Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B8A1/A1119CA0DCD111ECBA66D637C4F9AE02/UhRr8Q81lfF6kjn1NmTdbAE-L58.mft
File:                     UhRr8Q81lfF6kjn1NmTdbAE-L58.mft (raw, json)
Hash identifier:          N2T7HqBtz6S/CdVMX+oXRb2ryt4gNxmqvIOz0du5s7M=
Subject key identifier:   68:CF:DC:30:CE:22:DC:FC:CF:36:44:6E:18:50:5D:37:BC:FC:49:C5
Authority key identifier: 52:14:6B:F1:0F:35:95:F1:7A:92:39:F5:36:64:DD:6C:01:3E:2F:9F
Certificate issuer:       /CN=A912B8A1/serialNumber=52146BF10F3595F17A9239F53664DD6C013E2F9F
Certificate serial:       02F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhRr8Q81lfF6kjn1NmTdbAE-L58.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B8A1/A1119CA0DCD111ECBA66D637C4F9AE02/UhRr8Q81lfF6kjn1NmTdbAE-L58.mft
Manifest number:          02ED
Signing time:             Thu 15 May 2025 01:19:51 +0000
Manifest this update:     Thu 15 May 2025 01:19:50 +0000
Manifest next update:     Thu 22 May 2025 01:19:50 +0000
Files and hashes:         1: UhRr8Q81lfF6kjn1NmTdbAE-L58.crl (hash: ub5SHptr18Y32HVJic/Eso33SP1502MSG8BZ89edJj4=)
                          2: 1A922B26DCD711EC87E30728C4F9AE02.roa (hash: XEGSj7dQ6VTCZmneur6OMrLP6cXWkey7miJkuempT94=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B8A1/A1119CA0DCD111ECBA66D637C4F9AE02/UhRr8Q81lfF6kjn1NmTdbAE-L58.crl
                          rsync://rpki.apnic.net/member_repository/A912B8A1/A1119CA0DCD111ECBA66D637C4F9AE02/UhRr8Q81lfF6kjn1NmTdbAE-L58.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhRr8Q81lfF6kjn1NmTdbAE-L58.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 May 2025 01:19:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 753 (0x2f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B8A1, serialNumber=52146BF10F3595F17A9239F53664DD6C013E2F9F
        Validity
            Not Before: May 15 01:19:50 2025 GMT
            Not After : May 22 01:19:50 2025 GMT
        Subject: CN=68254137-5d97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:72:38:bc:99:92:e4:08:ce:e2:e3:16:8f:28:
                    be:21:35:6b:32:8b:0b:34:c3:c4:f5:12:49:b2:57:
                    5f:5a:81:7d:51:f8:79:b0:61:5e:8c:d4:be:a6:e0:
                    e4:ac:e0:e3:7f:25:a7:38:8d:1e:a0:43:49:5a:ae:
                    b2:e8:27:04:ba:f7:21:b6:4b:4f:ab:2c:53:61:c2:
                    9c:42:23:41:9e:dc:92:c0:17:bc:a8:15:67:bb:37:
                    4d:b0:f8:f4:65:ae:3a:95:a1:b1:8d:66:ca:3d:8c:
                    24:83:83:95:a2:b9:8c:8c:ed:4b:0a:03:90:7f:be:
                    27:bb:21:07:27:80:5e:83:25:0d:2d:54:90:b5:2b:
                    85:43:62:e2:b7:cb:c2:ed:28:ce:fd:2e:41:a5:19:
                    03:44:87:4d:b8:a9:e5:27:4f:25:43:28:cf:3d:e6:
                    f1:54:60:8c:64:32:ad:18:b4:e3:ee:2b:61:2d:43:
                    8f:8a:43:ab:98:31:04:2c:9d:57:91:25:0c:ca:28:
                    87:67:34:1c:86:62:c4:51:a3:3f:c1:0a:16:7d:d3:
                    4b:53:d9:4f:76:ba:02:ff:29:e6:48:e4:f5:ae:cb:
                    1d:66:81:1e:05:c7:d6:a8:40:35:6d:5b:a4:b1:f9:
                    03:d1:4f:16:92:4c:2c:94:b4:22:f3:56:51:60:42:
