Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196977/B94B8C98B20411EB9CC7F449C4F9AE02/uAcN_Ffq4OvoruS7XJHQar0cpxo.mft
File:                     uAcN_Ffq4OvoruS7XJHQar0cpxo.mft (raw, json)
Hash identifier:          5DFQaxbh1o27+xtasoLsry0dKbvDyhrQ/Caf6z+ddb8=
Subject key identifier:   07:67:33:A8:01:80:A8:87:1B:FF:CD:BC:23:69:C8:09:F5:F6:2A:14
Authority key identifier: B8:07:0D:FC:57:EA:E0:EB:E8:AE:E4:BB:5C:91:D0:6A:BD:1C:A7:1A
Certificate issuer:       /CN=A9196977/serialNumber=B8070DFC57EAE0EBE8AEE4BB5C91D06ABD1CA71A
Certificate serial:       0605
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uAcN_Ffq4OvoruS7XJHQar0cpxo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196977/B94B8C98B20411EB9CC7F449C4F9AE02/uAcN_Ffq4OvoruS7XJHQar0cpxo.mft
Manifest number:          05FA
Signing time:             Thu 12 Jun 2025 22:33:02 +0000
Manifest this update:     Thu 12 Jun 2025 22:33:01 +0000
Manifest next update:     Thu 19 Jun 2025 22:33:01 +0000
Files and hashes:         1: uAcN_Ffq4OvoruS7XJHQar0cpxo.crl (hash: aKpSPOk9PYe2q5iZ39uwgvgd3icXI7T7PfwWL5tMWdw=)
                          2: E40449BED7A011EFB0DF210CC4F9AE02.roa (hash: ars+4kUYh+fBY0hItqO0CQ4bv/P8oF+2aWPQbb5TTz8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196977/B94B8C98B20411EB9CC7F449C4F9AE02/uAcN_Ffq4OvoruS7XJHQar0cpxo.crl
                          rsync://rpki.apnic.net/member_repository/A9196977/B94B8C98B20411EB9CC7F449C4F9AE02/uAcN_Ffq4OvoruS7XJHQar0cpxo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uAcN_Ffq4OvoruS7XJHQar0cpxo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 22:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1541 (0x605)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196977, serialNumber=B8070DFC57EAE0EBE8AEE4BB5C91D06ABD1CA71A
        Validity
            Not Before: Jun 12 22:33:01 2025 GMT
            Not After : Jun 19 22:33:01 2025 GMT
        Subject: CN=684b559d-6e67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c3:9a:30:5c:28:f5:03:77:11:d7:f8:99:2a:
                    f1:d3:a6:d8:f4:16:bb:1f:97:ab:9a:e1:89:ca:d5:
                    fa:a1:13:b7:b7:b4:8c:f1:37:9a:1a:22:68:d4:21:
                    d6:bf:ce:cc:60:ff:5d:d7:26:8a:1e:ec:4c:24:7c:
                    9b:21:b6:cb:92:db:9e:9c:51:3e:71:4d:f8:d9:06:
                    36:6d:5e:d3:9b:ce:11:5e:56:8a:33:f5:93:c3:0b:
                    2e:80:c0:0c:f2:78:8f:64:52:ca:76:6f:b6:a7:b4:
                    ec:40:bb:68:6b:07:26:98:ab:04:d4:3d:63:4c:02:
                    f9:d3:e2:c8:ce:d1:ee:f3:1b:4e:1e:b3:17:30:ea:
                    73:49:dd:40:bb:46:db:98:1f:23:71:9a:b0:eb:d8:
                    85:78:f3:58:7b:98:4f:6f:98:f1:54:67:11:9f:b7:
                    27:cd:eb:61:92:2f:d0:da:81:8e:04:a0:e0:e2:a1:
                    af:74:10:41:bb:04:ad:3d:32:05:c5:9d:69:11:2a:
                    87:95:15:83:36:b6:78:5c:ec:aa:ed:53:6b:75:5d:
                    50:51:20:37:d7:4d:28:43:df:66:ea:a3:99:b5:db:
                    6b:3c:89:56:7d:03:41:a3:e9:30:94:8a:d4:dc:38:
                    a0:5d:a2:a4:8d:c3:9b:f8:75:80:ef:8a:d5:87:b6:
                    4d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:67:33:A8:01:80:A8:87:1B:FF:CD:BC:23:69:C8:09:F5:F6:2A:14
            X509v3 Authority Key Identifier:
                keyid:B8:07:0D:FC:57:EA:E0:EB:E8:AE:E4:BB:5C:91:D0:6A:BD:1C:A7:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196977/B94B8C98B20411EB9CC7F449C4F9AE02/uAcN_Ffq4OvoruS7XJHQar0cpxo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uAcN_Ffq4OvoruS7XJHQar0cpxo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196977/B94B8C98B20411EB9CC7F449C4F9AE02/uAcN_Ffq4OvoruS7XJHQar0cpxo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:f2:5c:2a:20:e8:90:10:82:b8:c5:2a:5b:64:77:76:e5:44:
         3e:75:7d:be:8c:31:9b:d4:3b:b7:df:60:4a:a4:67:40:54:32:
         b0:95:3b:8e:9f:18:86:0d:ef:71:4f:84:c4:5a:97:0d:cc:bd:
         83:f6:78:65:cb:62:1f:cf:57:33:a2:3b:a7:19:46:2c:ff:cf:
         72:16:cd:37:2d:80:63:1e:75:1d:bb:b8:02:66:d3:c8:b7:74:
         38:b8:d6:a9:52:e8:17:e2:9d:5a:a9:86:5d:7e:3e:ce:09:b3:
         35:bd:e8:7e:1d:52:7b:b2:54:b3:ef:17:91:54:03:b6:59:c7:
         b4:2e:05:74:c4:d1:79:a6:1e:27:6c:37:8d:4f:a0:a0:9e:1e:
         14:6f:e4:b4:ba:b9:e8:63:86:5e:7f:eb:2c:4a:27:09:8b:fe:
         6f:f1:50:5c:68:c2:9d:db:af:f6:c4:07:cb:d1:b3:be:e8:5e:
         e3:8f:09:60:5c:de:34:0a:b2:1c:cc:c4:64:c5:9e:49:40:01:
         86:63:84:6e:ab:3d:4f:3c:06:cb:35:70:ef:d0:43:21:df:eb:
         ae:a1:a4:9f:e4:16:57:e9:da:d5:c7:b2:9e:c7:14:61:a4:95:
         b3:34:b9:37:6e:2d:52:53:89:96:12:ba:40:3d:e4:a3:b2:81:
         15:f3:5d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:17:48 2025 by rpki-client