Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196977/B94B8C98B20411EB9CC7F449C4F9AE02/uAcN_Ffq4OvoruS7XJHQar0cpxo.mft
File:                     uAcN_Ffq4OvoruS7XJHQar0cpxo.mft (raw, json)
Hash identifier:          e/UIE5z6TzHq3ewPRJFyshBmwD9Vgqezu6gd+d3+hIw=
Subject key identifier:   21:C9:A0:CE:7A:72:2A:78:04:93:2A:5E:FB:B8:A5:AF:FA:37:DA:D9
Authority key identifier: B8:07:0D:FC:57:EA:E0:EB:E8:AE:E4:BB:5C:91:D0:6A:BD:1C:A7:1A
Certificate issuer:       /CN=A9196977/serialNumber=B8070DFC57EAE0EBE8AEE4BB5C91D06ABD1CA71A
Certificate serial:       0603
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uAcN_Ffq4OvoruS7XJHQar0cpxo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196977/B94B8C98B20411EB9CC7F449C4F9AE02/uAcN_Ffq4OvoruS7XJHQar0cpxo.mft
Manifest number:          05F8
Signing time:             Sun 08 Jun 2025 22:33:30 +0000
Manifest this update:     Sun 08 Jun 2025 22:33:29 +0000
Manifest next update:     Sun 15 Jun 2025 22:33:29 +0000
Files and hashes:         1: uAcN_Ffq4OvoruS7XJHQar0cpxo.crl (hash: cjC/j+P2YbGpo70vbnk//hqn6rOwQqlKgMnI5Fe6giU=)
                          2: E40449BED7A011EFB0DF210CC4F9AE02.roa (hash: ars+4kUYh+fBY0hItqO0CQ4bv/P8oF+2aWPQbb5TTz8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196977/B94B8C98B20411EB9CC7F449C4F9AE02/uAcN_Ffq4OvoruS7XJHQar0cpxo.crl
                          rsync://rpki.apnic.net/member_repository/A9196977/B94B8C98B20411EB9CC7F449C4F9AE02/uAcN_Ffq4OvoruS7XJHQar0cpxo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uAcN_Ffq4OvoruS7XJHQar0cpxo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Jun 2025 22:33:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1539 (0x603)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196977, serialNumber=B8070DFC57EAE0EBE8AEE4BB5C91D06ABD1CA71A
        Validity
            Not Before: Jun  8 22:33:29 2025 GMT
            Not After : Jun 15 22:33:29 2025 GMT
        Subject: CN=68460fb9-1654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:88:f6:3d:ac:3a:78:8c:20:25:c9:40:08:8b:
                    3e:d2:c7:6d:c9:b2:f5:22:7c:d4:e9:ab:bf:5b:0d:
                    49:0c:07:83:66:ce:f7:02:ee:97:3d:4a:a9:66:e1:
                    5d:7d:91:a0:21:b3:d8:f7:1b:19:b9:74:ac:39:9e:
                    ba:a9:ce:27:97:95:03:e5:49:9b:3a:6e:39:d8:27:
                    46:d6:fd:f5:d5:44:e5:b1:bf:33:69:00:01:dc:08:
                    2c:f0:dd:c4:35:4c:6e:ae:01:a8:5c:27:bc:55:af:
                    fa:93:00:21:ee:72:7e:85:77:45:ad:c7:57:39:54:
                    a7:d2:ab:34:9c:00:79:40:e0:d8:92:03:9c:ae:32:
                    7a:2d:f7:f8:22:dc:74:4b:38:34:f6:ea:bd:fc:00:
                    56:20:24:23:bd:45:b7:1e:60:c7:3a:30:b0:90:68:
                    60:a2:3d:cf:4d:fb:87:46:37:a0:58:53:ea:8b:29:
                    44:de:1b:09:d5:03:88:3b:02:fb:98:59:8c:18:f7:
                    fc:c6:02:de:46:5e:b7:81:ac:c9:57:e1:ef:3b:d1:
                    75:3b:22:48:29:06:88:27:b5:f7:44:06:6e:85:bc:
                    c2:db:c4:ba:49:03:d8:3e:10:c0:eb:48:54:2f:0c:
                    3f:5c:19:ed:91:0b:dd:12:46:3f:d4:65:ae:2d:c5:
                    81:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:C9:A0:CE:7A:72:2A:78:04:93:2A:5E:FB:B8:A5:AF:FA:37:DA:D9
            X509v3 Authority Key Identifier:
                keyid:B8:07:0D:FC:57:EA:E0:EB:E8:AE:E4:BB:5C:91:D0:6A:BD:1C:A7:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196977/B94B8C98B20411EB9CC7F449C4F9AE02/uAcN_Ffq4OvoruS7XJHQar0cpxo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uAcN_Ffq4OvoruS7XJHQar0cpxo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196977/B94B8C98B20411EB9CC7F449C4F9AE02/uAcN_Ffq4OvoruS7XJHQar0cpxo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:2f:ba:02:c4:19:18:22:74:16:32:dc:8a:db:ae:b7:89:b7:
         ad:2c:40:ec:6c:50:a9:3a:6a:3f:c3:aa:50:87:56:60:e2:09:
         79:83:a6:36:ed:ff:ef:a8:7f:aa:8b:c3:44:88:75:28:68:ff:
         33:fc:6a:33:fc:c2:a1:34:ed:76:6b:1f:1d:d3:5a:c6:39:82:
         76:fd:e2:66:16:98:d3:70:3f:12:5e:4b:78:c3:80:0a:68:00:
         27:c5:76:c2:b6:66:92:79:8f:79:2d:47:be:90:13:44:8a:3d:
         13:89:11:67:d8:fc:ae:a9:e8:15:20:77:a7:9f:76:f1:bf:df:
         41:96:10:cd:dc:76:52:1e:28:3a:ae:cb:ea:ca:d6:9f:25:b5:
         b1:46:9e:d9:63:7e:5a:a5:cf:9d:f5:91:96:ef:17:fb:df:ce:
         92:7a:94:f3:46:cc:e2:f4:e1:ed:08:88:48:d7:5a:dc:7a:42:
         c4:50:42:6d:07:0c:eb:ea:06:18:8b:ab:5a:6a:7a:94:47:d1:
         92:00:38:36:6a:30:94:f5:e6:48:9f:90:51:83:50:ce:3d:77:
         ca:22:bc:44:89:1b:84:59:29:09:47:97:ba:c8:4e:b1:42:35:
         1c:4c:fc:67:60:b0:4f:2f:e5:86:f8:63:1e:5d:2b:91:f6:55:
         86:71:28:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:40:48 2025 by rpki-client