Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/uHMcMIhjyygE4HbVjowHFZtOXxk.mft
File:                     uHMcMIhjyygE4HbVjowHFZtOXxk.mft (raw, json)
Hash identifier:          Y1QpcBu9cn0YtbSIfJgBeTiAaNOvQaoY73G5dC1rjPg=
Subject key identifier:   DF:E1:4B:1E:5B:98:3E:C4:85:AD:AB:72:C3:51:4A:45:2E:52:F1:D2
Authority key identifier: B8:73:1C:30:88:63:CB:28:04:E0:76:D5:8E:8C:07:15:9B:4E:5F:19
Certificate issuer:       /CN=A9164663/serialNumber=B8731C308863CB2804E076D58E8C07159B4E5F19
Certificate serial:       07EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHMcMIhjyygE4HbVjowHFZtOXxk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/uHMcMIhjyygE4HbVjowHFZtOXxk.mft
Manifest number:          19EE
Signing time:             Fri 04 Apr 2025 17:14:08 +0000
Manifest this update:     Fri 04 Apr 2025 17:14:07 +0000
Manifest next update:     Fri 11 Apr 2025 17:14:07 +0000
Files and hashes:         1: uHMcMIhjyygE4HbVjowHFZtOXxk.crl (hash: ygzVQndO0P413NdMocfUxe2AVsLWygGscYotHGdWhS0=)
                          2: 3D626CDC065111F0BFE43624C4F9AE02.roa (hash: /9J+DovVT9QqlJwVVg9XROmn+Z1B8vJUoCEhwjB4bd0=)
                          3: 7BB2BC009FFA11ECA13C2839C4F9AE02.roa (hash: e3B5aOk6ZU2Shpa8iFZBUYRW5M7P355Lep/QJjRb6u0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/uHMcMIhjyygE4HbVjowHFZtOXxk.crl
                          rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/uHMcMIhjyygE4HbVjowHFZtOXxk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHMcMIhjyygE4HbVjowHFZtOXxk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 17:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2030 (0x7ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164663
        Validity
            Not Before: Apr  4 17:14:07 2025 GMT
            Not After : Apr 11 17:14:07 2025 GMT
        Subject: CN=67f0135f-1cce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:17:38:71:2c:fa:bc:1f:f4:3f:48:ba:17:5b:
                    53:cf:c7:1e:d7:41:bd:b2:51:71:55:0e:75:34:75:
                    34:19:30:bf:5f:5a:f6:9d:1f:d9:d7:d9:ff:cd:64:
                    50:25:c9:7f:d9:37:30:b2:99:1c:04:89:01:c2:50:
                    29:74:d0:05:1f:b2:0f:0f:a0:4a:d9:02:50:87:0a:
                    5d:f1:d7:01:83:35:dc:c4:bd:89:b6:f5:81:41:60:
                    5d:07:d4:83:d0:c7:df:31:e0:36:76:eb:1e:10:c0:
                    27:00:5b:72:77:69:45:8d:75:85:8b:62:d8:ea:f1:
                    4d:20:fb:fb:c9:c3:ba:00:92:e5:5a:d5:d1:3b:a9:
                    c4:f4:82:fd:d9:e4:9f:4b:75:9b:3e:b5:18:37:27:
                    b9:d9:52:e5:2c:b2:3a:28:5f:d5:53:b8:1d:24:da:
                    dc:9d:b3:e1:a1:a2:55:3a:16:ac:9c:2e:79:bd:82:
                    a4:8e:8b:9f:4a:c5:ba:3e:df:bf:7c:79:d5:61:eb:
                    31:5c:9e:dd:05:6b:75:83:90:55:1c:8b:99:8e:da:
                    af:9d:1e:13:b6:48:50:fc:8d:63:aa:26:86:06:b4:
                    b1:99:36:28:10:f8:97:c7:9d:4c:82:91:e2:78:2f:
                    d8:ab:77:80:1e:64:67:e2:66:64:cf:89:91:fe:bd:
                    ce:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:E1:4B:1E:5B:98:3E:C4:85:AD:AB:72:C3:51:4A:45:2E:52:F1:D2
            X509v3 Authority Key Identifier:
                keyid:B8:73:1C:30:88:63:CB:28:04:E0:76:D5:8E:8C:07:15:9B:4E:5F:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/uHMcMIhjyygE4HbVjowHFZtOXxk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHMcMIhjyygE4HbVjowHFZtOXxk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/uHMcMIhjyygE4HbVjowHFZtOXxk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:17:0a:32:27:22:8a:37:1d:07:0b:80:27:20:c1:08:b3:5c:
         40:4b:8e:3b:b2:e5:6e:44:0c:f3:54:ba:cc:c1:04:19:9a:2d:
         d3:f2:65:63:79:b8:6c:24:24:c9:58:89:e1:10:a3:5a:53:f4:
         d8:20:82:2c:3b:c7:24:32:4c:a2:ce:e4:44:75:fe:e3:a3:5f:
         b7:3b:ea:bb:72:a6:13:2f:25:d8:21:f7:89:67:16:77:f9:68:
         28:e6:3d:97:6d:88:17:bd:cb:8b:f2:2b:63:ab:ca:7a:46:e3:
         f1:d1:03:1c:66:c1:a3:11:b4:f3:d0:6a:01:8e:6b:24:9d:60:
         8d:8c:d2:31:20:06:d7:0d:ea:2c:c5:c3:72:f5:70:15:03:95:
         16:40:b0:12:06:ab:3b:83:49:34:e0:80:c0:ca:b7:09:4f:78:
         ce:1c:fc:93:dc:e6:36:f9:72:6b:39:28:73:66:29:df:31:a8:
         05:b2:d3:cc:83:59:24:a2:0e:32:85:4b:47:4e:0d:e8:27:75:
         e1:d2:34:7c:f6:47:c2:8e:9e:a5:7d:eb:33:07:b4:c1:08:01:
         15:45:6b:ba:a9:d5:38:21:8e:79:cc:8d:88:54:d4:82:5e:fb:
         35:1b:a6:64:1a:08:8d:d0:27:f6:6d:15:24:5a:38:de:e9:a0:
         be:3c:d1:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:34:43 2025 by rpki-client