Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B05F/33512040AB3B11E7BAAB0D6BC4F9AE02/uIPha7zTcVtWFzExa6Gw70BTwS4.mft
File:                     uIPha7zTcVtWFzExa6Gw70BTwS4.mft (raw, json)
Hash identifier:          mUE0af1rrukr/5XroBJPvd+GUC54wWTJBmVfan2ftog=
Subject key identifier:   47:E4:8D:19:6D:34:E2:9B:64:DC:59:78:26:47:C1:22:DB:52:29:2D
Authority key identifier: B8:83:E1:6B:BC:D3:71:5B:56:17:31:31:6B:A1:B0:EF:40:53:C1:2E
Certificate issuer:       /CN=A914B05F/serialNumber=B883E16BBCD3715B561731316BA1B0EF4053C12E
Certificate serial:       184C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIPha7zTcVtWFzExa6Gw70BTwS4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B05F/33512040AB3B11E7BAAB0D6BC4F9AE02/uIPha7zTcVtWFzExa6Gw70BTwS4.mft
Manifest number:          1841
Signing time:             Fri 30 May 2025 16:41:55 +0000
Manifest this update:     Fri 30 May 2025 16:41:54 +0000
Manifest next update:     Fri 06 Jun 2025 16:41:54 +0000
Files and hashes:         1: uIPha7zTcVtWFzExa6Gw70BTwS4.crl (hash: pXnR+d/0dyNye+WPpAdjsMe0NKknh6MS3H8mLRMtUo4=)
                          2: 3482BB06AB3E11E7B15D1874C4F9AE02.roa (hash: f/iGCTTWKgyC6GDNoG48hLtnpOGko6TY6XeoD7uohtY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B05F/33512040AB3B11E7BAAB0D6BC4F9AE02/uIPha7zTcVtWFzExa6Gw70BTwS4.crl
                          rsync://rpki.apnic.net/member_repository/A914B05F/33512040AB3B11E7BAAB0D6BC4F9AE02/uIPha7zTcVtWFzExa6Gw70BTwS4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIPha7zTcVtWFzExa6Gw70BTwS4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 16:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6220 (0x184c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B05F, serialNumber=B883E16BBCD3715B561731316BA1B0EF4053C12E
        Validity
            Not Before: May 30 16:41:54 2025 GMT
            Not After : Jun  6 16:41:54 2025 GMT
        Subject: CN=6839dfd2-fb34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4d:6b:70:0f:71:21:58:4b:21:bc:b2:db:8c:
                    60:c1:71:89:45:55:91:a0:aa:49:8c:75:0b:84:c1:
                    0b:01:33:8a:87:a8:b4:0f:ba:8b:a3:f4:ab:ad:12:
                    97:63:b6:0a:cc:96:71:6c:36:85:1e:ae:20:b9:6d:
                    03:78:13:83:6b:10:37:c8:70:24:e7:0c:87:3d:b7:
                    a0:f2:fd:98:e1:37:20:3c:e7:9a:13:dd:30:43:28:
                    54:21:37:fb:da:2c:9e:4a:bc:48:67:c9:5d:35:0d:
                    10:60:cc:2e:eb:cf:c0:30:b3:e4:b0:21:4a:ab:28:
                    64:b4:a3:54:d5:a3:79:eb:d9:05:14:28:b1:f1:16:
                    f2:d8:1f:7c:0f:3a:bf:bb:a0:5f:e2:0a:ff:0a:ef:
                    39:61:ad:45:9c:41:b5:4c:32:c4:a5:ad:cd:2a:43:
                    45:ec:0d:a1:c7:4c:fa:36:e4:fd:48:09:7e:c5:6f:
                    52:8b:ab:77:88:61:1e:57:78:f1:91:6f:81:1c:9f:
                    d0:f2:d0:fc:18:0a:9c:c1:25:6c:9b:0c:c9:0b:ef:
                    85:aa:56:ea:5d:eb:7d:5f:bc:76:b8:60:ce:7a:0a:
                    ad:89:4e:09:60:80:fd:20:b3:b0:de:f8:00:7f:90:
                    40:a4:e7:79:2f:b8:17:33:79:8a:f9:86:36:f1:8b:
                    b3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:E4:8D:19:6D:34:E2:9B:64:DC:59:78:26:47:C1:22:DB:52:29:2D
            X509v3 Authority Key Identifier:
                keyid:B8:83:E1:6B:BC:D3:71:5B:56:17:31:31:6B:A1:B0:EF:40:53:C1:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B05F/33512040AB3B11E7BAAB0D6BC4F9AE02/uIPha7zTcVtWFzExa6Gw70BTwS4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIPha7zTcVtWFzExa6Gw70BTwS4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B05F/33512040AB3B11E7BAAB0D6BC4F9AE02/uIPha7zTcVtWFzExa6Gw70BTwS4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:b3:5f:be:4a:bc:c4:55:de:4e:89:65:8b:73:11:6e:f9:0f:
         a9:78:fe:99:09:50:a4:33:91:c9:7f:6f:fa:b9:f6:20:75:34:
         83:44:df:90:09:46:21:7a:38:5e:ce:8e:8f:c8:9e:90:dd:93:
         7a:2c:08:0e:75:20:32:e5:08:ca:0e:b2:a4:54:db:e8:4c:8b:
         7c:b1:95:38:eb:ec:b3:aa:02:49:2d:1f:d5:20:31:21:8e:3c:
         7b:af:d0:15:94:3c:49:bc:41:04:58:57:fd:4d:c6:08:b8:58:
         e7:13:62:f1:37:3a:79:21:56:71:a3:5b:c4:40:fc:9e:22:70:
         8e:73:e7:66:d5:7c:3e:e6:62:3b:7c:d1:9f:8b:3c:4d:32:a6:
         f6:87:3a:b1:24:28:42:19:65:26:33:dd:a5:da:d9:ff:b2:f2:
         28:28:bc:b7:9b:d6:be:99:fa:9d:80:d1:15:f4:17:bc:a3:32:
         4e:fc:d2:3a:d4:c2:8f:9c:05:6e:60:11:3c:6b:40:6a:41:ab:
         0e:01:8d:bf:16:93:e3:7f:63:9c:e4:4e:9d:c0:e0:52:a5:ad:
         42:36:0c:af:1d:62:f9:fb:b3:1c:3f:72:5b:0a:4e:09:2f:69:
         26:3d:1b:58:03:f6:d4:ed:cc:47:bd:1b:fd:05:5b:77:fe:74:
         1e:3b:59:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 16:49:12 2025 by rpki-client