Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.mft
File:                     Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.mft (raw, json)
Hash identifier:          9M8IopGs7dhcP05AMrQhbNg2Q5IX/9FsDZB6+/rfc4c=
Subject key identifier:   C3:F1:55:DE:A4:19:66:B8:10:1B:73:84:FA:80:DA:AA:3F:0F:7C:6F
Authority key identifier: 52:ED:FE:DF:EA:15:35:C1:3E:E8:A0:0E:55:FC:7D:51:44:6D:67:D4
Certificate issuer:       /CN=A918549C/serialNumber=52EDFEDFEA1535C13EE8A00E55FC7D51446D67D4
Certificate serial:       AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.mft
Manifest number:          A9
Signing time:             Sat 31 May 2025 05:50:09 +0000
Manifest this update:     Sat 31 May 2025 05:50:09 +0000
Manifest next update:     Sat 07 Jun 2025 05:50:09 +0000
Files and hashes:         1: Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.crl (hash: UNc1Q8AFQ2ftUv/fTe0ky7Y3B2ci1ka8zjJH6ynZInQ=)
                          2: D5C6712C2BF811F0A209EF6DC4F9AE02.roa (hash: 8rr+Ae0hpqDQA95PGvgN3goNJqA35l83x4zl3ssPb/c=)
                          3: 627CDAE66FE011EF937A9931C4F9AE02.roa (hash: sF1oxR3P0INbgPwkH87j+/9/A1n7qBr9P83Zm+8FV2A=)
                          4: 4C7FE6802C7711F084452D84C4F9AE02.roa (hash: DoSA6UaERiqEdMCY3op+YtVmTlaoSDMgolhw801td7c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.crl
                          rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 05:50:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 175 (0xaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918549C, serialNumber=52EDFEDFEA1535C13EE8A00E55FC7D51446D67D4
        Validity
            Not Before: May 31 05:50:09 2025 GMT
            Not After : Jun  7 05:50:09 2025 GMT
        Subject: CN=683a9891-26da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ef:e4:ff:ea:d5:2b:9d:16:3b:4d:11:12:98:
                    f4:d2:db:8c:df:2e:c0:33:29:31:1e:d9:cd:52:29:
                    9b:1e:1f:9f:1a:e3:a9:39:15:1e:b5:81:44:8c:b4:
                    30:bb:3d:b6:8a:0a:49:93:16:3d:96:ca:a0:d5:37:
                    7a:bc:fa:b6:a7:c3:41:f2:a2:3d:ef:b6:dd:96:06:
                    d8:c6:1a:2e:1d:da:9d:33:29:93:4f:8a:8a:a0:20:
                    a1:3e:b4:df:6f:b6:73:0e:37:79:6c:24:c3:85:e2:
                    a5:ae:83:28:dc:d4:40:a8:d0:10:cc:f2:77:f1:0f:
                    46:e8:26:6d:0a:8e:98:ad:c8:7b:ee:f8:9b:f5:be:
                    ec:87:d5:c4:47:b2:56:72:ab:3e:8f:a6:52:57:57:
                    55:46:0c:c6:42:af:01:9d:43:40:16:c1:78:16:bc:
                    46:31:83:5c:28:93:f5:5c:63:7f:f9:74:5d:d4:51:
                    68:6e:4e:89:a2:79:26:4b:d1:c4:ea:09:74:ff:cc:
                    ed:71:42:8b:c3:6a:95:98:15:02:d6:64:ca:c4:ff:
                    cc:a4:82:66:04:bf:69:c4:55:17:e0:9c:30:0e:88:
                    82:3d:b0:00:ac:8b:3a:3f:51:3b:e8:e6:25:fd:19:
                    08:9a:46:0a:47:9d:b7:97:88:b9:62:b1:4e:b5:22:
                    b7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F1:55:DE:A4:19:66:B8:10:1B:73:84:FA:80:DA:AA:3F:0F:7C:6F
            X509v3 Authority Key Identifier:
                keyid:52:ED:FE:DF:EA:15:35:C1:3E:E8:A0:0E:55:FC:7D:51:44:6D:67:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:a4:54:8c:01:d6:80:bf:39:17:db:a3:cc:ca:87:b3:aa:22:
         12:96:ec:52:0d:4e:de:50:bb:6b:43:96:52:73:f5:e6:10:a7:
         fc:0e:df:44:42:58:7a:de:ee:b6:a3:12:bb:be:36:bb:0d:1e:
         97:1b:66:5f:be:b8:f9:ae:53:31:a3:c0:a9:51:1f:56:7f:43:
         7c:74:59:1c:c9:2d:76:7b:9e:36:e1:65:04:cf:64:28:50:dd:
         05:c5:85:cd:a6:65:5f:4e:26:c5:69:c5:d3:a6:e9:01:3e:a3:
         b5:42:33:1f:a1:92:b7:4c:50:1d:6d:3c:db:f7:22:d9:65:8f:
         10:fe:6b:e9:6b:06:b7:9b:09:b4:a2:03:bb:a8:b8:6d:f2:6b:
         2b:3d:f0:06:d8:39:db:78:2a:33:91:87:56:59:ea:da:a6:9e:
         4b:6e:db:92:ff:2e:b9:de:64:3a:28:f8:d8:9c:69:64:65:69:
         75:7c:0e:d0:5e:49:88:8b:bc:47:a5:57:58:56:b2:25:64:ac:
         cd:a7:1d:80:5a:be:8e:72:d7:5b:17:61:ef:4e:88:e3:e7:b6:
         bb:42:e1:13:ea:12:8a:7d:59:04:2d:2d:d4:cd:e5:dc:0b:28:
         23:a8:3e:81:6f:2f:b1:30:93:e9:58:67:8f:fe:3d:d0:af:97:
         55:b8:66:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:23:33 2025 by rpki-client