                    3f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:CF:DC:30:CE:22:DC:FC:CF:36:44:6E:18:50:5D:37:BC:FC:49:C5
            X509v3 Authority Key Identifier:
                keyid:52:14:6B:F1:0F:35:95:F1:7A:92:39:F5:36:64:DD:6C:01:3E:2F:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B8A1/A1119CA0DCD111ECBA66D637C4F9AE02/UhRr8Q81lfF6kjn1NmTdbAE-L58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhRr8Q81lfF6kjn1NmTdbAE-L58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B8A1/A1119CA0DCD111ECBA66D637C4F9AE02/UhRr8Q81lfF6kjn1NmTdbAE-L58.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:af:ff:c5:59:34:72:c8:36:5b:30:d4:e2:d4:8d:6e:46:ec:
         8d:31:3d:a4:13:a6:f2:0f:19:41:24:00:ee:df:04:a9:dd:0d:
         46:4c:1b:5b:56:e0:c0:8d:7c:d5:00:83:9c:7d:2e:5f:5e:fb:
         da:36:68:56:02:1e:b2:9e:0e:16:28:70:e1:46:5c:94:d0:30:
         f6:1b:b7:21:f4:d3:22:1a:51:06:33:47:2d:27:b6:92:dc:5c:
         aa:d1:c3:62:47:cf:cf:4d:32:7f:a2:c2:e5:4e:13:13:aa:05:
         ec:a1:51:24:a1:47:6d:f5:f3:bf:f9:8d:47:8d:5c:a6:eb:cb:
         88:21:a7:f8:26:9c:e0:f5:19:94:94:c0:62:b1:a6:f1:24:7e:
         d7:ab:f0:d4:50:a3:25:7a:a2:7a:05:85:f3:c4:ca:f1:54:97:
         e7:96:24:93:78:48:c8:f8:fa:1f:28:a7:84:1b:d4:3a:1c:fb:
         ed:19:66:72:62:e0:fa:d8:22:16:02:1b:ce:84:0e:fa:82:ae:
         4a:a0:06:aa:9d:61:ca:e8:eb:2f:54:88:56:76:97:d7:3a:31:
         e4:e5:1f:c9:ee:16:4b:b6:83:5b:f4:af:5c:8a:63:72:c6:8e:
         04:ed:bc:66:f2:0c:bb:76:af:08:d8:95:b1:f9:23:2d:b0:85:
         e6:26:03:0f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAvEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkI4QTExMTAvBgNVBAUTKDUyMTQ2QkYxMEYzNTk1RjE3QTkyMzlGNTM2NjRERDZD
MDEzRTJGOUYwHhcNMjUwNTE1MDExOTUwWhcNMjUwNTIyMDExOTUwWjAYMRYwFAYD
VQQDEw02ODI1NDEzNy01ZDk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqHI4vJmS5AjO4uMWjyi+ITVrMosLNMPE9RJJsldfWoF9Ufh5sGFejNS+puDk
rODjfyWnOI0eoENJWq6y6CcEuvchtktPqyxTYcKcQiNBntySwBe8qBVnuzdNsPj0
Za46laGxjWbKPYwkg4OVormMjO1LCgOQf74nuyEHJ4BegyUNLVSQtSuFQ2Lit8vC
7SjO/S5BpRkDRIdNuKnlJ08lQyjPPebxVGCMZDKtGLTj7ithLUOPikOrmDEELJ1X
kSUMyiiHZzQchmLEUaM/wQoWfdNLU9lPdroC/ynmSOT1rssdZoEeBcfWqEA1bVuk
sfkD0U8WkkwslLQi81ZRYEI/3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGjP3DDO
Itz8zzZEbhhQXTe8/EnFMB8GA1UdIwQYMBaAFFIUa/EPNZXxepI59TZk3WwBPi+f
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjhBMS9BMTExOUNBMERD
RDExMUVDQkE2NkQ2MzdDNEY5QUUwMi9VaFJyOFE4MWxmRjZram4xTm1UZGJBRS1M
NTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VoUnI4UTgxbGZGNmtqbjFObVRkYkFFLUw1OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QjhBMS9BMTExOUNBMERDRDExMUVDQkE2NkQ2MzdDNEY5QUUwMi9VaFJyOFE4MWxm
RjZram4xTm1UZGJBRS1MNTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAEr//FWTRyyDZbMNTi1I1uRuyNMT2kE6byDxlBJADu3wSp3Q1GTBtb
VuDAjXzVAIOcfS5fXvvaNmhWAh6yng4WKHDhRlyU0DD2G7ch9NMiGlEGM0ctJ7aS
3Fyq0cNiR8/PTTJ/osLlThMTqgXsoVEkoUdt9fO/+Y1HjVym68uIIaf4Jpzg9RmU
lMBisabxJH7Xq/DUUKMleqJ6BYXzxMrxVJfnliSTeEjI+PofKKeEG9Q6HPvtGWZy
YuD62CIWAhvOhA76gq5KoAaqnWHK6OsvVIhWdpfXOjHk5R/J7hZLtoNb9K9cimNy
xo4E7bxm8gy7dq8I2JWx+SMtsIXmJgMP
-----END CERTIFICATE-----
Generated at Sat May 17 01:10:17 2025 by rpki-client