Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913AFD2/BB01A792590911EBA69D202AC4F9AE02/uDJLQvvF8hOdeQHkF94hA5slJdw.mft
File:                     uDJLQvvF8hOdeQHkF94hA5slJdw.mft (raw, json)
Hash identifier:          8KtQJs2eenJyUkgl9/r2+DLNGj8LyHuTbq5XK/t7nKg=
Subject key identifier:   87:1A:E2:E9:5C:EE:62:C6:D9:8D:79:63:53:55:F4:7D:57:D9:34:C4
Authority key identifier: B8:32:4B:42:FB:C5:F2:13:9D:79:01:E4:17:DE:21:03:9B:25:25:DC
Certificate issuer:       /CN=A913AFD2/serialNumber=B8324B42FBC5F2139D7901E417DE21039B2525DC
Certificate serial:       06D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uDJLQvvF8hOdeQHkF94hA5slJdw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913AFD2/BB01A792590911EBA69D202AC4F9AE02/uDJLQvvF8hOdeQHkF94hA5slJdw.mft
Manifest number:          06CC
Signing time:             Fri 30 May 2025 22:16:51 +0000
Manifest this update:     Fri 30 May 2025 22:16:50 +0000
Manifest next update:     Fri 06 Jun 2025 22:16:50 +0000
Files and hashes:         1: uDJLQvvF8hOdeQHkF94hA5slJdw.crl (hash: w8yKyGTu9gZDOnyqlv4mz9RAxMa+qetJB3XCAmhP0CM=)
                          2: A74A1698590A11EB9ECF402AC4F9AE02.roa (hash: 14YPiz/q0MfSs5nscax5BxuQT3KS6POm7ITs4adtFk0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913AFD2/BB01A792590911EBA69D202AC4F9AE02/uDJLQvvF8hOdeQHkF94hA5slJdw.crl
                          rsync://rpki.apnic.net/member_repository/A913AFD2/BB01A792590911EBA69D202AC4F9AE02/uDJLQvvF8hOdeQHkF94hA5slJdw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uDJLQvvF8hOdeQHkF94hA5slJdw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 22:16:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1746 (0x6d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913AFD2, serialNumber=B8324B42FBC5F2139D7901E417DE21039B2525DC
        Validity
            Not Before: May 30 22:16:50 2025 GMT
            Not After : Jun  6 22:16:50 2025 GMT
        Subject: CN=683a2e53-1cbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:48:e7:da:33:a8:1b:87:7f:f4:d7:71:13:a8:
                    42:75:61:dd:15:4b:23:d2:d4:f5:c0:10:99:c5:ac:
                    8c:1d:54:f1:02:f5:60:61:d4:fa:8e:f1:a7:d3:8d:
                    c4:26:a8:52:b0:35:e7:4c:de:93:c0:32:49:f7:c1:
                    57:48:f1:2d:78:99:a4:b9:c1:e9:a8:26:9b:e3:2c:
                    5f:aa:7a:6e:7b:77:fa:ec:2f:8c:c4:c1:b4:b9:3c:
                    73:9a:0c:bc:27:43:7e:a6:c0:11:7f:c1:6e:55:fd:
                    26:23:da:86:11:ff:b4:fd:3f:d6:98:9a:58:8a:89:
                    84:2a:7e:9c:16:f8:77:61:c3:51:b5:f3:f4:0b:04:
                    e2:c3:d1:ab:99:b0:bc:f3:ab:5c:07:2d:44:52:4f:
                    63:1d:7a:97:fa:ca:37:27:53:d0:73:d7:50:36:9a:
                    c7:e7:c0:d2:22:b3:21:d0:65:3e:31:a1:03:67:b2:
                    26:68:46:5f:07:d6:d9:27:42:5c:3e:24:a0:b3:23:
                    70:32:fb:6b:99:6b:f1:6c:c1:b7:31:31:1f:d1:0a:
                    05:ae:20:a4:11:36:da:b5:92:d1:80:fa:50:61:b4:
                    67:ce:15:bc:da:ef:f6:62:20:81:75:e3:8d:26:e9:
                    7b:78:66:fd:db:0f:b9:25:1a:1b:4d:11:46:02:1d:
                    8d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:1A:E2:E9:5C:EE:62:C6:D9:8D:79:63:53:55:F4:7D:57:D9:34:C4
            X509v3 Authority Key Identifier:
                keyid:B8:32:4B:42:FB:C5:F2:13:9D:79:01:E4:17:DE:21:03:9B:25:25:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913AFD2/BB01A792590911EBA69D202AC4F9AE02/uDJLQvvF8hOdeQHkF94hA5slJdw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uDJLQvvF8hOdeQHkF94hA5slJdw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AFD2/BB01A792590911EBA69D202AC4F9AE02/uDJLQvvF8hOdeQHkF94hA5slJdw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:5c:65:69:ee:42:66:a6:75:48:8f:90:c0:a3:8d:27:16:a6:
         07:55:88:19:9d:9a:35:d5:1d:70:1c:db:cc:d3:66:13:47:f8:
         3a:c5:47:f8:04:62:22:a0:42:9f:68:4d:2e:82:d3:65:00:c4:
         63:f9:b7:da:50:c1:e3:03:37:c9:8b:42:c6:90:f2:d0:d7:f4:
         67:b2:b0:20:9d:85:bd:cc:9b:8c:55:c3:4d:a9:6b:d8:b5:ea:
         5b:eb:78:1c:3d:f7:10:5d:4f:5c:ae:56:b0:67:3c:6f:9b:00:
         8d:ca:77:2d:36:de:be:c2:c0:a2:3a:91:2c:68:a7:47:62:d2:
         be:90:5c:4b:71:34:b0:9d:2c:ee:70:f4:14:79:88:d5:41:c0:
         9b:58:92:ce:52:f8:6d:fe:5d:02:38:7d:b2:15:bd:10:e4:6d:
         71:20:96:bd:8c:70:fa:0b:2c:5d:78:ba:96:3d:52:37:56:99:
         43:57:74:a0:ca:b3:02:17:e1:df:70:e2:94:80:2e:34:7e:97:
         52:ad:f6:d7:5e:99:0e:c4:1d:61:60:6b:64:f6:a2:09:fa:76:
         85:4a:f5:49:01:16:ee:ab:74:2a:65:45:78:47:e0:a0:d5:bd:
         d5:4b:07:4b:88:62:47:f8:4b:c7:c8:4e:bc:72:7f:31:7e:fa:
         ba:77:22:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:26:15 2025 by rpki-client