Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919CA3C/D83646FEC1F211EB98564174C4F9AE02/uYUInIuVHhACl2u9XU0d0kGB8Z8.mft
File:                     uYUInIuVHhACl2u9XU0d0kGB8Z8.mft (raw, json)
Hash identifier:          Qe0VKmR4La22I0sn43IonjIIEugzrZ8WNx36zwTx80s=
Subject key identifier:   16:8A:08:C7:A4:DC:A7:99:1F:94:AE:90:F0:12:33:1C:15:9B:93:AC
Authority key identifier: B9:85:08:9C:8B:95:1E:10:02:97:6B:BD:5D:4D:1D:D2:41:81:F1:9F
Certificate issuer:       /CN=A919CA3C/serialNumber=B985089C8B951E1002976BBD5D4D1DD24181F19F
Certificate serial:       05AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uYUInIuVHhACl2u9XU0d0kGB8Z8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919CA3C/D83646FEC1F211EB98564174C4F9AE02/uYUInIuVHhACl2u9XU0d0kGB8Z8.mft
Manifest number:          05A5
Signing time:             Wed 02 Apr 2025 23:10:55 +0000
Manifest this update:     Wed 02 Apr 2025 23:10:55 +0000
Manifest next update:     Wed 09 Apr 2025 23:10:55 +0000
Files and hashes:         1: uYUInIuVHhACl2u9XU0d0kGB8Z8.crl (hash: UtwLoUaqHJmDB7sW/B4c9Sow3FwjEk2tAAOKLLWJKxY=)
                          2: 432BBA90C1F611EBAD8D7477C4F9AE02.roa (hash: hkJ88WsZE+BHMinN6yfbuiaAGQUAch41Smzi5V2G9DM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919CA3C/D83646FEC1F211EB98564174C4F9AE02/uYUInIuVHhACl2u9XU0d0kGB8Z8.crl
                          rsync://rpki.apnic.net/member_repository/A919CA3C/D83646FEC1F211EB98564174C4F9AE02/uYUInIuVHhACl2u9XU0d0kGB8Z8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uYUInIuVHhACl2u9XU0d0kGB8Z8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Apr 2025 23:10:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1450 (0x5aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919CA3C
        Validity
            Not Before: Apr  2 23:10:55 2025 GMT
            Not After : Apr  9 23:10:55 2025 GMT
        Subject: CN=67edc3ff-dd53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e0:4d:cc:63:f9:1c:a4:10:0b:5c:86:22:a7:
                    47:5d:95:fe:18:9f:c8:e9:c4:2f:fd:25:de:99:c5:
                    71:e8:d6:5d:36:4e:52:90:ff:ee:73:27:55:8d:60:
                    82:27:c2:62:ed:77:ef:cc:6e:a0:a9:2b:87:0b:66:
                    f9:59:49:13:54:75:d7:37:8d:ab:bb:b7:85:59:fb:
                    3d:75:38:ed:a7:aa:b2:06:06:32:de:71:40:28:3c:
                    85:9e:c9:c6:4d:fd:e0:c1:eb:de:8a:72:6a:08:66:
                    d9:90:b1:f1:31:82:fc:03:40:37:23:64:2a:7e:86:
                    93:11:dc:c9:3f:bd:cc:6f:1b:50:89:b6:5b:b4:a2:
                    17:dc:ad:8c:59:98:f0:48:53:1c:6e:1b:08:87:6d:
                    28:3b:69:23:6f:ce:da:aa:3d:b4:ae:5d:26:e2:66:
                    3c:0d:0c:d0:33:00:9b:04:c1:14:d4:21:b1:19:41:
                    94:2e:b2:b2:10:2b:c3:00:4e:db:a0:2a:d1:ff:12:
                    0d:7e:ec:7c:46:0d:f0:38:a7:c4:6f:13:40:56:5b:
                    5f:b7:cd:ee:80:73:1c:2e:3b:9a:65:33:37:53:05:
                    c6:42:d4:14:a7:f5:a9:26:4b:e3:95:14:59:19:dd:
                    af:d2:76:ff:d5:7a:52:1b:8b:53:85:70:86:d4:c1:
                    f0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:8A:08:C7:A4:DC:A7:99:1F:94:AE:90:F0:12:33:1C:15:9B:93:AC
            X509v3 Authority Key Identifier:
                keyid:B9:85:08:9C:8B:95:1E:10:02:97:6B:BD:5D:4D:1D:D2:41:81:F1:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919CA3C/D83646FEC1F211EB98564174C4F9AE02/uYUInIuVHhACl2u9XU0d0kGB8Z8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uYUInIuVHhACl2u9XU0d0kGB8Z8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CA3C/D83646FEC1F211EB98564174C4F9AE02/uYUInIuVHhACl2u9XU0d0kGB8Z8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:48:6b:10:97:a2:8f:b6:50:5a:8d:49:59:ba:35:a4:11:f5:
         d1:86:0f:9b:ca:e3:61:2c:45:c9:b7:d8:c8:2c:20:6f:07:de:
         cd:29:95:d2:51:c1:f3:8c:01:42:4f:9d:9c:42:ac:97:9d:cd:
         57:92:02:29:53:10:38:54:32:52:53:12:73:84:c4:9e:17:86:
         54:8d:d1:18:00:4d:e9:76:6e:5b:76:12:55:17:35:4b:e5:bb:
         cb:4c:20:8a:24:57:af:72:f9:f6:a6:aa:e7:34:f8:13:a1:22:
         b3:f9:cf:f0:f7:91:88:2a:ac:d9:6e:d4:b7:61:b4:a1:b4:b2:
         ee:61:15:6c:ea:fb:9f:64:f7:2c:14:0a:3a:cd:68:83:15:35:
         9c:6a:9a:30:12:0d:c2:fe:9c:8b:0c:98:c4:c6:8f:be:44:16:
         08:6d:45:85:82:cb:43:de:4e:e2:ea:a4:21:ff:25:c7:6c:88:
         69:cd:94:9a:3e:c0:22:74:b5:00:b6:63:15:01:d5:6d:80:fd:
         af:c8:5e:d2:13:64:43:59:01:b0:39:29:19:f6:98:45:ff:a6:
         d9:3b:28:bf:67:51:29:c7:ab:34:f4:53:5a:fc:63:f5:71:11:
         29:cc:90:de:9c:df:44:52:27:6b:a3:dc:79:8c:9c:86:6d:a5:
         6c:4e:99:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:53:58 2025 by rpki-client