Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/Ua66I_t0WlU6XkmW3xyBc0c_F5g.mft
File:                     Ua66I_t0WlU6XkmW3xyBc0c_F5g.mft (raw, json)
Hash identifier:          ykUk4ZSJyKbOGBokVSpOHO4BJDv+0E5M9+b1VcgwMHE=
Subject key identifier:   AF:D6:91:E5:31:73:6E:98:DE:8C:E1:EA:F3:B2:63:9E:0E:17:47:50
Authority key identifier: 51:AE:BA:23:FB:74:5A:55:3A:5E:49:96:DF:1C:81:73:47:3F:17:98
Certificate issuer:       /CN=A9183B33/serialNumber=51AEBA23FB745A553A5E4996DF1C8173473F1798
Certificate serial:       064E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ua66I_t0WlU6XkmW3xyBc0c_F5g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/Ua66I_t0WlU6XkmW3xyBc0c_F5g.mft
Manifest number:          0645
Signing time:             Fri 30 May 2025 22:51:30 +0000
Manifest this update:     Fri 30 May 2025 22:51:30 +0000
Manifest next update:     Fri 06 Jun 2025 22:51:30 +0000
Files and hashes:         1: Ua66I_t0WlU6XkmW3xyBc0c_F5g.crl (hash: leVxvepnvTAf+D7TvOcTKnCN+QT8TqokwC99rYD3kic=)
                          2: 59018DEE340611ED9C72786AC4F9AE02.roa (hash: rP6Pu7EfL4ZTfd4hkNZXRMND1x04kCFhfmQKKfFcDnY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/Ua66I_t0WlU6XkmW3xyBc0c_F5g.crl
                          rsync://rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/Ua66I_t0WlU6XkmW3xyBc0c_F5g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ua66I_t0WlU6XkmW3xyBc0c_F5g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 22:51:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1614 (0x64e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183B33, serialNumber=51AEBA23FB745A553A5E4996DF1C8173473F1798
        Validity
            Not Before: May 30 22:51:30 2025 GMT
            Not After : Jun  6 22:51:30 2025 GMT
        Subject: CN=683a3672-f284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d1:45:32:c3:a2:e3:fe:84:c9:fc:f0:f7:c5:
                    b0:7d:f2:66:07:e8:87:46:1d:d0:b9:fc:cd:66:34:
                    38:a0:a2:e2:e1:d5:3f:9b:61:01:55:15:74:ea:c5:
                    ba:47:8a:09:e3:12:db:9d:a3:52:48:7e:6f:51:d8:
                    62:fc:e7:e3:39:14:08:46:34:8a:8b:48:a7:a1:66:
                    cf:b3:02:12:ca:31:0d:46:7e:fa:34:f1:ae:7d:6e:
                    d1:d7:89:91:c8:7f:d2:6d:ee:9b:81:ef:f4:9a:cf:
                    ce:b4:34:96:07:28:42:a0:11:ca:22:c8:f9:9f:b0:
                    4f:24:b3:3b:1d:da:3a:95:4b:e5:82:34:d8:a7:94:
                    e2:01:cb:a9:21:31:e2:30:ca:bc:56:05:0a:b5:8f:
                    03:29:e4:3e:7e:00:77:18:64:d4:23:bd:3f:54:db:
                    3e:92:81:60:7c:1d:2a:6f:96:3b:e6:4f:75:a8:52:
                    51:b1:7a:da:b6:ac:47:81:ba:41:45:28:52:85:9b:
                    90:92:ab:e7:ef:f7:a3:29:c6:da:c2:bb:a7:a5:d5:
                    19:7e:fe:84:fd:1f:b0:c3:37:78:ab:e1:79:7f:38:
                    6c:87:50:d5:35:fb:9a:44:64:01:5d:bc:b7:59:97:
                    1e:f4:ed:40:ca:36:0f:2c:ae:23:f4:6b:9b:2b:06:
                    32:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:D6:91:E5:31:73:6E:98:DE:8C:E1:EA:F3:B2:63:9E:0E:17:47:50
            X509v3 Authority Key Identifier:
                keyid:51:AE:BA:23:FB:74:5A:55:3A:5E:49:96:DF:1C:81:73:47:3F:17:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/Ua66I_t0WlU6XkmW3xyBc0c_F5g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ua66I_t0WlU6XkmW3xyBc0c_F5g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/Ua66I_t0WlU6XkmW3xyBc0c_F5g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:ae:e5:2c:42:b9:cd:4f:3d:ae:f2:21:3c:1f:11:91:06:fa:
         2d:72:ba:fe:a8:dd:ee:18:d8:65:8d:f6:46:48:c0:f6:78:2b:
         fc:b4:c0:d8:6a:52:c8:96:0c:86:db:8d:e9:f4:e6:f1:1a:43:
         22:68:54:09:6c:d6:94:ec:0f:83:40:91:48:1e:4a:85:5a:7a:
         12:a1:93:82:59:31:e9:74:81:d7:f9:0e:60:85:41:96:6b:c1:
         07:b6:98:8f:1d:0c:f1:bd:b0:04:36:73:ce:4f:f2:bc:89:60:
         43:40:2c:33:e0:f3:cf:4b:f4:b9:58:45:69:cc:09:f0:e9:1c:
         2f:42:21:dd:0c:be:98:fb:28:3a:51:56:10:24:d0:f8:ee:1f:
         5f:c8:8c:20:e2:89:0b:2c:e4:63:53:55:3f:c0:7b:d1:25:af:
         d7:1c:3b:19:e5:08:1f:5a:ea:79:3f:06:d6:86:ac:17:6d:a6:
         3e:3a:37:1b:6a:99:65:71:79:af:f3:cf:b4:eb:95:f2:2e:94:
         25:17:2f:92:99:d0:ae:c4:f6:98:f2:81:46:bb:6a:dc:5b:cd:
         a1:25:62:bf:f1:75:dd:44:8a:0a:d3:6e:0e:cb:7f:19:39:33:
         9e:83:73:7f:69:00:36:5a:00:fa:5e:7d:ab:4a:88:84:04:ba:
         b2:ab:c6:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:37:41 2025 by rpki-client