Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B8A1/A1119CA0DCD111ECBA66D637C4F9AE02/UhRr8Q81lfF6kjn1NmTdbAE-L58.mft
File:                     UhRr8Q81lfF6kjn1NmTdbAE-L58.mft (raw, json)
Hash identifier:          Xpfe+85keUH1C5ay4DAlfoYN+eKroqYqj9vZKn98IQo=
Subject key identifier:   AE:AC:86:C8:D0:17:4C:49:23:8A:80:D2:DE:36:F7:2A:2C:B1:FE:81
Authority key identifier: 52:14:6B:F1:0F:35:95:F1:7A:92:39:F5:36:64:DD:6C:01:3E:2F:9F
Certificate issuer:       /CN=A912B8A1/serialNumber=52146BF10F3595F17A9239F53664DD6C013E2F9F
Certificate serial:       02D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhRr8Q81lfF6kjn1NmTdbAE-L58.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B8A1/A1119CA0DCD111ECBA66D637C4F9AE02/UhRr8Q81lfF6kjn1NmTdbAE-L58.mft
Manifest number:          02D6
Signing time:             Thu 03 Apr 2025 01:23:05 +0000
Manifest this update:     Thu 03 Apr 2025 01:23:05 +0000
Manifest next update:     Thu 10 Apr 2025 01:23:05 +0000
Files and hashes:         1: UhRr8Q81lfF6kjn1NmTdbAE-L58.crl (hash: E1mWTE2PUoy/aKoRebgrQfH64/u8jGJmAyraQFaNa50=)
                          2: 1A922B26DCD711EC87E30728C4F9AE02.roa (hash: GtezF2d3wcE+4uwLcFkeawN/D/lSx4SlhzBKRt/Z/gY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B8A1/A1119CA0DCD111ECBA66D637C4F9AE02/UhRr8Q81lfF6kjn1NmTdbAE-L58.crl
                          rsync://rpki.apnic.net/member_repository/A912B8A1/A1119CA0DCD111ECBA66D637C4F9AE02/UhRr8Q81lfF6kjn1NmTdbAE-L58.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhRr8Q81lfF6kjn1NmTdbAE-L58.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 01:23:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 729 (0x2d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B8A1
        Validity
            Not Before: Apr  3 01:23:05 2025 GMT
            Not After : Apr 10 01:23:05 2025 GMT
        Subject: CN=67ede2f9-96d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5e:e8:03:ff:84:dc:93:81:ce:8d:bd:3b:b9:
                    45:25:b5:8d:01:a6:6c:86:35:16:b4:89:48:44:24:
                    42:8f:8a:0b:2a:bf:2c:94:5f:e3:6e:f1:ed:3f:05:
                    4f:39:4a:a1:15:fa:ef:35:69:16:0c:a9:f7:41:80:
                    f6:38:54:94:96:39:24:d9:0e:35:9d:6b:64:02:af:
                    bf:31:73:a3:e9:e9:ff:fa:e1:9a:de:43:12:73:f7:
                    ef:5a:9f:3d:48:6f:1f:92:19:95:ba:71:43:61:cf:
                    f6:01:26:86:18:0e:0e:78:79:b2:46:fe:f4:31:e1:
                    f2:c0:64:a2:bd:4b:d7:e3:8f:a0:84:28:cd:20:39:
                    17:39:ab:68:29:63:5c:94:ee:9b:d4:15:64:ce:ca:
                    bc:e9:8d:46:a4:db:80:08:da:84:7e:fb:a7:a9:90:
                    97:a1:c7:12:26:6a:50:ee:ae:73:5d:19:76:b0:43:
                    9a:f4:62:21:a1:a8:b6:de:20:37:c1:a8:4b:28:36:
                    95:22:30:4f:bd:4f:bd:b8:57:f7:36:3e:af:6a:6e:
                    8e:9e:df:46:5b:14:67:49:3f:ec:9f:99:53:19:14:
                    02:2c:ee:e3:a8:63:c7:4c:50:51:78:b0:87:29:71:
                    19:55:c2:8d:7d:44:01:16:3d:f4:b9:79:aa:6b:af:
                    75:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:AC:86:C8:D0:17:4C:49:23:8A:80:D2:DE:36:F7:2A:2C:B1:FE:81
            X509v3 Authority Key Identifier:
                keyid:52:14:6B:F1:0F:35:95:F1:7A:92:39:F5:36:64:DD:6C:01:3E:2F:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B8A1/A1119CA0DCD111ECBA66D637C4F9AE02/UhRr8Q81lfF6kjn1NmTdbAE-L58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhRr8Q81lfF6kjn1NmTdbAE-L58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B8A1/A1119CA0DCD111ECBA66D637C4F9AE02/UhRr8Q81lfF6kjn1NmTdbAE-L58.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:cd:91:79:50:ce:b6:b3:1f:11:4e:ed:00:f3:65:2d:90:e4:
         22:58:28:10:a1:ca:8f:dd:db:29:92:36:73:ff:59:ac:16:18:
         b9:39:7c:62:2b:c5:d0:9c:f1:13:2c:bd:e6:ea:e4:74:54:f6:
         e3:a0:74:5a:e2:17:2c:0f:8c:ee:a0:10:78:d7:21:84:6c:3a:
         25:61:1c:8c:e7:3d:3c:df:9c:53:24:a1:5d:e5:62:9a:b1:9f:
         cc:3e:4d:73:7b:43:6f:95:15:80:e5:5a:d4:e0:e1:a9:01:43:
         67:90:ae:dd:e7:88:4b:91:3d:88:9d:8e:b7:da:37:7a:c0:26:
         03:13:9a:f3:5c:66:58:18:a9:51:ff:23:80:44:25:74:87:f4:
         25:2b:02:14:39:71:b2:a3:97:a5:4b:e4:08:d5:a1:ce:75:aa:
         23:d7:dc:73:31:c1:5f:bc:8d:9e:8c:a9:6e:de:3e:0a:5e:1d:
         90:29:ce:c8:d7:4a:19:6e:a4:0c:ae:ff:24:00:3d:15:a7:58:
         1a:ef:2b:17:c6:c9:1e:c8:17:43:5c:a9:ae:56:05:2c:a6:23:
         f7:9f:76:ad:6a:3f:35:63:9d:80:7e:b6:ed:e2:20:cd:2a:93:
         19:af:ca:b5:11:f5:af:84:17:51:74:19:59:f5:86:78:2d:38:
         75:3e:6c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:34:35 2025 by rpki-client