Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186584/53F0FEE0D66E11EAB7F33534C4F9AE02/MfUEGe8ZsP2mG2Y5DBLur27L50E.mft
File:                     MfUEGe8ZsP2mG2Y5DBLur27L50E.mft (raw, json)
Hash identifier:          bwvTuVbXaNyFAqH/sjvhn7pJaGdIT8O6T0klCDPUAH0=
Subject key identifier:   20:AC:94:A4:91:9B:81:A4:AF:FF:A8:2A:6C:C9:63:F3:E6:03:A6:D3
Authority key identifier: 31:F5:04:19:EF:19:B0:FD:A6:1B:66:39:0C:12:EE:AF:6E:CB:E7:41
Certificate issuer:       /CN=A9186584/serialNumber=31F50419EF19B0FDA61B66390C12EEAF6ECBE741
Certificate serial:       081D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfUEGe8ZsP2mG2Y5DBLur27L50E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186584/53F0FEE0D66E11EAB7F33534C4F9AE02/MfUEGe8ZsP2mG2Y5DBLur27L50E.mft
Manifest number:          0816
Signing time:             Fri 30 May 2025 21:04:06 +0000
Manifest this update:     Fri 30 May 2025 21:04:06 +0000
Manifest next update:     Fri 06 Jun 2025 21:04:06 +0000
Files and hashes:         1: MfUEGe8ZsP2mG2Y5DBLur27L50E.crl (hash: w5XcW9el144cDOMglMddqLEwQ+CGi1wkS1Nxno+gZas=)
                          2: 1F820766D66F11EAB2766134C4F9AE02.roa (hash: h0dn50b7QuXZQH9z/TlYGwvvwAVteTyA+MUQUvW3Ikc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186584/53F0FEE0D66E11EAB7F33534C4F9AE02/MfUEGe8ZsP2mG2Y5DBLur27L50E.crl
                          rsync://rpki.apnic.net/member_repository/A9186584/53F0FEE0D66E11EAB7F33534C4F9AE02/MfUEGe8ZsP2mG2Y5DBLur27L50E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfUEGe8ZsP2mG2Y5DBLur27L50E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 21:04:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2077 (0x81d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186584, serialNumber=31F50419EF19B0FDA61B66390C12EEAF6ECBE741
        Validity
            Not Before: May 30 21:04:06 2025 GMT
            Not After : Jun  6 21:04:06 2025 GMT
        Subject: CN=683a1d46-733c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9d:a2:73:e4:86:d2:3b:f2:10:74:01:81:8a:
                    c0:20:e8:8e:b5:e2:43:9e:98:f9:28:d7:a7:9e:5a:
                    28:cc:f2:4c:cc:7e:f5:7f:44:f0:89:e7:cd:3f:7d:
                    a4:fe:01:2b:cd:cb:65:ee:ec:5c:03:d9:d2:ca:48:
                    26:48:ce:4e:10:af:89:e2:3d:e4:fb:3e:21:62:2f:
                    a1:f4:6f:be:40:81:fd:a1:a2:99:5f:66:e6:88:c8:
                    b9:ab:c5:f2:62:4b:8f:ef:8a:30:75:af:77:12:3c:
                    6a:78:17:dd:ef:57:35:64:e6:d5:da:ee:f6:bf:c3:
                    2f:24:43:16:7e:a2:3e:3a:f8:74:4d:62:2f:ab:76:
                    c8:17:67:ac:c4:4e:4c:19:16:b7:05:a1:fc:fc:0b:
                    60:ce:db:b4:22:b6:b7:3a:09:ce:c9:b2:a7:63:c9:
                    f4:07:eb:d1:8e:4d:24:23:ee:bd:bb:37:af:67:51:
                    ca:8d:34:88:e4:bf:fc:02:52:32:25:55:31:d6:fd:
                    76:04:0e:74:a9:94:f3:cc:7c:a4:6f:74:6a:85:c2:
                    0f:d4:bd:77:a8:e7:7b:0e:04:f8:79:b7:3b:86:0e:
                    f8:0b:a3:3f:eb:7a:da:3f:92:6c:4e:55:e3:59:49:
                    38:58:d8:c8:88:6a:f2:02:53:7d:42:0f:90:d0:13:
                    17:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:AC:94:A4:91:9B:81:A4:AF:FF:A8:2A:6C:C9:63:F3:E6:03:A6:D3
            X509v3 Authority Key Identifier:
                keyid:31:F5:04:19:EF:19:B0:FD:A6:1B:66:39:0C:12:EE:AF:6E:CB:E7:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186584/53F0FEE0D66E11EAB7F33534C4F9AE02/MfUEGe8ZsP2mG2Y5DBLur27L50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfUEGe8ZsP2mG2Y5DBLur27L50E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186584/53F0FEE0D66E11EAB7F33534C4F9AE02/MfUEGe8ZsP2mG2Y5DBLur27L50E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:e8:59:e5:a6:97:ee:e3:56:1a:d1:d5:24:80:73:46:79:4c:
         85:b9:94:32:bb:69:17:5c:1b:62:54:f4:64:cf:94:1d:30:e7:
         cc:63:98:21:38:ee:ba:5c:9b:e7:f0:48:d3:28:1c:12:c5:d5:
         61:18:9f:18:cf:4f:da:b9:ff:b6:da:45:66:95:d4:e4:78:93:
         85:00:d6:df:d5:aa:88:29:83:5a:b9:e9:3d:c4:25:68:ad:a1:
         b6:5d:02:f6:c1:17:d3:9f:a3:63:d1:04:30:82:9f:64:6f:12:
         56:0b:1d:04:6a:5b:8e:55:7f:8e:3b:77:35:e2:eb:9d:47:58:
         8f:ae:ec:32:92:45:ab:7b:d5:18:df:dc:f5:62:ea:8c:e2:4c:
         b0:91:f4:88:d7:a7:4f:98:a9:9f:26:67:44:5e:4e:86:01:be:
         29:9b:6c:45:38:af:0c:0d:36:0f:b7:02:c8:cc:a7:45:29:80:
         39:8b:16:73:3d:32:8a:0b:af:ae:5d:59:41:7a:ef:ca:b5:4e:
         04:85:7c:0c:51:b5:db:9a:d0:18:55:d5:7d:fd:98:6d:99:6d:
         f5:ed:07:30:0c:c2:dc:e0:46:45:e4:8d:e3:95:05:98:38:52:
         18:4c:7e:16:6f:19:2c:c2:9e:9e:35:e6:47:6a:ac:0f:47:f9:
         fd:41:d3:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:37:50 2025 by rpki-client