Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154388/38457CF68C3711EF80901C2EC4F9AE02/uyoPSTIeCAsicL0MjZuNS3k7EEQ.mft
File:                     uyoPSTIeCAsicL0MjZuNS3k7EEQ.mft (raw, json)
Hash identifier:          nVu35oZRLhf18NkG5gVNJEjQRmFyAtsfd0eLTIPvzeE=
Subject key identifier:   30:3C:98:1F:1E:F0:52:1A:04:6A:27:B6:68:4A:DF:EA:4E:79:4E:49
Authority key identifier: BB:2A:0F:49:32:1E:08:0B:22:70:BD:0C:8D:9B:8D:4B:79:3B:10:44
Certificate issuer:       /CN=A9154388/serialNumber=BB2A0F49321E080B2270BD0C8D9B8D4B793B1044
Certificate serial:       4E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uyoPSTIeCAsicL0MjZuNS3k7EEQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154388/38457CF68C3711EF80901C2EC4F9AE02/uyoPSTIeCAsicL0MjZuNS3k7EEQ.mft
Manifest number:          4E
Signing time:             Thu 13 Mar 2025 05:21:50 +0000
Manifest this update:     Thu 13 Mar 2025 05:21:50 +0000
Manifest next update:     Thu 20 Mar 2025 05:21:49 +0000
Files and hashes:         1: uyoPSTIeCAsicL0MjZuNS3k7EEQ.crl (hash: PjE0lPk+BiCfeT+qYHMPMg6FNxK3wcDFHHB0qT971Pw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154388/38457CF68C3711EF80901C2EC4F9AE02/uyoPSTIeCAsicL0MjZuNS3k7EEQ.crl
                          rsync://rpki.apnic.net/member_repository/A9154388/38457CF68C3711EF80901C2EC4F9AE02/uyoPSTIeCAsicL0MjZuNS3k7EEQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uyoPSTIeCAsicL0MjZuNS3k7EEQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 20 Mar 2025 05:21:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78 (0x4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154388
        Validity
            Not Before: Mar 13 05:21:50 2025 GMT
            Not After : Mar 20 05:21:49 2025 GMT
        Subject: CN=67d26b6e-ae99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:dd:78:72:31:d9:b8:d0:79:f2:ac:cd:04:2f:
                    30:fc:d6:a0:8a:c9:fc:f6:33:43:0b:f1:1e:61:e8:
                    f5:4e:33:fb:9d:db:dd:77:3a:99:79:00:c1:e2:73:
                    ea:e4:f9:c4:5a:91:5e:0b:c8:97:d0:40:33:00:9d:
                    b8:26:b7:8a:13:18:d0:5e:d2:bf:ba:57:40:db:90:
                    bc:5a:b1:9d:06:e9:48:93:cc:46:5b:6e:75:0f:03:
                    18:46:3f:b8:fb:4e:4a:ad:0f:d7:4e:6a:e8:30:df:
                    fa:04:62:dc:f2:cc:39:7b:b1:e1:2c:78:3a:e6:6c:
                    6a:98:ad:f0:0f:b1:99:ab:a7:e1:23:7a:ad:b0:d7:
                    34:d2:2e:62:68:22:24:51:d9:cd:1e:9a:59:14:ad:
                    44:e8:f2:ad:80:59:fa:94:17:bc:61:29:28:47:73:
                    74:40:a3:2c:38:30:d8:18:c6:97:19:b5:09:80:68:
                    14:4d:c9:d0:48:55:74:20:f4:ef:0a:a9:a9:d2:91:
                    e5:6b:27:96:31:d6:76:53:cf:61:ef:69:7e:31:cc:
                    9d:5e:16:fe:58:b8:93:71:6d:7f:74:b6:09:72:9d:
                    ac:bc:ce:c0:31:f9:e0:c3:07:21:a6:44:3e:ef:4e:
                    21:8b:04:a8:a3:1e:c5:54:1c:78:d7:ec:25:6a:dc:
                    75:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:3C:98:1F:1E:F0:52:1A:04:6A:27:B6:68:4A:DF:EA:4E:79:4E:49
            X509v3 Authority Key Identifier:
                keyid:BB:2A:0F:49:32:1E:08:0B:22:70:BD:0C:8D:9B:8D:4B:79:3B:10:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154388/38457CF68C3711EF80901C2EC4F9AE02/uyoPSTIeCAsicL0MjZuNS3k7EEQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uyoPSTIeCAsicL0MjZuNS3k7EEQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154388/38457CF68C3711EF80901C2EC4F9AE02/uyoPSTIeCAsicL0MjZuNS3k7EEQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:7c:d2:d1:83:8c:74:3f:f4:55:2a:19:27:cc:d0:60:38:22:
         5a:9a:8a:3d:01:09:9b:2c:2a:6a:b2:14:ff:d3:77:cc:78:ba:
         3e:5a:51:e2:d4:09:7d:a4:0e:ec:d3:ec:c3:c7:79:da:f0:c2:
         85:cc:55:4d:33:00:ba:2b:b1:f7:7a:04:d2:a2:98:43:98:48:
         fe:26:4d:6e:93:91:6d:5c:7b:76:41:29:52:f8:53:7c:ad:3f:
         f4:a3:9c:a0:12:04:aa:44:4b:7f:c3:53:5f:bd:2a:89:cf:4c:
         f5:60:bf:73:f6:5c:be:34:c3:72:d6:c7:5a:72:19:99:a6:4c:
         e1:88:8f:43:b0:b5:5b:f8:42:f5:99:58:7c:98:d0:17:9f:e8:
         20:3b:8a:9c:89:bd:93:4a:da:d5:b3:05:d9:7f:d6:9a:63:9c:
         4e:a0:57:af:c3:d1:4e:e3:d9:a4:b1:41:da:b1:42:fa:dd:4c:
         5f:ac:98:a5:b4:6e:16:36:24:3f:c0:8b:10:3f:9b:21:7e:ab:
         b1:1a:aa:a6:75:7c:bd:64:11:75:c8:4b:60:c5:55:45:ff:c5:
         c6:cc:f9:ac:0d:51:63:a9:0f:ea:4a:ed:ec:55:f6:1f:c8:1f:
         90:a1:79:7c:91:9b:f6:5e:ce:b6:de:44:b2:47:60:12:bb:93:
         9f:f6:cb:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 21:31:41 2025 by rpki-client