Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/C13116F228D311ED8FBD6D6CC4F9AE02/Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.mft
File:                     Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.mft (raw, json)
Hash identifier:          ZghM4t+A+ZEhhdsiDhsagiyUFRzxyvc2acPhOOJGuMk=
Subject key identifier:   BC:FA:08:B5:FD:71:79:87:6E:11:95:D1:CD:E1:3C:07:A5:51:EE:A8
Authority key identifier: 52:FE:2B:6B:7F:49:7F:94:F1:D4:92:D1:91:7B:48:64:78:BF:59:D6
Certificate issuer:       /CN=A9125475/serialNumber=52FE2B6B7F497F94F1D492D1917B486478BF59D6
Certificate serial:       024B
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125475/C13116F228D311ED8FBD6D6CC4F9AE02/Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.mft
Manifest number:          0242
Signing time:             Mon 02 Jun 2025 14:21:43 +0000
Manifest this update:     Mon 02 Jun 2025 14:21:43 +0000
Manifest next update:     Mon 09 Jun 2025 14:21:43 +0000
Files and hashes:         1: Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.crl (hash: i2nSlaO94zkJshQLQmeTWOQsA9/MLV/8KUlnyeCfA5w=)
                          2: 84094296EF5E11EF81B0790EC4F9AE02.roa (hash: Ckg4hw6DabBO2d7okoEF2pancj6gViKBZRAEfAu13oo=)
                          3: DFA79FA2EFD811EE87F4440AC4F9AE02.roa (hash: hQScYTUNqe8SfNNwSXoRwPKv/1EvvMjHkzfsNEe+pKg=)
                          4: C3923CE6EFD811EEB93EE009C4F9AE02.roa (hash: EgTNqiKvmZXEy9LjOSG2dN0ynTpnYuhjXlrpPTL50KA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125475/C13116F228D311ED8FBD6D6CC4F9AE02/Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.crl
                          rsync://rpki.apnic.net/member_repository/A9125475/C13116F228D311ED8FBD6D6CC4F9AE02/Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 14:21:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 587 (0x24b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125475, serialNumber=52FE2B6B7F497F94F1D492D1917B486478BF59D6
        Validity
            Not Before: Jun  2 14:21:43 2025 GMT
            Not After : Jun  9 14:21:43 2025 GMT
        Subject: CN=683db377-c5b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4b:c5:39:8b:70:3f:25:c4:21:1e:14:ad:09:
                    61:e5:89:7b:f1:44:11:81:f3:42:87:d4:a6:b7:bc:
                    45:12:2d:d8:6b:06:40:53:a8:35:6b:fb:bc:a0:20:
                    86:6d:fe:5a:13:f7:e9:12:d5:a1:64:a5:4f:aa:16:
                    e2:eb:78:28:f4:c8:c4:2e:9e:28:86:61:76:c4:14:
                    09:8a:0a:8b:60:b1:6b:27:09:0c:64:4e:bb:c4:5e:
                    20:cf:09:1e:41:9c:20:c6:d4:2f:87:22:47:51:45:
                    9b:c9:92:b7:72:b3:d4:36:49:a4:13:7b:ce:13:ef:
                    0d:8f:83:21:2a:cf:f7:32:0a:ea:9a:8e:ac:cd:f6:
                    99:2d:04:4e:ac:f0:c7:56:e4:f3:b6:e5:55:c8:73:
                    d6:63:49:99:ac:29:bf:5e:9a:47:80:a8:57:a3:95:
                    93:10:8b:cc:e5:c5:55:f4:01:6a:b6:8c:dd:dc:d5:
                    90:64:3e:d3:6a:b7:e8:cd:61:2c:3d:db:1b:48:02:
                    de:5c:27:a6:43:60:f5:36:45:2f:ad:1c:7e:61:9c:
                    49:89:53:53:eb:3f:d8:3d:1f:00:e2:d5:5d:2a:4f:
                    64:cb:ff:18:2b:19:64:cc:62:cc:b8:17:a4:0f:d5:
                    f0:11:08:24:0e:ff:b4:b4:f1:3c:01:88:61:56:a0:
                    af:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:FA:08:B5:FD:71:79:87:6E:11:95:D1:CD:E1:3C:07:A5:51:EE:A8
            X509v3 Authority Key Identifier:
                keyid:52:FE:2B:6B:7F:49:7F:94:F1:D4:92:D1:91:7B:48:64:78:BF:59:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125475/C13116F228D311ED8FBD6D6CC4F9AE02/Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/C13116F228D311ED8FBD6D6CC4F9AE02/Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:7a:7f:96:64:b2:ed:19:f9:0a:01:1d:5b:23:12:c0:56:8c:
         71:30:f0:dc:94:3e:20:fe:09:e7:b4:18:15:0e:73:ad:b8:1b:
         f3:95:eb:22:87:8c:58:f3:02:79:b3:c5:41:21:8a:53:70:f2:
         b7:e8:dc:89:ee:d8:da:14:d2:a1:e9:3f:c2:d0:2f:78:b4:cc:
         48:ca:e4:58:3c:4b:ee:34:d4:ac:6a:e2:4b:dd:91:05:c6:2d:
         0c:ac:bf:a2:d4:41:99:57:94:f0:63:a5:a2:78:3d:3d:d8:70:
         84:19:2b:b7:5b:4f:91:88:27:59:8b:8d:8f:8d:a0:c1:83:c6:
         14:d7:81:cc:17:5e:b6:27:ea:c9:02:8c:1f:f6:c7:29:cc:9b:
         b5:6f:f6:86:cd:32:ad:04:b1:4b:a2:0b:ae:70:71:c4:7e:11:
         0a:19:b5:49:56:f6:b6:df:ba:ab:5d:44:4b:1b:31:03:c0:1c:
         90:09:63:5a:67:17:34:61:b1:38:3d:ba:54:4b:b3:db:60:c5:
         5c:34:23:93:53:a6:71:4c:c5:85:04:75:f6:e3:b8:03:1c:ff:
         8b:d5:3b:c4:20:97:1a:3c:56:39:fd:75:ca:47:85:15:55:ff:
         b8:b1:a7:c5:80:57:0c:05:22:ef:4a:54:b5:71:99:38:e8:c0:
         62:f9:0a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:58:58 2025 by rpki-client