Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft
File:                     ucp5-2hcLv8_ucy5zS2EgRaQijI.mft (raw, json)
Hash identifier:          XlrujVnqAMYPonvUI1wxJHFD3ke1UYqLa1v6ibL9S2M=
Subject key identifier:   07:53:B1:35:5A:3F:30:6D:B6:64:71:A4:34:7E:B1:E9:70:17:58:CC
Authority key identifier: B9:CA:79:FB:68:5C:2E:FF:3F:B9:CC:B9:CD:2D:84:81:16:90:8A:32
Certificate issuer:       /CN=A91DE500/serialNumber=B9CA79FB685C2EFF3FB9CCB9CD2D848116908A32
Certificate serial:       0109
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucp5-2hcLv8_ucy5zS2EgRaQijI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft
Manifest number:          0214
Signing time:             Wed 09 Jul 2025 05:47:39 +0000
Manifest this update:     Wed 09 Jul 2025 05:47:38 +0000
Manifest next update:     Wed 16 Jul 2025 05:47:38 +0000
Files and hashes:         1: ucp5-2hcLv8_ucy5zS2EgRaQijI.crl (hash: rhdzKmkUjsph9bLll4rTqcB2G7XG9dqHIZV14rOR/EI=)
                          2: 680DBCE8CACA11EEAD1A2260C4F9AE02.roa (hash: VpoPBPOkKhmfp0KuQ0D/3XZTCkKsIKJM+KUjxtq2Y8s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.crl
                          rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucp5-2hcLv8_ucy5zS2EgRaQijI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 16 Jul 2025 05:47:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 265 (0x109)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE500, serialNumber=B9CA79FB685C2EFF3FB9CCB9CD2D848116908A32
        Validity
            Not Before: Jul  9 05:47:38 2025 GMT
            Not After : Jul 16 05:47:38 2025 GMT
        Subject: CN=686e027b-78a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:1f:66:6c:70:18:83:c6:11:57:fc:63:bb:76:
                    f5:40:67:de:63:0b:70:6b:ae:21:8a:82:01:d6:56:
                    4a:da:91:cc:a4:7a:b8:b4:46:ea:49:18:e5:28:bf:
                    f3:8f:8c:8e:ac:44:88:c7:5d:de:04:56:3a:ce:b3:
                    c6:b4:05:54:0f:7b:a9:7f:11:5d:be:a6:bc:eb:00:
                    31:fa:21:2a:35:94:5d:10:c3:e6:43:28:4e:b5:ce:
                    a2:1d:84:16:56:37:34:82:89:72:40:91:29:f0:83:
                    8c:2c:ff:76:8b:54:8a:d6:3d:69:93:87:a2:20:f0:
                    8c:58:48:65:21:40:a0:f7:77:a3:3d:a8:58:7b:2a:
                    9a:4f:fb:4d:df:ca:6a:e0:ed:3e:db:08:63:f3:d8:
                    63:f1:ca:e5:a5:aa:61:90:ae:2e:75:09:79:aa:46:
                    8d:2c:88:03:1e:29:4b:c5:33:c2:0e:17:0b:b4:0f:
                    fd:1c:40:1e:db:82:5d:91:7d:bd:26:2e:cf:e1:7e:
                    18:ca:6c:21:30:8a:ad:ec:cf:7c:13:ab:d6:23:1b:
                    96:d3:e3:c8:ae:02:2e:63:ce:9d:8b:23:48:26:16:
                    f6:41:2b:16:3b:5c:56:eb:e7:be:eb:0e:1c:4d:c3:
                    f5:08:76:f3:01:bd:96:df:81:d4:b9:2b:d2:cf:c6:
                    38:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:53:B1:35:5A:3F:30:6D:B6:64:71:A4:34:7E:B1:E9:70:17:58:CC
            X509v3 Authority Key Identifier:
                keyid:B9:CA:79:FB:68:5C:2E:FF:3F:B9:CC:B9:CD:2D:84:81:16:90:8A:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucp5-2hcLv8_ucy5zS2EgRaQijI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:17:21:d7:de:93:c8:08:4c:58:cd:e1:26:46:b7:57:87:4b:
         55:fa:d1:82:89:e7:08:bd:e8:64:42:bd:91:43:c8:df:6b:79:
         e8:bf:4f:94:66:24:85:3c:14:f5:06:8a:17:4d:1f:de:70:d1:
         52:61:7e:1f:b8:34:39:d0:b8:53:59:aa:ea:4f:f4:97:1a:00:
         c4:eb:13:23:cd:9e:d6:d6:17:b2:b8:fa:77:df:07:e0:0b:34:
         62:35:b1:7c:95:8c:b0:6a:95:77:72:12:37:aa:c5:75:ea:54:
         26:20:ab:fd:43:b3:ca:b9:cb:11:2f:b7:49:e3:02:56:d0:f9:
         56:4f:40:d4:76:87:38:61:7c:b3:cc:3a:2c:fd:2b:df:0b:b2:
         d9:e8:fd:20:ab:d5:12:4b:87:85:00:a8:02:2d:07:de:dd:06:
         98:30:a6:63:3c:2d:9e:7d:25:1e:86:98:0f:43:58:f0:d9:58:
         ba:77:10:60:3a:08:09:df:25:a4:eb:ef:f7:ea:e3:62:93:bf:
         7f:bf:95:43:8b:4e:84:60:d6:61:98:cb:63:a5:d7:32:ec:af:
         2c:77:ac:84:a6:0a:fd:d8:c4:15:01:0c:a3:88:91:3b:5b:14:
         c5:f0:72:79:ec:d8:8a:c2:39:f5:a1:2e:a9:2b:e9:ee:ab:ea:
         71:4f:8c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 09:41:41 2025 by rpki-client