Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.mft
File:                     UgupTND7nnwUDfvAzFi5PPVMIvM.mft (raw, json)
Hash identifier:          6dtNGUxgi6RgV7cHkOtdu2I9MLx9jWpo+u5dqOHDqOo=
Subject key identifier:   2C:77:28:AB:1B:9D:2A:35:22:A0:B0:C6:5C:74:0A:81:92:70:57:1F
Authority key identifier: 52:0B:A9:4C:D0:FB:9E:7C:14:0D:FB:C0:CC:58:B9:3C:F5:4C:22:F3
Certificate issuer:       /CN=A91F8981/serialNumber=520BA94CD0FB9E7C140DFBC0CC58B93CF54C22F3
Certificate serial:       70
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UgupTND7nnwUDfvAzFi5PPVMIvM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.mft
Manifest number:          6F
Signing time:             Wed 09 Apr 2025 05:42:05 +0000
Manifest this update:     Wed 09 Apr 2025 05:42:05 +0000
Manifest next update:     Wed 16 Apr 2025 05:42:05 +0000
Files and hashes:         1: UgupTND7nnwUDfvAzFi5PPVMIvM.crl (hash: Y5lsAwFQ9STZYuwIO4m6qrIDmCd/rL6FtduSxbR95bs=)
                          2: D79D112E6C7F11EF92105459C4F9AE02.roa (hash: HfxBV0ZJ9ixuR1eesZIIiZUZrrfXBYTU4Z7Ry5c0lbg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.crl
                          rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UgupTND7nnwUDfvAzFi5PPVMIvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 16 Apr 2025 05:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112 (0x70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8981
        Validity
            Not Before: Apr  9 05:42:05 2025 GMT
            Not After : Apr 16 05:42:05 2025 GMT
        Subject: CN=67f608ad-5cad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6d:b3:a5:55:d8:b0:cc:83:4e:19:95:aa:61:
                    c6:48:2b:db:c5:a1:34:a3:4c:e1:af:a7:ab:43:c0:
                    da:27:31:22:09:3c:2e:c5:63:c8:2e:2f:23:48:33:
                    50:63:12:07:1c:0b:4a:dd:ca:d4:cc:bd:9a:9f:11:
                    fb:ad:6c:36:43:ef:17:5b:13:eb:1a:a8:c1:c3:2f:
                    24:4f:b0:37:39:6b:7f:6e:57:5e:4f:dc:cd:3e:5d:
                    4b:38:78:d5:20:9a:f2:3c:fb:72:8c:88:28:ef:bd:
                    41:09:3e:d3:4d:4c:79:c5:45:1f:0e:cf:38:e5:96:
                    0c:28:6f:27:c2:35:9f:c3:b5:80:ca:2e:66:63:dc:
                    f7:14:29:30:5a:71:99:ad:ad:87:3f:93:0e:c6:dd:
                    c3:42:2e:60:01:7b:52:b6:fa:a6:21:bb:33:ae:a2:
                    f0:65:d1:57:a1:3a:7e:ab:71:9e:0c:d3:5e:87:ea:
                    0b:ad:7f:d3:64:9c:c8:c0:14:e6:93:34:fd:6a:d7:
                    c2:11:99:0d:a3:bb:d5:8d:13:9e:21:51:9d:54:d5:
                    fb:d9:a0:cc:fd:51:4b:04:c6:1d:0e:b0:16:6b:06:
                    cc:11:66:b5:23:91:24:cd:13:1f:21:69:4f:cf:31:
                    60:cb:9d:9d:e7:69:c7:97:68:fb:02:0c:11:84:72:
                    86:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:77:28:AB:1B:9D:2A:35:22:A0:B0:C6:5C:74:0A:81:92:70:57:1F
            X509v3 Authority Key Identifier:
                keyid:52:0B:A9:4C:D0:FB:9E:7C:14:0D:FB:C0:CC:58:B9:3C:F5:4C:22:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UgupTND7nnwUDfvAzFi5PPVMIvM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:d1:59:37:93:6a:a3:45:b9:ca:70:d1:24:0f:65:65:44:ac:
         f2:d6:b3:f2:b6:20:22:d0:d9:f1:b6:27:2a:aa:80:cc:93:b5:
         11:aa:3a:bb:62:04:4d:9d:ac:48:9d:b8:d3:2a:e0:6e:dd:52:
         dd:d2:d1:70:0c:28:9e:f8:02:de:e6:1e:ba:10:85:4e:f6:f5:
         05:de:b9:96:31:1c:b8:43:4e:a8:0b:a7:e9:c7:c6:9b:19:5a:
         55:3f:fc:18:d0:fc:21:18:83:b5:36:d6:9b:50:f7:aa:36:50:
         4a:ec:2b:fd:a3:73:40:3d:8f:73:fe:55:59:07:04:26:bf:60:
         53:ab:64:19:a4:d0:3e:02:f9:3f:bd:cf:86:e0:96:38:03:68:
         70:1a:52:35:22:d6:b9:43:0c:cd:cf:50:bf:01:69:c2:2b:1c:
         3c:26:9d:c3:95:ed:56:82:7c:b6:42:d7:b9:a9:eb:c9:41:61:
         ea:ca:64:b5:cd:ed:86:f0:a2:f6:d2:29:a4:3a:d4:41:92:02:
         02:3e:5f:39:6b:44:13:cd:8d:88:e5:fb:12:96:71:17:64:09:
         41:4f:90:5f:b2:b6:c1:13:ee:70:4b:ed:08:00:14:71:12:df:
         16:80:a2:ec:39:41:f1:e5:83:54:2d:a0:87:8d:5f:e1:42:d9:
         e9:62:47:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 00:57:52 2025 by rpki-client