Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft
File:                     UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft (raw, json)
Hash identifier:          0Juk4Kz7LI7ixlbshSbDylon1Rj0YyVVc8nYERc8IKU=
Subject key identifier:   62:BA:0D:8D:79:97:22:75:B7:64:E8:69:78:FD:72:48:6B:DC:CF:40
Authority key identifier: 51:89:2B:E5:B0:B4:AB:C6:02:54:45:F4:03:9F:C7:95:D8:BA:58:E2
Certificate issuer:       /CN=A9139A90/serialNumber=51892BE5B0B4ABC6025445F4039FC795D8BA58E2
Certificate serial:       B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UYkr5bC0q8YCVEX0A5_Hldi6WOI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft
Manifest number:          B0
Signing time:             Sat 31 May 2025 05:37:27 +0000
Manifest this update:     Sat 31 May 2025 05:37:26 +0000
Manifest next update:     Sat 07 Jun 2025 05:37:26 +0000
Files and hashes:         1: UYkr5bC0q8YCVEX0A5_Hldi6WOI.crl (hash: DK+35sAz/tE3Eb4gqgFQFJq6kjAGSpke8uGDernYVHw=)
                          2: 8B584EC2337D11EF9D71B72DC4F9AE02.roa (hash: yZ1LidZrlFrNTxapIhIsCTEZZK7lTYC0s/4RKHkPEsg=)
                          3: AE977DF8337E11EFB3CCD72FC4F9AE02.roa (hash: OJdZE6RjgM3Hz2T07Mg2BJv0nC0BL01Q/08oABlyEMA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.crl
                          rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UYkr5bC0q8YCVEX0A5_Hldi6WOI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 05:37:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 180 (0xb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139A90, serialNumber=51892BE5B0B4ABC6025445F4039FC795D8BA58E2
        Validity
            Not Before: May 31 05:37:26 2025 GMT
            Not After : Jun  7 05:37:26 2025 GMT
        Subject: CN=683a9596-098d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d0:20:70:56:ca:09:9b:76:e8:b9:0d:d2:ac:
                    ca:83:27:5a:ee:67:87:e0:59:04:08:85:24:91:f6:
                    d3:fa:cd:65:66:3b:7b:8b:ed:c6:b3:aa:51:46:83:
                    46:10:7c:34:cd:58:69:3e:d5:d0:c8:33:e0:51:53:
                    9e:5b:e4:9e:41:e8:1c:eb:39:1e:14:40:cb:25:80:
                    71:e9:9b:ef:2b:4e:ae:66:fd:6b:dd:fd:88:85:b9:
                    9f:b9:68:14:36:23:14:17:f8:ca:98:a8:63:8b:e1:
                    d8:9b:ff:33:0c:d7:ba:5b:7e:9c:17:b0:50:40:5f:
                    8d:7d:16:c2:8c:22:67:16:bf:77:bb:ac:12:b3:62:
                    e7:25:35:82:41:d8:9c:1e:7f:05:0f:f2:61:04:a2:
                    d0:39:10:94:e5:c1:92:92:18:88:ec:54:0a:b0:17:
                    6f:1d:25:c0:b7:49:9e:50:e1:8a:7f:6c:da:96:40:
                    97:15:c1:d1:e6:29:f0:91:14:0f:f0:ec:c2:1d:69:
                    b9:b7:0c:a5:ac:ca:67:60:c4:2e:cd:a4:40:b1:78:
                    aa:32:13:b8:7a:35:5e:0c:e1:ab:d4:38:34:78:a2:
                    94:75:cb:98:02:3b:e0:40:56:33:d7:3b:a6:5b:31:
                    55:20:81:f5:83:2b:ac:87:97:d8:47:f1:00:57:a1:
                    a4:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:BA:0D:8D:79:97:22:75:B7:64:E8:69:78:FD:72:48:6B:DC:CF:40
            X509v3 Authority Key Identifier:
                keyid:51:89:2B:E5:B0:B4:AB:C6:02:54:45:F4:03:9F:C7:95:D8:BA:58:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UYkr5bC0q8YCVEX0A5_Hldi6WOI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:37:45:3c:0f:7c:8c:ff:a4:e8:68:5a:9e:c3:0d:9f:92:c4:
         1e:20:90:48:36:e8:99:9a:d7:51:e2:80:a0:8f:a3:46:15:57:
         5d:5b:58:00:4d:d8:f3:00:68:d0:2f:12:54:17:2b:dc:54:ab:
         c0:f7:fd:20:ef:2d:1c:c1:12:61:5f:4d:be:a3:77:e9:9a:8f:
         1e:27:e6:ed:64:d4:7c:08:63:f5:8a:94:58:5a:e5:c9:55:ab:
         c0:55:12:7e:fe:84:b8:2f:77:0c:aa:f8:c7:d5:fc:73:a3:29:
         c2:47:55:8a:47:a7:11:d8:97:15:f5:ce:72:77:3f:cc:9f:44:
         47:05:d9:c1:0f:16:1c:53:de:06:30:29:e7:e3:e3:98:c5:2b:
         05:e1:2b:dc:04:7b:2f:bf:8f:b5:1d:d9:98:75:1b:90:ae:ef:
         e8:c8:16:8b:16:c8:03:eb:07:15:71:bb:14:78:5e:d1:7e:ba:
         ee:b1:61:12:1f:42:5a:9f:97:3e:5c:8c:7e:8c:e3:00:c6:9a:
         68:12:4a:55:5e:dc:99:f3:5f:99:3d:d4:89:01:ab:3f:a4:20:
         85:2f:e7:13:c7:8e:99:96:f6:8a:98:3f:f4:a3:fa:c1:13:92:
         a3:fc:ac:7e:96:99:16:09:7b:2a:c0:83:21:ad:2e:ae:d6:24:
         09:62:a1:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:30:22 2025 by rpki-client