mft
File:                     uzAHjPaHeH06Wz5TTAiXFqhrE7s.mft (raw, json)
Hash identifier:          A7W7TitEtdrxPQvuuToKf8msvQzhOt2Oc0zLNKlH5hU=
Subject key identifier:   3D:B7:79:2A:CE:EA:77:12:3C:FD:1F:1E:85:44:F1:EA:0B:F4:B0:BD
Authority key identifier: BB:30:07:8C:F6:87:78:7D:3A:5B:3E:53:4C:08:97:16:A8:6B:13:BB
Certificate issuer:       /CN=A9113217/serialNumber=BB30078CF687787D3A5B3E534C089716A86B13BB
Certificate serial:       014A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uzAHjPaHeH06Wz5TTAiXFqhrE7s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113217/D72196D0215C11EEBCB5B24EC4F9AE02/uzAHjPaHeH06Wz5TTAiXFqhrE7s.mft
Manifest number:          0147
Signing time:             Thu 03 Apr 2025 03:33:28 +0000
Manifest this update:     Thu 03 Apr 2025 03:33:27 +0000
Manifest next update:     Thu 10 Apr 2025 03:33:27 +0000
Files and hashes:         1: uzAHjPaHeH06Wz5TTAiXFqhrE7s.crl (hash: 6xeiZXegdBoSkP72xXOGgV3iyvYXVsFDJ7bCsDyA7ws=)
                          2: 859871F2215D11EE963E9A52C4F9AE02.roa (hash: HHHOwt/fdM7W7+F6fEKQDH5IL/vBD99o4H9HkpME2xk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113217/D72196D0215C11EEBCB5B24EC4F9AE02/uzAHjPaHeH06Wz5TTAiXFqhrE7s.crl
                          rsync://rpki.apnic.net/member_repository/A9113217/D72196D0215C11EEBCB5B24EC4F9AE02/uzAHjPaHeH06Wz5TTAiXFqhrE7s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uzAHjPaHeH06Wz5TTAiXFqhrE7s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 03:33:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 330 (0x14a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113217
        Validity
            Not Before: Apr  3 03:33:27 2025 GMT
            Not After : Apr 10 03:33:27 2025 GMT
        Subject: CN=67ee0187-b6cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:20:25:d3:fa:4e:a2:81:09:b7:9f:9a:80:cd:
                    26:d3:26:e5:cc:95:dc:b5:5c:5c:b7:18:d3:b1:a5:
                    1d:c3:3d:2f:7a:69:6d:0e:3d:6a:8e:a7:92:c3:6e:
                    c1:87:dd:6a:55:b7:7d:d0:7f:f3:e6:df:e2:2c:fa:
                    a8:8f:c4:ff:be:e3:9f:f2:3d:c3:e5:44:d8:5e:f9:
                    48:6f:7e:23:84:6e:33:26:e1:49:60:34:24:9e:9c:
                    db:c1:7f:9f:db:b6:90:4d:8c:51:05:2b:b0:64:40:
                    1a:a6:5f:82:b0:06:d4:a2:11:e5:eb:47:e0:6a:b7:
                    e9:00:c0:16:b6:68:e3:c2:99:30:56:41:5b:3a:21:
                    94:7b:2b:9f:e2:f1:d0:a2:da:e3:73:23:40:a6:bd:
                    c7:f9:3e:40:c9:e8:65:6f:20:1b:a5:07:5f:9c:9d:
                    a8:ce:02:30:3c:21:05:3f:9b:91:16:37:b4:95:81:
                    9a:55:7b:56:fb:89:29:0e:38:f8:27:9a:d8:d5:95:
                    7d:9a:76:91:4b:27:f2:75:52:fe:98:db:de:75:2d:
                    40:9b:e9:f7:52:8d:85:28:bd:e9:23:46:c6:b8:59:
                    3a:8d:17:ae:8f:39:9c:f2:6e:d6:f8:12:ce:b9:3e:
                    09:96:f7:34:f2:22:71:e2:4c:8e:73:d8:2c:1c:26:
                    94:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:B7:79:2A:CE:EA:77:12:3C:FD:1F:1E:85:44:F1:EA:0B:F4:B0:BD
