Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.mft
File:                     UkWN1qz9QNreWs3IL01ZLaUp58c.mft (raw, json)
Hash identifier:          F6/8pK2WoOetFJjZMUBFzk/auWS+L90VM4sHGLUEA74=
Subject key identifier:   C2:FA:B2:40:C3:82:C2:72:22:0F:B6:C4:69:33:44:FC:71:9C:33:4C
Authority key identifier: 52:45:8D:D6:AC:FD:40:DA:DE:5A:CD:C8:2F:4D:59:2D:A5:29:E7:C7
Certificate issuer:       /CN=A91DDDA7/serialNumber=52458DD6ACFD40DADE5ACDC82F4D592DA529E7C7
Certificate serial:       090F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UkWN1qz9QNreWs3IL01ZLaUp58c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.mft
Manifest number:          090F
Signing time:             Fri 06 Jun 2025 20:22:30 +0000
Manifest this update:     Fri 06 Jun 2025 20:22:29 +0000
Manifest next update:     Fri 13 Jun 2025 20:22:29 +0000
Files and hashes:         1: UkWN1qz9QNreWs3IL01ZLaUp58c.crl (hash: sat6pmtBAM4/S7pkT5GC3mZo8+B969J9JnJX2GJXmmQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.crl
                          rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UkWN1qz9QNreWs3IL01ZLaUp58c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Jun 2025 20:22:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2319 (0x90f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DDDA7, serialNumber=52458DD6ACFD40DADE5ACDC82F4D592DA529E7C7
        Validity
            Not Before: Jun  6 20:22:29 2025 GMT
            Not After : Jun 13 20:22:29 2025 GMT
        Subject: CN=68434e05-8918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:22:25:f1:8f:e6:eb:3d:64:af:86:d5:7d:0b:
                    8c:0b:1a:4b:a9:99:08:af:b0:46:94:8e:f4:75:e1:
                    17:50:73:36:b2:a4:b4:92:3b:7a:b1:11:8c:00:a2:
                    1c:18:bf:93:3a:8d:78:e5:ab:b9:c2:9f:16:c2:33:
                    08:9b:6d:d1:8b:e7:36:67:98:3e:10:a7:c4:1f:80:
                    d6:09:df:43:1b:38:73:66:3c:3f:2d:f9:72:dd:9b:
                    f0:21:e7:55:0f:1c:cb:60:81:f3:ad:41:ef:3b:fe:
                    c4:1a:c2:b0:04:54:aa:5d:09:bb:e9:74:2c:e1:d4:
                    96:ad:75:e7:a9:dd:15:0f:1a:3f:0d:98:21:f2:11:
                    0a:90:9c:1e:9f:51:ad:ac:8d:15:47:e9:a3:67:14:
                    a6:b2:20:50:f2:cc:ee:aa:13:66:f5:37:9d:02:81:
                    81:f5:56:c2:30:b4:3c:cf:69:13:26:30:c3:05:f5:
                    ed:fd:9f:bd:10:91:6d:1f:a6:34:35:2f:66:07:f7:
                    ab:f3:b1:a0:46:20:56:98:78:0f:36:c3:e3:3d:27:
                    5b:8a:db:dd:7d:4c:f4:bc:76:3f:02:5e:77:b1:c5:
                    30:04:5b:e1:32:e1:82:ab:12:d6:48:13:11:50:93:
                    34:b4:77:c5:fe:51:c1:56:43:c3:eb:fe:1a:a8:9b:
                    f5:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:FA:B2:40:C3:82:C2:72:22:0F:B6:C4:69:33:44:FC:71:9C:33:4C
            X509v3 Authority Key Identifier:
                keyid:52:45:8D:D6:AC:FD:40:DA:DE:5A:CD:C8:2F:4D:59:2D:A5:29:E7:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UkWN1qz9QNreWs3IL01ZLaUp58c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:05:ae:18:0b:24:8a:e2:c6:4e:65:54:1c:69:15:6b:cd:42:
         c1:81:23:a3:9b:26:dd:be:5a:1c:81:38:52:65:3c:e8:56:a7:
         74:2e:e6:d3:c7:c7:bc:04:d7:fa:b4:9c:c8:57:91:f7:58:38:
         6a:c8:2a:93:a8:e9:fc:78:5f:6c:fa:ec:9f:7b:5e:f3:93:88:
         0a:f4:4d:57:ef:29:61:f7:00:b6:e5:8c:17:f3:53:4b:32:99:
         05:83:d1:76:2b:46:30:fc:58:97:9a:34:68:6a:2f:db:c6:9e:
         4a:b9:a6:95:e3:7a:aa:46:40:c6:be:5a:ee:a8:40:02:92:3e:
         f4:44:fa:ca:6c:3d:c6:de:07:2a:eb:be:76:e1:32:52:df:f0:
         cd:94:fe:e9:0d:76:58:0f:a5:49:01:bb:ad:04:e7:da:77:b5:
         93:1b:9a:89:72:dc:af:99:57:3a:f4:b6:ad:a5:39:b6:ef:9c:
         02:bd:54:68:4f:fb:b5:16:7b:24:fd:12:4c:2c:a4:4b:88:b5:
         bb:5b:70:b6:28:0a:9b:e2:63:9c:ed:68:13:99:bb:db:f0:7f:
         22:72:c9:f5:56:10:a6:e0:f9:78:61:72:5b:40:70:85:42:22:
         ba:a0:82:a2:f1:fc:0a:75:1b:2a:18:53:71:e8:83:7c:be:fb:
         62:34:b7:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:50:58 2025 by rpki-client