Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft
File:                     ucp5-2hcLv8_ucy5zS2EgRaQijI.mft (raw, json)
Hash identifier:          aEmcyfuzgE8MWSjlCsoEZ1rGltP6P1kxbXbRknbuwXA=
Subject key identifier:   15:86:66:DF:FF:A1:B6:0C:4D:4B:12:EC:36:48:8B:E4:9B:43:79:BD
Authority key identifier: B9:CA:79:FB:68:5C:2E:FF:3F:B9:CC:B9:CD:2D:84:81:16:90:8A:32
Certificate issuer:       /CN=A91DE500/serialNumber=B9CA79FB685C2EFF3FB9CCB9CD2D848116908A32
Certificate serial:       010E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucp5-2hcLv8_ucy5zS2EgRaQijI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft
Manifest number:          021E
Signing time:             Sat 19 Jul 2025 05:10:24 +0000
Manifest this update:     Sat 19 Jul 2025 05:10:23 +0000
Manifest next update:     Sat 26 Jul 2025 05:10:23 +0000
Files and hashes:         1: ucp5-2hcLv8_ucy5zS2EgRaQijI.crl (hash: sfQee8i8sVw2TSuZQA7nillt1T7kK2rYGX+v8oEL6wE=)
                          2: 680DBCE8CACA11EEAD1A2260C4F9AE02.roa (hash: VpoPBPOkKhmfp0KuQ0D/3XZTCkKsIKJM+KUjxtq2Y8s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.crl
                          rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucp5-2hcLv8_ucy5zS2EgRaQijI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 05:10:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 270 (0x10e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE500, serialNumber=B9CA79FB685C2EFF3FB9CCB9CD2D848116908A32
        Validity
            Not Before: Jul 19 05:10:23 2025 GMT
            Not After : Jul 26 05:10:23 2025 GMT
        Subject: CN=687b28bf-06c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d9:a3:69:73:91:8f:22:17:e1:1f:a5:d6:ce:
                    f1:54:b6:e4:61:eb:b7:bf:93:c6:58:6a:0d:03:3b:
                    1f:d7:02:62:92:d0:26:2e:65:ee:ce:e3:a3:49:00:
                    90:c7:b4:8a:c5:0d:80:f7:04:41:14:19:c0:bc:41:
                    30:5d:3f:ba:e4:6b:db:45:72:39:63:79:a7:57:87:
                    1a:c1:b8:40:db:38:de:67:16:d8:31:ab:03:a9:3f:
                    8f:b6:48:d6:22:38:1b:33:aa:f9:d8:09:85:c9:e9:
                    d7:10:4b:9e:94:59:08:75:98:d4:e8:94:09:96:42:
                    16:8e:d2:8f:b9:07:5a:a1:08:33:91:08:3d:2b:51:
                    f5:57:63:f8:bc:50:03:e7:ec:94:36:70:8c:16:74:
                    5c:f9:1e:1d:1a:fa:fe:bd:02:30:95:76:ee:8f:40:
                    de:00:25:c2:d0:a2:b2:af:e2:bf:a3:f6:1f:a5:b4:
                    f7:89:43:5e:64:91:92:db:38:33:e1:f2:d2:80:d2:
                    5f:69:3f:07:cc:fe:ac:94:36:a3:ba:e6:fe:25:35:
                    12:0c:35:ae:31:e1:a3:2a:d0:12:d3:97:fd:6f:4b:
                    b2:1e:cf:c7:32:e2:a1:c1:93:06:c8:de:57:2e:ea:
                    d4:9a:0c:f4:91:de:36:31:89:c5:f6:d6:dd:92:2b:
                    aa:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:86:66:DF:FF:A1:B6:0C:4D:4B:12:EC:36:48:8B:E4:9B:43:79:BD
            X509v3 Authority Key Identifier:
                keyid:B9:CA:79:FB:68:5C:2E:FF:3F:B9:CC:B9:CD:2D:84:81:16:90:8A:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucp5-2hcLv8_ucy5zS2EgRaQijI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:41:89:04:b5:e5:44:51:4b:1b:71:d1:83:48:13:e7:a7:44:
         e0:bc:7a:f9:19:84:df:90:81:e6:c0:ca:95:53:b5:74:c7:f8:
         1b:88:a5:15:c9:ce:a0:fe:33:ea:18:b5:7e:d0:2c:bc:b9:d4:
         67:e6:96:8b:f3:1e:aa:ee:6f:01:03:36:bc:0a:d9:21:02:77:
         d3:e9:7f:56:b0:c8:b4:59:d9:e4:1e:16:10:27:b7:fa:8e:cd:
         a3:e8:d9:80:3c:34:f8:97:85:61:08:72:f8:52:6a:91:5a:34:
         b4:14:a5:76:c8:e0:d0:aa:9b:60:e8:e1:43:75:f2:a8:e6:97:
         bd:de:bf:a8:29:37:fe:9d:6b:36:7c:6a:03:a1:98:31:b1:ce:
         ac:e1:1d:ab:03:70:85:75:11:2b:88:ae:43:ed:33:bd:74:07:
         9b:cf:09:3f:94:4d:e3:da:3e:f5:61:19:7b:cf:68:78:8d:2a:
         b4:f5:c6:89:1b:2a:53:58:40:3c:29:48:b0:c5:e6:9a:bd:61:
         80:07:36:7d:c6:6e:e9:76:ff:3a:cd:47:22:72:08:30:1f:88:
         cf:02:85:bc:8c:32:df:b7:ce:bc:92:d6:bb:f2:78:95:9f:3c:
         a1:fe:55:72:6a:11:46:14:73:85:ed:fb:4c:70:3a:07:47:33:
         9e:f1:5a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 18:51:18 2025 by rpki-client