Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.mft
File:                     uaC-_5KvfN4ZAIUFLx9PH5K9pPI.mft (raw, json)
Hash identifier:          qqWffpX5QtkgntxqSJQcIF9fBRuwSxhf9WfOR8rjQqc=
Subject key identifier:   5C:C0:F4:41:85:33:7F:30:3D:2F:A9:BA:AF:B8:D3:3A:72:8C:20:41
Authority key identifier: B9:A0:BE:FF:92:AF:7C:DE:19:00:85:05:2F:1F:4F:1F:92:BD:A4:F2
Certificate issuer:       /CN=A9133E16/serialNumber=B9A0BEFF92AF7CDE190085052F1F4F1F92BDA4F2
Certificate serial:       08CA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.mft
Manifest number:          08CA
Signing time:             Fri 04 Apr 2025 20:37:52 +0000
Manifest this update:     Fri 04 Apr 2025 20:37:51 +0000
Manifest next update:     Fri 11 Apr 2025 20:37:51 +0000
Files and hashes:         1: uaC-_5KvfN4ZAIUFLx9PH5K9pPI.crl (hash: 2G40GDXKETLE3brNw12EvfK6Q9+XASJfzEwwq84zh34=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.crl
                          rsync://rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 20:37:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2250 (0x8ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133E16
        Validity
            Not Before: Apr  4 20:37:51 2025 GMT
            Not After : Apr 11 20:37:51 2025 GMT
        Subject: CN=67f0431f-839a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:82:85:71:eb:ca:85:02:ff:d4:47:34:2c:b1:
                    d4:c1:14:4e:1d:2f:dd:fe:36:64:74:0d:c8:2a:bd:
                    a9:6a:6c:bb:6e:25:54:d4:11:b6:3d:12:78:aa:5d:
                    15:6e:42:eb:f6:2c:48:7a:d9:03:1a:28:72:03:31:
                    4d:ab:e9:18:97:ce:18:38:81:3b:11:c3:97:37:b8:
                    b9:1d:cd:6f:90:0d:27:e3:45:cc:e2:48:9d:40:78:
                    41:35:62:7f:65:e4:d5:c0:b4:76:ce:f6:37:1e:3c:
                    01:c0:c9:18:85:2d:2f:51:90:1c:64:43:09:5a:26:
                    cb:9a:cb:49:95:4f:c2:30:5c:d6:a8:91:8b:57:c9:
                    ff:0b:36:a4:4e:94:46:e7:d0:6e:f0:32:b1:97:43:
                    59:65:c9:bb:f3:1d:7c:49:18:92:63:58:cd:13:63:
                    e9:16:b6:83:1f:21:8e:ee:ec:17:88:01:5d:94:5b:
                    13:6a:7c:5b:85:fc:6f:5a:8e:80:f5:33:cd:4c:94:
                    1e:98:62:1c:b6:80:8f:0a:2c:1b:47:b1:8a:db:5e:
                    eb:26:18:6d:c9:90:00:a1:77:84:c9:5f:03:c5:a5:
                    36:f9:ae:0c:d7:f6:43:25:86:a2:d9:a4:59:b8:43:
                    70:15:0a:ca:14:41:70:09:af:11:e1:c9:14:e2:34:
                    84:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:C0:F4:41:85:33:7F:30:3D:2F:A9:BA:AF:B8:D3:3A:72:8C:20:41
            X509v3 Authority Key Identifier:
                keyid:B9:A0:BE:FF:92:AF:7C:DE:19:00:85:05:2F:1F:4F:1F:92:BD:A4:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:80:2c:3d:98:d8:21:0e:bb:ec:94:31:75:11:05:05:8a:89:
         75:a1:59:8d:80:de:09:59:b1:ec:ee:1a:33:24:4b:29:59:9d:
         b2:77:64:38:92:2a:7c:1f:7a:5f:68:e2:ac:85:d1:cb:02:0d:
         9e:52:7a:c7:4a:05:77:5d:3f:44:13:2c:bd:14:01:51:17:12:
         d4:96:d8:37:f2:3e:bc:71:fa:16:0a:78:53:f5:4a:8e:07:0f:
         ab:fd:a5:21:41:76:e7:e3:8c:24:a8:64:69:6e:a7:da:dc:ce:
         4d:99:aa:6f:ef:9d:32:6a:bb:6a:e0:80:73:f5:26:b7:e9:45:
         7b:22:f8:82:d7:c4:e6:0b:bc:18:12:19:cf:2d:e4:78:79:45:
         dd:5e:6a:86:69:51:ff:bb:0d:82:2f:1a:f8:5d:69:40:8b:35:
         3b:8b:ec:a2:ae:d2:a6:57:41:50:33:54:54:b1:ec:3d:99:89:
         a2:d3:17:a3:1f:11:4a:34:99:1b:7a:75:dc:f7:73:7b:f7:da:
         9c:a4:92:14:4f:14:48:4f:44:be:13:d1:2d:20:7e:0d:68:e6:
         59:c1:7b:4c:1d:af:7d:b2:03:87:17:78:2f:22:55:15:30:54:
         89:2b:96:97:f0:4d:d6:9d:38:b8:d5:d5:2e:29:49:c8:2f:e6:
         f7:01:44:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:43:38 2025 by rpki-client