Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.mft
File:                     UM3WDPjzEj_evOkIgq83u-PvXEg.mft (raw, json)
Hash identifier:          9ZbaD5/RKM1eB//5T/seY2nmfkUtjFIyaGzznFUu6Ss=
Subject key identifier:   CB:04:EA:12:EE:35:A0:03:63:DA:4E:78:0D:FE:9D:A1:72:8C:21:12
Authority key identifier: 50:CD:D6:0C:F8:F3:12:3F:DE:BC:E9:08:82:AF:37:BB:E3:EF:5C:48
Certificate issuer:       /CN=A9122C94/serialNumber=50CDD60CF8F3123FDEBCE90882AF37BBE3EF5C48
Certificate serial:       0765
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UM3WDPjzEj_evOkIgq83u-PvXEg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.mft
Manifest number:          075F
Signing time:             Wed 14 May 2025 21:40:26 +0000
Manifest this update:     Wed 14 May 2025 21:40:26 +0000
Manifest next update:     Wed 21 May 2025 21:40:26 +0000
Files and hashes:         1: UM3WDPjzEj_evOkIgq83u-PvXEg.crl (hash: GLX4NYNP5uixWS/slLjs2rlD+PJYk2jLIujcnEh55v0=)
                          2: 5BF797081CF411EBB5ADE642C4F9AE02.roa (hash: AwRksKXITHLfRHPDls3Dox6LPqS08ltsptsGuhqXo1I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.crl
                          rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UM3WDPjzEj_evOkIgq83u-PvXEg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 May 2025 21:40:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1893 (0x765)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122C94, serialNumber=50CDD60CF8F3123FDEBCE90882AF37BBE3EF5C48
        Validity
            Not Before: May 14 21:40:26 2025 GMT
            Not After : May 21 21:40:26 2025 GMT
        Subject: CN=68250dca-2319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:dc:a3:fe:59:c1:aa:27:b0:46:b2:2d:e1:8d:
                    73:78:08:8a:de:92:83:44:75:43:fc:37:54:76:0e:
                    e6:ec:32:63:8a:00:f6:31:cd:30:b7:1d:b9:a4:30:
                    77:03:9c:cd:39:17:c9:41:bf:d3:ce:9c:fa:26:f0:
                    55:3b:c2:b1:28:f3:c2:71:de:bb:7b:88:ce:43:41:
                    59:04:5a:32:15:c5:f1:06:22:e1:cc:07:91:8a:18:
                    23:67:4d:1f:32:c9:b0:f5:a0:97:9f:a4:13:99:19:
                    8a:79:a4:ad:ae:3b:70:c8:3d:f9:a8:9d:97:4d:c5:
                    b2:14:39:f8:94:e2:42:23:25:2a:1e:e4:87:30:b8:
                    44:68:ae:e0:e0:97:d2:fd:e4:9d:0e:3d:22:1c:cf:
                    b6:99:1b:b9:06:d4:cb:f0:ee:3e:b9:59:9a:b8:ba:
                    19:5a:be:cb:5a:a6:ea:23:6c:ea:08:ba:53:1f:50:
                    35:5b:d1:17:7e:b7:f8:43:9f:4e:fa:8b:56:6e:7e:
                    35:7a:8a:9f:a9:6f:7f:13:f5:3e:0a:76:52:d4:68:
                    b3:04:2d:bf:38:6e:db:d1:5b:45:24:8c:f1:97:18:
                    c5:49:20:ef:e5:11:83:1f:78:d8:e0:9a:ef:be:23:
                    b5:99:38:da:94:c6:62:86:fc:49:5f:d9:c5:f5:04:
                    b9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:04:EA:12:EE:35:A0:03:63:DA:4E:78:0D:FE:9D:A1:72:8C:21:12
            X509v3 Authority Key Identifier:
                keyid:50:CD:D6:0C:F8:F3:12:3F:DE:BC:E9:08:82:AF:37:BB:E3:EF:5C:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UM3WDPjzEj_evOkIgq83u-PvXEg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:40:97:9f:53:1f:34:2b:88:ed:d3:12:f3:d1:37:11:95:da:
         3d:2e:70:e1:0d:bb:4e:25:f3:de:42:09:e4:da:b5:08:7a:b3:
         b6:ed:44:3e:d1:da:00:05:f1:52:a9:23:4e:89:73:99:b6:3e:
         f0:e6:ac:53:f3:51:77:0e:89:a2:e8:aa:75:1a:67:1e:7a:32:
         85:7c:55:96:c3:25:db:ae:ee:e5:62:88:84:6a:bb:b4:ef:cb:
         1c:b8:a2:f9:8d:2c:f2:f3:6a:19:13:97:85:7c:4c:58:fd:82:
         37:a1:b6:40:75:ae:b9:ba:45:ab:31:83:6d:67:c1:be:45:38:
         da:b4:3a:85:f6:53:7b:81:44:49:4f:38:1d:5e:11:f4:a9:05:
         ed:7b:63:d3:df:d5:e4:33:3e:c8:b8:de:fb:85:81:a5:a9:f2:
         d7:16:d7:ce:19:89:cb:2e:25:5b:48:2b:4e:f2:b3:25:82:63:
         49:04:c9:6e:fa:c8:78:8c:b4:5a:dc:0a:56:5f:81:94:3a:d2:
         e5:9e:69:08:7d:48:e5:dd:16:77:4b:e9:82:b7:0e:b8:44:7c:
         42:b4:8a:3b:2a:68:2f:a9:31:1b:8e:85:bb:ab:d3:d4:a4:41:
         13:48:80:42:9f:8f:d9:ff:7e:1a:d9:37:23:06:0f:77:79:0d:
         40:23:e4:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 03:22:59 2025 by rpki-client