Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft
File:                     uu94943Hy_m3MScKqxBp9eNDPLs.mft (raw, json)
Hash identifier:          o+fDHPt/uy395lccznrRUBuJmvdwI/ZXPBidwTmfkVA=
Subject key identifier:   93:37:58:68:F1:FF:91:12:40:0C:13:B9:A4:CF:2A:3E:3D:99:8F:BF
Authority key identifier: BA:EF:78:F7:8D:C7:CB:F9:B7:31:27:0A:AB:10:69:F5:E3:43:3C:BB
Certificate issuer:       /CN=A91B61A7/serialNumber=BAEF78F78DC7CBF9B731270AAB1069F5E3433CBB
Certificate serial:       A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uu94943Hy_m3MScKqxBp9eNDPLs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft
Manifest number:          9A
Signing time:             Sat 31 May 2025 05:57:50 +0000
Manifest this update:     Sat 31 May 2025 05:57:50 +0000
Manifest next update:     Sat 07 Jun 2025 05:57:50 +0000
Files and hashes:         1: uu94943Hy_m3MScKqxBp9eNDPLs.crl (hash: VLW04TdiGD/wEis4Gvy2F7LZ/Kr+RVm4uUEQ6eA+goU=)
                          2: 0FB823502CB011F0A2157E15C4F9AE02.roa (hash: aewtQCUG7+5ML687Xz8ENKgAxLHbUhEu6uDVXdbbcGc=)
                          3: 286AB0F22CB011F084E4A915C4F9AE02.roa (hash: vZWC1pyitJpkKdITTAunKDCWOD3MkKIrS8Vik2p3gr4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.crl
                          rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uu94943Hy_m3MScKqxBp9eNDPLs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 05:57:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160 (0xa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B61A7, serialNumber=BAEF78F78DC7CBF9B731270AAB1069F5E3433CBB
        Validity
            Not Before: May 31 05:57:50 2025 GMT
            Not After : Jun  7 05:57:50 2025 GMT
        Subject: CN=683a9a5e-a519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:84:5d:c2:88:29:0e:89:b3:84:ca:72:40:7d:
                    7c:61:1f:04:d5:c2:b8:ff:57:a3:0d:47:3f:31:d7:
                    69:70:d7:65:2b:09:69:3e:d0:69:f4:da:dd:90:9a:
                    f4:5a:f5:29:c8:65:6e:b1:f4:7b:b0:0f:5f:b8:12:
                    3f:b1:eb:64:e0:b2:35:67:a1:fe:90:9a:8c:b3:1f:
                    25:4e:1a:d0:bc:60:c3:a6:73:d4:0b:d8:4e:cc:87:
                    06:15:73:e1:85:b4:75:57:27:87:49:6a:69:bf:e5:
                    79:dd:14:b6:ee:55:7b:e5:5b:41:e1:3e:8b:d7:17:
                    1c:c2:2f:b3:af:41:a7:af:91:07:2e:67:f8:7a:18:
                    ad:dd:0b:48:d4:9f:db:24:71:5a:59:5e:b5:8c:7c:
                    26:eb:f0:be:61:7f:db:54:f6:bf:ad:a7:ad:32:3d:
                    3b:01:fb:88:a0:fd:72:dd:72:55:d9:31:76:58:e5:
                    1a:7b:b3:97:b8:6a:60:33:12:5a:a5:a1:27:6b:a6:
                    f8:ce:90:7d:85:53:cb:85:8d:b8:da:69:f9:94:cb:
                    8c:db:73:28:ec:93:57:89:ae:d5:e2:cf:16:60:b0:
                    82:31:b1:cd:a5:4b:dc:3b:66:9a:c2:52:c6:1d:6e:
                    8d:02:d0:7f:11:7f:51:14:54:d8:0a:91:ad:80:49:
                    c1:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:37:58:68:F1:FF:91:12:40:0C:13:B9:A4:CF:2A:3E:3D:99:8F:BF
            X509v3 Authority Key Identifier:
                keyid:BA:EF:78:F7:8D:C7:CB:F9:B7:31:27:0A:AB:10:69:F5:E3:43:3C:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uu94943Hy_m3MScKqxBp9eNDPLs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:f2:5f:b2:6a:f5:7a:81:d3:8c:8d:5c:a4:dc:08:d2:78:79:
         4f:e0:12:a9:41:ec:38:08:5d:c2:8d:81:a4:a0:31:a9:f9:9a:
         d2:95:1f:e3:2d:4b:01:65:d6:80:63:cf:30:3e:33:c0:eb:49:
         ba:5d:d4:42:11:31:0f:20:a4:fb:e0:85:c9:80:ff:51:3b:61:
         22:46:c9:ae:f8:7f:f1:bc:07:c5:ef:2b:cc:94:53:d8:25:2e:
         26:d9:be:e3:13:2d:92:f0:ab:71:f7:1d:6c:ba:fe:df:e6:0e:
         8a:53:10:4c:09:7e:d3:66:df:c6:86:02:53:7e:47:b6:64:1e:
         93:3f:b3:44:77:ce:92:93:f4:43:d6:6b:c8:30:8d:31:13:a3:
         91:ca:61:11:a6:24:a9:f7:3a:c7:60:c9:f9:10:bd:8f:65:63:
         b8:a5:18:c7:25:ca:21:24:41:0b:4a:79:74:78:90:b9:04:de:
         a6:6b:25:ff:75:b8:66:d4:41:d9:87:ec:aa:55:6d:4b:20:81:
         bc:a2:ee:78:6f:1f:46:b3:c5:02:43:42:fc:0c:4e:1c:df:bd:
         b8:68:eb:ea:e8:8c:f9:5e:49:22:9d:5f:fe:c9:4d:a8:11:80:
         30:44:1e:0a:22:df:3a:87:86:d1:2f:93:4a:2a:2b:52:38:6f:
         64:aa:67:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:06:23 2025 by rpki-client