Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/UOjwS5AI_qHlwx9k52Pa3tJTpgw.mft
File:                     UOjwS5AI_qHlwx9k52Pa3tJTpgw.mft (raw, json)
Hash identifier:          1K7VF+ftNoUnZfA4MvfCCZiJRVXI2vwtQPEgSQfO65o=
Subject key identifier:   AD:47:0E:1F:8B:8D:E0:BE:72:E4:90:BE:BA:3F:5F:2E:72:12:21:DA
Authority key identifier: 50:E8:F0:4B:90:08:FE:A1:E5:C3:1F:64:E7:63:DA:DE:D2:53:A6:0C
Certificate issuer:       /CN=A91A1630/serialNumber=50E8F04B9008FEA1E5C31F64E763DADED253A60C
Certificate serial:       A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOjwS5AI_qHlwx9k52Pa3tJTpgw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/UOjwS5AI_qHlwx9k52Pa3tJTpgw.mft
Manifest number:          A6
Signing time:             Sat 29 Mar 2025 05:31:35 +0000
Manifest this update:     Sat 29 Mar 2025 05:31:35 +0000
Manifest next update:     Sat 05 Apr 2025 05:31:35 +0000
Files and hashes:         1: UOjwS5AI_qHlwx9k52Pa3tJTpgw.crl (hash: kiOHL5Vcnc93L+bU26QWHO7vI2UYBrw/R1XnVUvetm8=)
                          2: 18141426114211EFA0FF3956C4F9AE02.roa (hash: wOKkXFecaGXCjByRcpDkGbc7Cdo2VuRpcxeBnTZ+uS0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/UOjwS5AI_qHlwx9k52Pa3tJTpgw.crl
                          rsync://rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/UOjwS5AI_qHlwx9k52Pa3tJTpgw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOjwS5AI_qHlwx9k52Pa3tJTpgw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Apr 2025 05:08:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 168 (0xa8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1630
        Validity
            Not Before: Mar 29 05:31:35 2025 GMT
            Not After : Apr  5 05:31:35 2025 GMT
        Subject: CN=67e785b7-2e2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4c:b4:ca:89:1a:0e:f9:c5:cc:d1:6d:2a:48:
                    92:5f:57:b0:0b:40:a6:c9:be:1d:ab:23:d3:24:3d:
                    eb:c2:bc:33:ed:5d:f5:1f:e2:4e:b4:5f:85:a3:9d:
                    24:4d:7c:e0:2b:2f:a9:4e:fe:99:27:1f:72:f4:fe:
                    2d:49:75:87:f2:15:37:20:86:fb:31:da:5d:d2:07:
                    d8:0d:7f:cd:df:ea:a7:a5:8a:57:d9:b0:24:42:55:
                    d3:02:43:b1:44:86:03:f7:a0:db:f7:0e:3f:82:a1:
                    b7:ed:ef:25:47:e9:66:0e:37:45:b9:75:8f:0d:e3:
                    73:e2:da:d8:1d:b8:6c:39:11:60:12:25:01:98:a7:
                    db:3d:d0:88:4a:78:f2:38:46:d6:f8:89:6d:30:f3:
                    f2:08:f3:9a:98:11:72:46:a3:73:db:85:5d:18:0b:
                    88:97:e6:96:75:0e:be:96:99:22:11:c6:f2:b1:9f:
                    2d:4c:24:88:06:87:47:c6:07:41:d6:39:f4:fe:95:
                    db:96:c3:c4:b4:62:83:c2:39:1e:ae:2a:00:99:86:
                    f8:47:5c:41:39:56:dc:5c:8a:09:92:ab:8c:f1:93:
                    af:91:40:df:7c:47:46:9e:86:38:ec:4f:7f:f3:b8:
                    2b:21:8c:d2:8a:f1:1e:50:ce:05:48:0b:e7:db:91:
                    62:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:47:0E:1F:8B:8D:E0:BE:72:E4:90:BE:BA:3F:5F:2E:72:12:21:DA
            X509v3 Authority Key Identifier:
                keyid:50:E8:F0:4B:90:08:FE:A1:E5:C3:1F:64:E7:63:DA:DE:D2:53:A6:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/UOjwS5AI_qHlwx9k52Pa3tJTpgw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOjwS5AI_qHlwx9k52Pa3tJTpgw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/UOjwS5AI_qHlwx9k52Pa3tJTpgw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:5e:43:84:b9:59:24:39:0d:64:7e:eb:3b:28:0d:3a:3b:37:
         20:b5:a9:09:cc:86:b7:3d:9a:c8:e2:8b:6b:20:3b:be:52:3b:
         fb:59:29:da:6f:9a:77:fb:71:5c:70:e2:24:02:1b:e0:1a:f2:
         aa:80:95:c8:b3:a5:8a:5c:d0:f7:8a:43:d2:ba:38:3f:b8:e5:
         f4:58:6d:c2:3e:e4:8c:78:72:81:d1:58:9a:71:4f:1e:62:8a:
         48:29:d6:a9:42:cc:50:3f:c1:f4:7e:d5:86:f3:da:92:26:90:
         8c:97:d8:f3:2c:11:61:d4:6c:ef:ed:13:68:10:5a:07:f0:68:
         0c:58:09:de:1f:f7:de:8b:4e:86:6d:f7:1c:36:8c:3d:30:5e:
         63:85:35:1b:b9:a2:bb:a8:cc:40:03:19:33:c8:05:4a:de:31:
         97:f3:30:41:e4:ca:13:ff:8d:6d:b4:82:8c:94:15:68:24:45:
         7c:73:1c:88:d7:46:f4:e7:db:30:f7:70:d6:28:44:be:70:d5:
         6a:14:9e:54:ab:23:32:29:97:7e:a8:b6:15:b5:4a:5a:d5:1f:
         f2:73:13:e3:35:bc:bc:96:ec:0d:02:b8:20:dd:ac:ff:62:24:
         9f:bb:a5:de:d7:d6:ee:9f:03:38:d7:19:5a:dc:28:42:88:a8:
         96:3a:dc:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:51:59 2025 by rpki-client