Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft
File:                     uu94943Hy_m3MScKqxBp9eNDPLs.mft (raw, json)
Hash identifier:          6Egsn7BlU31IXP7EBi+dFdxn1K04nq3ygxbG5cJMPaM=
Subject key identifier:   41:F8:E6:6F:DE:C7:CD:71:11:4C:52:DF:3F:1F:45:62:E2:A3:30:E0
Authority key identifier: BA:EF:78:F7:8D:C7:CB:F9:B7:31:27:0A:AB:10:69:F5:E3:43:3C:BB
Certificate issuer:       /CN=A91B61A7/serialNumber=BAEF78F78DC7CBF9B731270AAB1069F5E3433CBB
Certificate serial:       84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uu94943Hy_m3MScKqxBp9eNDPLs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft
Manifest number:          80
Signing time:             Fri 11 Apr 2025 05:53:35 +0000
Manifest this update:     Fri 11 Apr 2025 05:53:34 +0000
Manifest next update:     Fri 18 Apr 2025 05:53:34 +0000
Files and hashes:         1: uu94943Hy_m3MScKqxBp9eNDPLs.crl (hash: KsFfbz/0mjnJDhF6FsnLGA3sCkqr3oooWddv21+3qU0=)
                          2: 081FECF0FFB911EF955BB727C4F9AE02.roa (hash: i9koQs5gzKTA12WO2nbLKOn7G+eGstWSVbsuRXzqo6I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.crl
                          rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uu94943Hy_m3MScKqxBp9eNDPLs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Apr 2025 05:53:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 132 (0x84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B61A7, serialNumber=BAEF78F78DC7CBF9B731270AAB1069F5E3433CBB
        Validity
            Not Before: Apr 11 05:53:34 2025 GMT
            Not After : Apr 18 05:53:34 2025 GMT
        Subject: CN=67f8ae5f-c91b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a2:fd:7f:a1:e8:91:d1:60:dc:93:11:77:b7:
                    70:87:e8:1d:c3:b3:b7:1d:a5:96:35:67:f3:c5:ab:
                    51:ee:2b:ce:7b:18:b9:b3:4f:23:8e:3e:94:f6:e2:
                    76:22:74:7f:54:71:1e:19:f6:91:bf:e3:66:0f:c4:
                    bd:0b:83:5e:24:4c:54:ce:11:53:ea:95:cc:1e:c9:
                    54:9f:37:c1:58:0e:44:4b:8a:2b:f5:36:25:a2:b3:
                    53:5d:17:b8:73:5c:72:ef:85:fc:56:5b:43:0a:1f:
                    0e:0b:d3:50:75:cc:01:5d:64:8c:1e:54:d8:6b:70:
                    c0:b5:a7:24:82:0c:31:ba:a6:f3:b0:83:3f:2b:a5:
                    7e:c2:8c:12:43:05:46:26:f8:ba:e4:5a:0f:fe:a3:
                    b8:71:e3:0c:09:80:62:10:65:e7:26:a7:c4:48:1f:
                    2e:fe:c9:02:f8:55:d9:24:51:bd:2d:bb:4f:ff:b5:
                    0f:f2:70:b7:fb:30:87:db:07:ea:9b:8d:e3:9c:d7:
                    97:22:78:5b:f0:84:8f:27:be:a0:85:17:e7:f3:d3:
                    ff:b4:85:40:9d:7e:43:75:ab:78:83:35:ee:5c:7f:
                    1e:2b:ed:17:73:af:29:d9:df:22:fa:25:3a:be:06:
                    f6:62:3a:65:29:36:a6:eb:33:71:e5:2c:18:93:94:
                    b2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:F8:E6:6F:DE:C7:CD:71:11:4C:52:DF:3F:1F:45:62:E2:A3:30:E0
            X509v3 Authority Key Identifier:
                keyid:BA:EF:78:F7:8D:C7:CB:F9:B7:31:27:0A:AB:10:69:F5:E3:43:3C:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uu94943Hy_m3MScKqxBp9eNDPLs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:b8:2a:73:12:6d:2c:7a:02:ed:ae:4a:5b:42:99:68:7f:b5:
         7a:7d:54:71:52:79:c5:6f:f3:99:b9:98:ff:10:38:f3:1c:e9:
         40:9e:b8:27:6e:58:41:36:a5:71:42:25:0a:36:47:bf:3f:32:
         3f:9c:ac:d0:96:1e:73:25:ac:6a:e8:c2:a1:4a:32:e1:c0:67:
         10:ae:3c:a8:de:76:0a:c4:db:fd:61:16:3f:92:95:96:6c:3f:
         7d:dd:b2:d5:18:b5:ab:39:de:95:08:fe:d5:56:16:19:b5:09:
         5b:b1:c4:91:48:37:ec:38:55:48:87:4d:85:e3:4d:23:ae:4e:
         ed:22:b1:c8:bd:2d:72:69:ef:b7:9a:5a:9e:f8:05:10:bd:38:
         9a:c3:9a:0d:98:8f:a8:58:b5:de:2c:ea:82:68:38:2e:c9:53:
         a9:d7:1f:d8:86:3f:7f:92:8b:37:f6:43:f7:9c:0f:e8:c8:bf:
         2d:91:81:34:1c:a8:70:61:65:c1:1e:72:e7:8e:00:ef:3d:14:
         4f:8d:97:2a:c7:b5:5d:1a:06:fa:e1:32:6a:bd:de:a2:f9:23:
         50:66:03:5b:a9:dc:da:aa:71:8e:30:11:c3:d6:f2:16:f9:8d:
         0e:41:77:e4:6f:24:76:fe:53:a9:b2:ea:0f:dc:74:ad:c0:42:
         c6:fd:09:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:14:29 2025 by rpki-client