Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C5C6/73617772785811EC9699320EC4F9AE02/UIni3IEtNN89TbWDVc_xSweu3rk.mft
File:                     UIni3IEtNN89TbWDVc_xSweu3rk.mft (raw, json)
Hash identifier:          0+J+0SUY3599rZejEHAWm91/FJJ+T0bdudpUxg+LecQ=
Subject key identifier:   86:CE:C9:BB:77:7D:22:46:F3:EC:FE:C9:A5:F0:8C:5B:29:DC:74:74
Authority key identifier: 50:89:E2:DC:81:2D:34:DF:3D:4D:B5:83:55:CF:F1:4B:07:AE:DE:B9
Certificate issuer:       /CN=A919C5C6/serialNumber=5089E2DC812D34DF3D4DB58355CFF14B07AEDEB9
Certificate serial:       03DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UIni3IEtNN89TbWDVc_xSweu3rk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C5C6/73617772785811EC9699320EC4F9AE02/UIni3IEtNN89TbWDVc_xSweu3rk.mft
Manifest number:          03DB
Signing time:             Mon 07 Apr 2025 00:10:49 +0000
Manifest this update:     Mon 07 Apr 2025 00:10:48 +0000
Manifest next update:     Mon 14 Apr 2025 00:10:48 +0000
Files and hashes:         1: UIni3IEtNN89TbWDVc_xSweu3rk.crl (hash: 457JVToLzBmdRy0USzeOx7SLynqa8ZtvtvUuaJWpZnk=)
                          2: 30BF89A0785C11ECB03F8929C4F9AE02.roa (hash: dqi1jGrgZhfUDsaLgY8PqI8EYscNtf7FIr0kNmEX2/w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C5C6/73617772785811EC9699320EC4F9AE02/UIni3IEtNN89TbWDVc_xSweu3rk.crl
                          rsync://rpki.apnic.net/member_repository/A919C5C6/73617772785811EC9699320EC4F9AE02/UIni3IEtNN89TbWDVc_xSweu3rk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UIni3IEtNN89TbWDVc_xSweu3rk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 14 Apr 2025 00:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 991 (0x3df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C5C6
        Validity
            Not Before: Apr  7 00:10:48 2025 GMT
            Not After : Apr 14 00:10:48 2025 GMT
        Subject: CN=67f31808-3001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b9:54:5e:a4:6a:05:99:33:80:9f:32:2d:9e:
                    9a:67:34:79:b5:48:32:fc:e2:bb:a2:19:0c:42:ff:
                    74:9f:93:21:16:68:0d:d9:bb:53:02:92:4a:66:a3:
                    67:c0:2d:5a:c8:6b:39:06:9e:d4:41:61:f5:3c:86:
                    d8:51:15:02:04:ca:db:6c:00:74:bc:8e:dc:64:da:
                    5b:44:72:31:00:9b:e7:f9:4a:c7:2c:2e:ba:ce:85:
                    ba:7a:7a:00:03:ee:e5:06:2e:6b:8a:89:c9:98:7c:
                    5d:e4:c0:3f:36:a5:8c:82:f3:67:da:0c:b9:4b:80:
                    26:d6:e5:31:c1:83:75:a5:40:75:9e:b1:8f:e6:c2:
                    b2:ad:f7:46:8a:81:d4:dc:ad:49:05:b0:1a:72:16:
                    70:c4:39:51:7a:fa:d4:b7:85:d6:2b:a8:24:39:d9:
                    d3:4a:ba:18:a6:2c:28:7b:62:32:e5:89:f7:ee:ba:
                    31:53:61:67:eb:52:a9:af:41:2f:b7:47:b5:c6:d2:
                    39:45:6a:e4:da:24:4d:3e:44:a6:6e:77:13:8a:8d:
                    cd:78:60:fd:f7:15:9f:8d:3e:8f:53:24:c1:a4:1e:
                    e7:3d:4b:f2:cc:e6:4c:62:40:7e:be:90:04:0b:63:
                    59:79:41:43:4c:83:37:52:04:8b:fa:68:d9:3d:d2:
                    a9:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:CE:C9:BB:77:7D:22:46:F3:EC:FE:C9:A5:F0:8C:5B:29:DC:74:74
            X509v3 Authority Key Identifier:
                keyid:50:89:E2:DC:81:2D:34:DF:3D:4D:B5:83:55:CF:F1:4B:07:AE:DE:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C5C6/73617772785811EC9699320EC4F9AE02/UIni3IEtNN89TbWDVc_xSweu3rk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UIni3IEtNN89TbWDVc_xSweu3rk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C5C6/73617772785811EC9699320EC4F9AE02/UIni3IEtNN89TbWDVc_xSweu3rk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:8f:38:89:0b:b1:9d:24:b2:e5:6e:97:05:96:d1:39:a3:fe:
         ea:53:a4:3f:79:7a:c1:9c:6d:0a:8c:f0:9b:0b:62:c1:e4:01:
         e8:6f:c2:15:71:33:7f:c3:14:ab:bd:7b:5c:ed:ff:62:17:26:
         8c:7e:ad:24:07:ca:4a:ec:72:c5:d4:80:42:45:46:17:f2:1c:
         86:57:61:91:0e:d8:ff:5f:60:5e:1f:75:c0:2f:8b:4b:be:1e:
         77:93:d4:33:1a:cb:7e:1f:9c:30:a5:a4:9b:b1:e3:3b:5a:4e:
         f1:d9:cb:7e:48:cd:93:c0:5c:08:65:7f:ce:a8:47:a1:7c:3f:
         d0:29:e7:43:41:96:86:51:c2:42:5c:1b:a6:34:36:26:82:cc:
         d1:e1:9e:f9:33:4f:46:5b:f5:48:4a:8f:ff:53:a2:58:0e:c1:
         b1:23:d8:79:19:96:8c:7f:61:fb:1f:cd:15:5f:1a:db:a7:1c:
         fc:6f:30:c3:56:20:92:66:38:1b:8f:c5:ce:27:a3:2a:d5:97:
         c6:5a:cd:70:51:cb:49:b4:c2:ef:0f:4d:6e:03:fd:db:93:fa:
         f2:af:23:b7:97:97:25:de:14:ff:88:2b:04:3d:59:c0:9b:52:
         6b:7a:cc:e1:4d:0a:ed:62:07:df:4c:f3:b5:22:25:ed:eb:1d:
         77:ec:11:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:25:13 2025 by rpki-client