Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916523A/DE82CB484CDD11F0BFA08F80C4F9AE02/UBJV6QF6Y3iSbTaute_xnEXWV04.mft
File:                     UBJV6QF6Y3iSbTaute_xnEXWV04.mft (raw, json)
Hash identifier:          WaxNCND6lySIKTWjHuWBAzCUuB/kb9G4AMLiZw+aqtQ=
Subject key identifier:   A9:C5:20:44:75:C5:32:DA:E7:4B:EF:98:EE:A0:A8:6F:6E:7F:A0:6F
Authority key identifier: 50:12:55:E9:01:7A:63:78:92:6D:36:AE:B5:EF:F1:9C:45:D6:57:4E
Certificate issuer:       /CN=A916523A/serialNumber=501255E9017A6378926D36AEB5EFF19C45D6574E
Certificate serial:       0E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UBJV6QF6Y3iSbTaute_xnEXWV04.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916523A/DE82CB484CDD11F0BFA08F80C4F9AE02/UBJV6QF6Y3iSbTaute_xnEXWV04.mft
Manifest number:          0B
Signing time:             Tue 01 Jul 2025 08:57:51 +0000
Manifest this update:     Tue 01 Jul 2025 08:57:50 +0000
Manifest next update:     Tue 08 Jul 2025 08:57:50 +0000
Files and hashes:         1: UBJV6QF6Y3iSbTaute_xnEXWV04.crl (hash: CHbuhBVVEXvNDOl6Ev05BbmJyORK5n7OOgGjeQ8l8Rw=)
                          2: 6654FB224CDE11F092AD8884C4F9AE02.roa (hash: liQT4xahQ5o7fJUAyQXDum5T6VsmCHKLCFUQqV7AJDM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916523A/DE82CB484CDD11F0BFA08F80C4F9AE02/UBJV6QF6Y3iSbTaute_xnEXWV04.crl
                          rsync://rpki.apnic.net/member_repository/A916523A/DE82CB484CDD11F0BFA08F80C4F9AE02/UBJV6QF6Y3iSbTaute_xnEXWV04.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UBJV6QF6Y3iSbTaute_xnEXWV04.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Jul 2025 08:57:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916523A, serialNumber=501255E9017A6378926D36AEB5EFF19C45D6574E
        Validity
            Not Before: Jul  1 08:57:50 2025 GMT
            Not After : Jul  8 08:57:50 2025 GMT
        Subject: CN=6863a30e-eaa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4d:40:f0:20:bf:59:c4:91:d1:a1:e1:b5:79:
                    87:10:3f:4b:78:12:d3:a3:aa:6a:a3:f5:ef:1a:cd:
                    22:e8:80:0e:42:88:6b:ab:37:ba:7c:10:12:13:73:
                    eb:69:dc:7e:97:f5:e1:26:0d:c5:ab:4e:e6:bf:f1:
                    37:31:31:21:12:b6:2a:f8:3c:54:91:6b:28:65:88:
                    81:94:4b:e3:6d:54:9b:60:a3:71:66:e9:69:c9:48:
                    24:04:ef:9d:61:ab:95:9a:6a:ec:6f:85:ec:e2:01:
                    ac:6f:b0:12:4c:3a:2f:69:87:ea:9f:bd:23:37:ac:
                    eb:69:b0:31:37:ee:92:e3:fe:71:72:83:f5:d9:b9:
                    7d:97:9f:e6:18:97:1b:2c:f4:86:08:05:77:db:88:
                    d1:ca:94:ff:5a:94:7b:9e:fb:2a:1e:82:e0:c9:c8:
                    d5:28:02:84:98:a6:cd:5d:04:ac:d0:28:54:a6:e8:
                    8b:6f:05:94:09:70:41:c5:bc:6c:31:86:80:44:2e:
                    c5:70:76:06:be:eb:30:c9:1e:ae:07:91:22:e3:4a:
                    27:56:e1:88:4f:0c:38:70:3d:d4:da:32:d0:56:2e:
                    d0:c5:90:72:36:92:d5:27:39:59:cc:f7:5e:54:34:
                    25:ee:c9:32:a6:bb:0c:5c:d3:44:f8:0e:dd:2a:79:
                    df:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:C5:20:44:75:C5:32:DA:E7:4B:EF:98:EE:A0:A8:6F:6E:7F:A0:6F
            X509v3 Authority Key Identifier:
                keyid:50:12:55:E9:01:7A:63:78:92:6D:36:AE:B5:EF:F1:9C:45:D6:57:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916523A/DE82CB484CDD11F0BFA08F80C4F9AE02/UBJV6QF6Y3iSbTaute_xnEXWV04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UBJV6QF6Y3iSbTaute_xnEXWV04.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916523A/DE82CB484CDD11F0BFA08F80C4F9AE02/UBJV6QF6Y3iSbTaute_xnEXWV04.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:9f:c6:51:06:74:c9:be:e6:b3:a7:da:02:84:99:02:86:fe:
         36:4a:49:65:05:4e:3f:4a:5c:8a:8e:44:f9:ff:28:87:a3:0f:
         99:a1:44:1d:11:fa:5a:f0:3a:f5:4e:65:7e:80:be:63:3a:64:
         38:53:31:bb:60:5c:17:7c:0a:70:ee:88:cd:cb:cf:52:0a:49:
         80:08:ed:e7:bc:f3:cb:88:2f:ae:cb:7e:24:fd:df:a9:d4:13:
         1b:24:f9:35:f0:b0:a3:72:e9:42:10:6c:b5:88:90:1b:ba:df:
         55:2c:59:4e:3f:0d:35:72:ce:fd:6a:bc:27:05:ec:b7:ff:46:
         1a:a3:0d:6a:5c:78:16:8f:98:45:06:61:f7:10:17:fb:21:83:
         63:b6:17:9c:3d:49:5c:d5:e8:ac:b5:52:b7:92:fa:96:d2:d4:
         3f:ec:ef:d4:1f:15:f2:85:07:05:43:b5:17:6d:c6:b2:0c:e7:
         72:3f:87:0b:bb:8a:e7:32:6f:c1:f7:39:80:92:93:82:02:4d:
         4d:b2:8b:85:92:c1:02:62:be:55:97:64:9c:fb:16:27:3c:ae:
         2d:1a:47:31:02:6a:83:bf:ac:bd:cf:f1:7c:a8:7f:4c:1a:26:
         07:8b:3b:fb:27:e5:5f:1c:62:5f:aa:9e:22:70:1c:38:ca:c2:
         2b:1a:49:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 15:45:22 2025 by rpki-client