Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.mft
File:                     UZQtJe28pR36Vs4J7TYet6JtvSU.mft (raw, json)
Hash identifier:          9hwBfMXIUReKBELOSwISRPk7k0iy6Wt72EJyLuScWtY=
Subject key identifier:   44:59:8C:20:5E:49:C8:D6:D3:81:CB:46:84:2C:E7:3C:4D:39:6D:B5
Authority key identifier: 51:94:2D:25:ED:BC:A5:1D:FA:56:CE:09:ED:36:1E:B7:A2:6D:BD:25
Certificate issuer:       /CN=A912AFA4/serialNumber=51942D25EDBCA51DFA56CE09ED361EB7A26DBD25
Certificate serial:       0926
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.mft
Manifest number:          090B
Signing time:             Sun 20 Apr 2025 20:10:27 +0000
Manifest this update:     Sun 20 Apr 2025 20:10:27 +0000
Manifest next update:     Sun 27 Apr 2025 20:10:27 +0000
Files and hashes:         1: UZQtJe28pR36Vs4J7TYet6JtvSU.crl (hash: Wp7qYt3ISLrtnWrm2zzHRuMCKFMoNJQO/N0CORWBndQ=)
                          2: 11DBC0ACEB3211EFBDFC3E0FC4F9AE02.roa (hash: 7ik/Y3+kX1yRXlZXLbjaM5LHJI+MSrRXDGW5L+9buCE=)
                          3: 6602AEE2CD7411EFB3DC8110C4F9AE02.roa (hash: o30eNhjoxZ8FSPolycjRhI/R0tGnW0OcwMartfSl8R0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.crl
                          rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:10:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2342 (0x926)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912AFA4, serialNumber=51942D25EDBCA51DFA56CE09ED361EB7A26DBD25
        Validity
            Not Before: Apr 20 20:10:27 2025 GMT
            Not After : Apr 27 20:10:27 2025 GMT
        Subject: CN=680554b3-5a4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ce:cb:a3:d8:43:11:8c:0d:bd:72:10:1e:aa:
                    5b:b2:8d:ac:4b:65:12:3f:58:b5:90:65:9d:fd:41:
                    c4:93:cc:d1:2d:ed:08:ee:99:80:86:ef:7a:f7:0d:
                    75:1d:33:a7:df:c4:67:f4:48:3d:f2:08:65:0f:09:
                    89:1a:3d:59:d9:2f:f8:33:ce:66:3a:a3:b7:f1:38:
                    cd:cb:dc:7f:9d:6d:a1:28:d3:65:38:3e:34:6e:68:
                    8f:bc:14:c2:14:39:e6:9a:37:e2:cd:e5:2b:6b:c6:
                    84:b5:65:f6:f0:8d:c2:47:2d:b6:c4:3b:7d:b8:aa:
                    21:de:3a:95:dd:31:6f:ff:9b:a5:bf:53:bd:cc:62:
                    e8:18:2c:8e:27:db:64:7f:68:a1:81:2f:d9:42:79:
                    21:db:f9:76:15:3f:59:7f:5a:f3:f0:48:cb:2c:93:
                    80:38:d6:c3:66:ef:cd:2f:b5:28:27:d1:73:d5:15:
                    b5:7e:fb:7f:a2:79:c8:15:c0:47:01:8e:d7:ac:e7:
                    5d:97:36:84:db:b9:7c:42:2f:c6:a0:48:35:e3:3b:
                    47:35:79:59:2b:fd:e0:b4:90:7e:91:ae:cb:2d:4d:
                    eb:b6:f6:8b:90:08:7f:92:28:ef:95:25:ca:46:ec:
                    9f:29:fd:b1:0d:30:dc:36:7c:b5:99:be:12:22:5f:
                    c1:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:59:8C:20:5E:49:C8:D6:D3:81:CB:46:84:2C:E7:3C:4D:39:6D:B5
            X509v3 Authority Key Identifier:
                keyid:51:94:2D:25:ED:BC:A5:1D:FA:56:CE:09:ED:36:1E:B7:A2:6D:BD:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:ed:8a:ff:49:7f:32:13:df:15:f9:cf:a4:79:9a:dc:d8:b7:
         31:ae:6b:29:d0:82:c1:dc:04:33:2e:f7:dd:cb:d3:7b:af:be:
         97:57:26:2b:5e:16:83:26:2c:7b:88:b1:5c:95:fb:6b:0d:4d:
         c5:3c:03:1b:52:58:ea:58:63:9e:ab:47:94:69:ff:55:ec:8b:
         05:e0:66:ef:74:6d:8a:e4:68:0d:b9:e3:f9:72:30:ad:2a:b3:
         28:c2:62:0b:e3:1e:41:c6:02:83:0d:f8:d4:fe:c8:27:a4:ae:
         41:d2:64:55:20:7d:ac:7d:a0:1b:b4:6a:c9:44:33:a2:57:07:
         e3:81:c5:c1:b9:13:13:a4:1a:c9:b5:34:41:40:97:8a:52:e6:
         f3:ae:f4:3f:97:6b:e2:08:69:5d:dd:f1:fb:7a:19:10:08:bb:
         61:bf:d0:a2:b9:f2:a5:04:2e:f8:71:42:90:4b:94:5e:42:cb:
         a1:a8:d6:6d:01:05:90:5c:c4:25:3f:16:81:8f:24:0a:2f:98:
         2a:96:28:e0:04:80:9e:6d:f0:d6:ca:19:c5:bc:a5:1e:4e:8a:
         77:d9:6b:00:79:16:b4:f9:af:6f:7f:d7:9c:10:b8:8a:f0:d2:
         5e:6b:88:19:55:72:17:c8:b5:8a:78:ed:db:d9:b3:dd:3f:9a:
         af:67:82:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:39:58 2025 by rpki-client