Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913AFD2/BB01A792590911EBA69D202AC4F9AE02/uDJLQvvF8hOdeQHkF94hA5slJdw.mft
File:                     uDJLQvvF8hOdeQHkF94hA5slJdw.mft (raw, json)
Hash identifier:          5tObakev4OeVy/ntC4r9f+mQG6402YPSVfmGRTLKOKE=
Subject key identifier:   33:82:B3:50:48:CE:66:C9:97:3C:B8:F0:25:46:6C:40:FC:5D:6B:B5
Authority key identifier: B8:32:4B:42:FB:C5:F2:13:9D:79:01:E4:17:DE:21:03:9B:25:25:DC
Certificate issuer:       /CN=A913AFD2/serialNumber=B8324B42FBC5F2139D7901E417DE21039B2525DC
Certificate serial:       06B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uDJLQvvF8hOdeQHkF94hA5slJdw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913AFD2/BB01A792590911EBA69D202AC4F9AE02/uDJLQvvF8hOdeQHkF94hA5slJdw.mft
Manifest number:          06AC
Signing time:             Fri 28 Mar 2025 22:26:42 +0000
Manifest this update:     Fri 28 Mar 2025 22:26:41 +0000
Manifest next update:     Fri 04 Apr 2025 22:26:41 +0000
Files and hashes:         1: uDJLQvvF8hOdeQHkF94hA5slJdw.crl (hash: p22ywjJ0b8TdrRwGvehtngwOP9UJpb3ElLu4errNXlQ=)
                          2: A74A1698590A11EB9ECF402AC4F9AE02.roa (hash: 14YPiz/q0MfSs5nscax5BxuQT3KS6POm7ITs4adtFk0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913AFD2/BB01A792590911EBA69D202AC4F9AE02/uDJLQvvF8hOdeQHkF94hA5slJdw.crl
                          rsync://rpki.apnic.net/member_repository/A913AFD2/BB01A792590911EBA69D202AC4F9AE02/uDJLQvvF8hOdeQHkF94hA5slJdw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uDJLQvvF8hOdeQHkF94hA5slJdw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 04 Apr 2025 22:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1714 (0x6b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913AFD2
        Validity
            Not Before: Mar 28 22:26:41 2025 GMT
            Not After : Apr  4 22:26:41 2025 GMT
        Subject: CN=67e72222-f6fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c3:9a:a6:d0:c7:95:f6:eb:36:e2:df:c9:af:
                    28:1a:6c:f6:e1:1b:33:20:94:d5:ed:b3:36:c6:aa:
                    2b:bb:14:b3:d7:20:d4:92:47:86:35:44:10:9e:0f:
                    12:82:17:67:59:ee:5e:e3:c4:26:24:aa:4d:5a:66:
                    15:c3:29:5b:ad:83:09:6f:fd:a8:e2:9c:ea:f2:1b:
                    39:35:70:d1:b0:04:bf:5e:06:b9:39:05:2e:00:cd:
                    53:84:73:4b:bd:a2:86:61:73:e9:af:7f:e0:b1:80:
                    1a:6a:88:92:13:91:53:61:11:72:3d:b8:ec:a9:3b:
                    f2:50:b5:37:6a:84:7e:e6:1b:74:a9:b1:87:0b:5d:
                    3b:9b:33:8b:d5:1e:74:dc:06:39:17:db:68:81:f8:
                    f4:dd:c8:38:0a:13:b3:27:f5:97:74:ab:57:c1:4a:
                    f1:5b:8c:54:45:e0:2b:e9:93:bb:d3:82:93:91:3b:
                    7e:37:4f:c2:88:83:2d:bd:0e:1b:6c:4d:a7:f2:83:
                    ae:08:39:f6:3b:59:5a:8b:8a:cf:34:d8:2c:c2:fd:
                    67:f3:44:65:fa:e4:a5:d2:f6:dd:a6:63:59:f6:f8:
                    4a:81:dd:92:ea:39:00:da:13:04:ba:34:d1:3c:32:
                    3f:60:02:92:ca:a3:48:b9:1d:21:1b:24:24:1a:4c:
                    e1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:82:B3:50:48:CE:66:C9:97:3C:B8:F0:25:46:6C:40:FC:5D:6B:B5
            X509v3 Authority Key Identifier:
                keyid:B8:32:4B:42:FB:C5:F2:13:9D:79:01:E4:17:DE:21:03:9B:25:25:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913AFD2/BB01A792590911EBA69D202AC4F9AE02/uDJLQvvF8hOdeQHkF94hA5slJdw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uDJLQvvF8hOdeQHkF94hA5slJdw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AFD2/BB01A792590911EBA69D202AC4F9AE02/uDJLQvvF8hOdeQHkF94hA5slJdw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:fb:e3:d3:a5:b4:51:18:1d:8e:df:fe:9c:52:e5:22:66:68:
         86:88:89:f2:49:b1:05:7f:bb:f4:56:c0:d4:ee:3a:d2:10:d7:
         b3:0d:18:7d:18:27:95:11:2b:e4:cb:89:ba:de:2a:59:8c:42:
         db:d3:44:7e:f4:4e:07:48:63:03:83:89:0e:97:28:62:45:0e:
         cd:ff:1d:06:af:3a:66:e3:51:9f:2b:e2:ad:2f:b0:e6:63:45:
         35:87:31:46:a7:a8:0b:c1:d4:a5:03:9b:54:c8:a1:c5:f0:77:
         ee:0e:ac:11:6a:cf:c7:c2:65:19:6c:21:24:92:83:f6:b0:81:
         19:6a:f8:26:9c:c7:fd:0c:96:c6:69:eb:24:5e:d5:17:fc:f2:
         20:ff:ce:d6:79:e4:f5:07:cf:21:6e:7c:2f:49:c9:ad:74:08:
         cf:2a:3d:50:e3:1b:0d:3f:ce:43:d6:1c:1e:5b:1e:7e:a2:f2:
         72:e1:63:cc:bb:c0:f1:5a:24:de:a8:c0:30:c4:cd:0e:14:71:
         94:01:b2:cc:62:94:ae:27:a1:d1:96:f0:cd:e0:36:17:ee:e8:
         e7:65:1a:27:da:6a:ac:cf:1b:eb:cf:75:59:aa:1b:96:c4:5f:
         d9:ec:30:30:61:b2:de:12:35:30:8e:7c:8e:e2:7d:29:69:64:
         3b:53:19:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:17:54 2025 by rpki-client