Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113217/D72196D0215C11EEBCB5B24EC4F9AE02/uzAHjPaHeH06Wz5TTAiXFqhrE7s.mft
File:                     uzAHjPaHeH06Wz5TTAiXFqhrE7s.mft (raw, json)
Hash identifier:          ZX7WX7Jy5VbIveYYkUlQTiRWgmLPyKLfwdHd2VR9dzc=
Subject key identifier:   CD:BF:85:2D:0C:E0:2B:74:2D:18:E8:F7:4A:2D:7D:12:CF:45:97:D0
Authority key identifier: BB:30:07:8C:F6:87:78:7D:3A:5B:3E:53:4C:08:97:16:A8:6B:13:BB
Certificate issuer:       /CN=A9113217/serialNumber=BB30078CF687787D3A5B3E534C089716A86B13BB
Certificate serial:       015F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uzAHjPaHeH06Wz5TTAiXFqhrE7s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113217/D72196D0215C11EEBCB5B24EC4F9AE02/uzAHjPaHeH06Wz5TTAiXFqhrE7s.mft
Manifest number:          015C
Signing time:             Thu 15 May 2025 03:27:50 +0000
Manifest this update:     Thu 15 May 2025 03:27:49 +0000
Manifest next update:     Thu 22 May 2025 03:27:49 +0000
Files and hashes:         1: uzAHjPaHeH06Wz5TTAiXFqhrE7s.crl (hash: hm69HvDv1MeS1mX2Oq1XmdZOn+7CoPRvqxS1oPuPUvY=)
                          2: 859871F2215D11EE963E9A52C4F9AE02.roa (hash: HHHOwt/fdM7W7+F6fEKQDH5IL/vBD99o4H9HkpME2xk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113217/D72196D0215C11EEBCB5B24EC4F9AE02/uzAHjPaHeH06Wz5TTAiXFqhrE7s.crl
                          rsync://rpki.apnic.net/member_repository/A9113217/D72196D0215C11EEBCB5B24EC4F9AE02/uzAHjPaHeH06Wz5TTAiXFqhrE7s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uzAHjPaHeH06Wz5TTAiXFqhrE7s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 May 2025 03:27:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 351 (0x15f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113217, serialNumber=BB30078CF687787D3A5B3E534C089716A86B13BB
        Validity
            Not Before: May 15 03:27:49 2025 GMT
            Not After : May 22 03:27:49 2025 GMT
        Subject: CN=68255f35-9554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e6:88:4f:18:08:25:9f:64:e4:19:38:7f:57:
                    54:b4:86:56:b6:1d:4d:0a:b4:28:12:74:46:87:c8:
                    03:89:bd:da:12:5f:b6:89:a3:bf:40:b3:0b:9b:44:
                    e5:16:b7:c5:df:6f:ba:d2:37:51:bf:6d:2d:f1:e7:
                    8d:85:b7:98:ef:f0:42:b4:b0:c4:d1:2a:49:5c:0f:
                    7e:7f:69:61:0b:c3:3d:b1:15:2b:08:44:8a:e8:96:
                    3a:be:29:d1:eb:90:29:c6:b1:26:bd:ad:94:d4:3b:
                    ea:b0:c3:48:27:e8:be:f3:11:47:d4:85:c7:2a:94:
                    12:2a:5d:c1:29:33:4a:ac:05:bb:bb:34:d5:43:9c:
                    96:70:3a:f2:58:bb:ef:3e:21:9d:31:2a:3a:5b:b2:
                    29:ac:63:68:b8:a7:88:b7:71:a4:ec:0a:f3:e3:8d:
                    ad:ba:b9:ad:7c:10:a0:de:65:0a:bf:a5:0a:5f:03:
                    c5:6b:e5:63:aa:2d:57:7a:ed:a8:d0:40:2d:32:3c:
                    f3:af:c0:e6:dc:fd:ab:3e:e3:1d:ed:cb:e4:1e:c3:
                    3a:bd:a1:40:3f:c2:46:07:ac:f2:ad:88:e9:b3:09:
                    f4:07:4a:5d:8c:85:1b:61:b8:d4:80:b6:54:55:06:
                    71:22:30:03:54:d2:02:be:0e:69:3d:42:31:2d:47:
                    89:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:BF:85:2D:0C:E0:2B:74:2D:18:E8:F7:4A:2D:7D:12:CF:45:97:D0
            X509v3 Authority Key Identifier:
                keyid:BB:30:07:8C:F6:87:78:7D:3A:5B:3E:53:4C:08:97:16:A8:6B:13:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113217/D72196D0215C11EEBCB5B24EC4F9AE02/uzAHjPaHeH06Wz5TTAiXFqhrE7s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uzAHjPaHeH06Wz5TTAiXFqhrE7s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113217/D72196D0215C11EEBCB5B24EC4F9AE02/uzAHjPaHeH06Wz5TTAiXFqhrE7s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:30:21:2c:bc:48:a0:c9:42:6f:f3:b7:56:d8:6c:b2:3c:19:
         df:dc:f1:e4:60:e1:ab:9c:91:f8:cd:2d:c1:d8:09:bb:8a:d5:
         35:e0:d9:de:19:cd:d1:f6:89:39:5d:d5:fa:1a:01:3c:0a:24:
         7c:ed:09:3b:0e:66:57:50:c3:31:e8:c7:f2:8d:8b:fd:d7:82:
         62:18:75:93:8f:01:ea:f7:24:f2:f2:66:5a:3b:d8:65:36:58:
         cb:0e:51:da:58:a3:91:5e:41:37:8c:2f:a5:62:eb:98:3f:eb:
         22:6a:a7:76:8e:68:81:cc:f4:1b:e9:56:a5:49:cd:4f:a7:49:
         4e:9d:8e:50:b3:fd:04:7b:92:dc:16:6c:19:7d:09:21:c6:f7:
         df:b8:f3:a2:fe:32:95:cf:af:75:76:97:f7:d3:6b:4b:96:4a:
         bc:36:e8:7c:6d:b7:5e:2a:5a:ae:7e:d7:08:7e:c8:ac:59:d5:
         9a:d8:79:96:16:cf:39:51:64:9a:99:98:78:02:2a:b9:da:c6:
         1a:67:cf:fc:8f:f3:a6:e6:ba:86:5c:d3:9d:08:f5:c4:c6:f7:
         b0:2d:54:59:9e:4d:68:8a:31:85:f0:21:c7:71:7e:01:dd:4d:
         76:89:de:19:2f:e2:83:b8:d3:87:b9:dd:44:7a:e4:d9:4f:6d:
         70:4b:1c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 12:04:22 2025 by rpki-client