            X509v3 Authority Key Identifier:
                keyid:BB:30:07:8C:F6:87:78:7D:3A:5B:3E:53:4C:08:97:16:A8:6B:13:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113217/D72196D0215C11EEBCB5B24EC4F9AE02/uzAHjPaHeH06Wz5TTAiXFqhrE7s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uzAHjPaHeH06Wz5TTAiXFqhrE7s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113217/D72196D0215C11EEBCB5B24EC4F9AE02/uzAHjPaHeH06Wz5TTAiXFqhrE7s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:a0:c8:f7:50:aa:e0:5c:bb:a0:e4:66:b4:c2:e6:18:55:2b:
         08:61:ed:f8:31:11:30:11:99:ab:17:18:9c:84:5c:e1:35:c5:
         01:e6:26:6c:d6:8f:79:ae:b7:b6:58:82:52:f7:44:98:09:d8:
         24:52:d2:57:9a:ec:cb:02:b1:8b:b3:e1:98:cd:41:b4:81:61:
         be:36:e0:c1:09:f4:d0:65:26:c0:34:07:ed:e2:20:6c:1d:d9:
         c4:f4:d6:5e:35:57:42:87:0a:0b:64:61:69:d9:18:82:7c:08:
         34:32:b4:df:81:c7:ac:c9:a4:65:79:d5:fc:3e:49:a2:84:5b:
         6c:bd:ea:ee:8b:26:fd:50:17:1d:bc:f7:97:81:d9:e5:5b:bf:
         28:89:1e:af:f6:1b:b3:b8:10:b2:4a:cc:ff:fe:2d:11:58:d8:
         b4:7f:6f:63:ca:3f:9c:c0:07:a6:bb:00:89:eb:57:ef:ec:13:
         85:f2:cd:d7:6a:fb:a6:80:fb:ef:7d:a8:34:03:99:92:a3:19:
         ab:ea:a6:1d:a4:68:40:c2:04:b6:0f:94:7b:05:1e:9a:e4:2b:
         2e:18:7e:6b:f4:78:9b:14:d7:c5:e7:d2:4d:79:79:60:f2:02:
         3c:8a:10:82:e3:df:22:42:67:eb:65:9a:92:3a:a7:7b:6b:14:
         da:91:d5:c8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTMyMTcxMTAvBgNVBAUTKEJCMzAwNzhDRjY4Nzc4N0QzQTVCM0U1MzRDMDg5NzE2
QTg2QjEzQkIwHhcNMjUwNDAzMDMzMzI3WhcNMjUwNDEwMDMzMzI3WjAYMRYwFAYD
VQQDEw02N2VlMDE4Ny1iNmNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoSAl0/pOooEJt5+agM0m0yblzJXctVxctxjTsaUdwz0vemltDj1qjqeSw27B
h91qVbd90H/z5t/iLPqoj8T/vuOf8j3D5UTYXvlIb34jhG4zJuFJYDQknpzbwX+f
27aQTYxRBSuwZEAapl+CsAbUohHl60fgarfpAMAWtmjjwpkwVkFbOiGUeyuf4vHQ
otrjcyNApr3H+T5AyehlbyAbpQdfnJ2ozgIwPCEFP5uRFje0lYGaVXtW+4kpDjj4
J5rY1ZV9mnaRSyfydVL+mNvedS1Am+n3Uo2FKL3pI0bGuFk6jReujzmc8m7W+BLO
uT4Jlvc08iJx4kyOc9gsHCaUnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD23eSrO
6ncSPP0fHoVE8eoL9LC9MB8GA1UdIwQYMBaAFLswB4z2h3h9Ols+U0wIlxaoaxO7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzIxNy9ENzIxOTZEMDIx
NUMxMUVFQkNCNUIyNEVDNEY5QUUwMi91ekFIalBhSGVIMDZXejVUVEFpWEZxaHJF
N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3V6QUhqUGFIZUgwNld6NVRUQWlYRnFockU3cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MzIxNy9ENzIxOTZEMDIxNUMxMUVFQkNCNUIyNEVDNEY5QUUwMi91ekFIalBhSGVI
MDZXejVUVEFpWEZxaHJFN3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBdoMj3UKrgXLug5Ga0wuYYVSsIYe34MREwEZmrFxichFzhNcUB5iZs
1o95rre2WIJS90SYCdgkUtJXmuzLArGLs+GYzUG0gWG+NuDBCfTQZSbANAft4iBs
HdnE9NZeNVdChwoLZGFp2RiCfAg0MrTfgcesyaRledX8PkmihFtsveruiyb9UBcd
vPeXgdnlW78oiR6v9huzuBCySsz//i0RWNi0f29jyj+cwAemuwCJ61fv7BOF8s3X
avumgPvvfag0A5mSoxmr6qYdpGhAwgS2D5R7BR6a5CsuGH5r9HibFNfF59JNeXlg
8gI8ihCC498iQmfrZZqSOqd7axTakdXI
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:30:06 2025 by rpki-client