Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140467/9AA980D6F1E011EA8D4A9E32C4F9AE02/uMMvxNeTGtQkFAcwaguZasjJn-s.mft
File:                     uMMvxNeTGtQkFAcwaguZasjJn-s.mft (raw, json)
Hash identifier:          hSiHTBbK+tUhB1hHgmXHmPpjeoZmqs1awBQZOLu3VOI=
Subject key identifier:   1D:E0:40:6C:80:44:C3:06:4D:FC:4F:6E:52:23:04:70:A6:EE:06:01
Authority key identifier: B8:C3:2F:C4:D7:93:1A:D4:24:14:07:30:6A:0B:99:6A:C8:C9:9F:EB
Certificate issuer:       /CN=A9140467/serialNumber=B8C32FC4D7931AD4241407306A0B996AC8C99FEB
Certificate serial:       07D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uMMvxNeTGtQkFAcwaguZasjJn-s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140467/9AA980D6F1E011EA8D4A9E32C4F9AE02/uMMvxNeTGtQkFAcwaguZasjJn-s.mft
Manifest number:          07CB
Signing time:             Fri 16 May 2025 21:24:06 +0000
Manifest this update:     Fri 16 May 2025 21:24:05 +0000
Manifest next update:     Fri 23 May 2025 21:24:05 +0000
Files and hashes:         1: uMMvxNeTGtQkFAcwaguZasjJn-s.crl (hash: UodsPj6toNXG5aW7N1SvIXTu2YeaUzEe1zFhMJiaMXQ=)
                          2: 02E60C72F1E211EAA2361B34C4F9AE02.roa (hash: NVCXbcFvHq2CdsPgLWHDiKusyLYs2euJqKNXNgfWerU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140467/9AA980D6F1E011EA8D4A9E32C4F9AE02/uMMvxNeTGtQkFAcwaguZasjJn-s.crl
                          rsync://rpki.apnic.net/member_repository/A9140467/9AA980D6F1E011EA8D4A9E32C4F9AE02/uMMvxNeTGtQkFAcwaguZasjJn-s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uMMvxNeTGtQkFAcwaguZasjJn-s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 May 2025 21:24:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2001 (0x7d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140467, serialNumber=B8C32FC4D7931AD4241407306A0B996AC8C99FEB
        Validity
            Not Before: May 16 21:24:05 2025 GMT
            Not After : May 23 21:24:05 2025 GMT
        Subject: CN=6827acf5-4082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:48:14:11:25:4b:bc:66:2d:3d:a6:3e:af:f6:
                    d2:3f:9d:00:02:9d:d5:8b:17:11:c1:88:03:7f:e7:
                    90:d6:88:c5:be:a3:73:34:31:ce:28:9e:3e:c2:c7:
                    3b:bc:6f:5b:14:f4:58:4a:8f:1c:22:9a:c5:23:31:
                    63:37:f9:b3:3c:12:fd:1c:17:23:96:0e:31:d5:32:
                    43:54:23:60:73:52:fe:e5:4a:7f:ba:d2:51:05:50:
                    63:58:30:91:4f:74:ae:40:36:64:c0:3a:74:8f:c7:
                    e3:e4:66:82:b0:4c:81:dd:9b:af:74:b4:f2:83:a2:
                    f5:a1:6d:15:7f:41:01:6e:3c:e6:df:c1:31:69:5c:
                    5b:fa:6d:3e:ed:86:07:85:c8:b8:90:a1:ef:75:a0:
                    6e:99:77:88:f9:46:ff:50:9b:d7:44:9c:7e:ac:b6:
                    80:8f:c9:86:b6:d3:4c:9e:25:1b:71:ba:4e:35:b6:
                    61:74:ed:4b:bd:b6:bc:a5:58:26:6d:70:37:58:84:
                    53:00:c5:d4:70:5c:90:09:cf:9e:ce:9d:02:d0:be:
                    62:6a:96:ad:fe:b1:15:e3:f8:eb:6b:03:47:3e:75:
                    0c:07:ba:b9:fe:d2:2d:7a:c0:da:a5:7a:75:34:3d:
                    9c:d9:74:e1:23:96:14:bf:9c:7c:25:9c:c3:7b:28:
                    a7:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:E0:40:6C:80:44:C3:06:4D:FC:4F:6E:52:23:04:70:A6:EE:06:01
            X509v3 Authority Key Identifier:
                keyid:B8:C3:2F:C4:D7:93:1A:D4:24:14:07:30:6A:0B:99:6A:C8:C9:9F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140467/9AA980D6F1E011EA8D4A9E32C4F9AE02/uMMvxNeTGtQkFAcwaguZasjJn-s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uMMvxNeTGtQkFAcwaguZasjJn-s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140467/9AA980D6F1E011EA8D4A9E32C4F9AE02/uMMvxNeTGtQkFAcwaguZasjJn-s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:8f:8d:c0:64:9a:5a:15:20:d8:5b:f0:5f:84:da:20:a1:ab:
         e2:90:b9:bd:3a:ee:8c:e6:74:6b:6e:4a:1f:fa:94:ab:be:39:
         9d:fa:82:e4:93:9d:89:39:92:38:9e:04:5a:b2:68:cc:c3:21:
         ba:8a:ec:49:5c:cd:30:17:00:5a:73:51:06:1d:31:37:1a:eb:
         1a:3f:8f:e1:13:06:cc:d4:43:b5:ae:72:02:2d:24:42:75:45:
         b0:c2:e8:60:23:94:50:7e:89:4c:ea:fb:35:14:7c:ab:7b:e9:
         63:4d:c6:2e:fd:6d:6f:9f:c9:31:81:5d:0e:c0:43:89:25:ef:
         c3:f6:69:67:2e:57:e9:f7:74:f8:24:b2:8e:a1:d9:44:82:e1:
         45:2e:c7:a0:2f:0f:8b:fb:c5:c9:d0:95:6f:71:9c:09:3b:45:
         f2:a9:07:6a:8c:7c:53:f5:97:31:5e:d5:bc:d7:0f:ba:85:33:
         54:3d:cd:d4:70:93:07:54:dd:00:9c:5d:78:7f:4c:04:2b:ed:
         1d:4b:54:02:35:11:d3:8a:d4:39:dc:36:44:b2:33:b3:58:34:
         50:d7:fc:2a:69:f8:3e:ed:c3:d8:22:dd:85:9d:54:4e:39:38:
         6a:49:bc:a9:7f:d1:95:9e:0c:ce:0c:d1:f1:f3:0a:7b:2b:f7:
         21:5b:21:aa
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB9EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDA0NjcxMTAvBgNVBAUTKEI4QzMyRkM0RDc5MzFBRDQyNDE0MDczMDZBMEI5OTZB
QzhDOTlGRUIwHhcNMjUwNTE2MjEyNDA1WhcNMjUwNTIzMjEyNDA1WjAYMRYwFAYD
VQQDEw02ODI3YWNmNS00MDgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs0gUESVLvGYtPaY+r/bSP50AAp3VixcRwYgDf+eQ1ojFvqNzNDHOKJ4+wsc7
vG9bFPRYSo8cIprFIzFjN/mzPBL9HBcjlg4x1TJDVCNgc1L+5Up/utJRBVBjWDCR
T3SuQDZkwDp0j8fj5GaCsEyB3ZuvdLTyg6L1oW0Vf0EBbjzm38ExaVxb+m0+7YYH
hci4kKHvdaBumXeI+Ub/UJvXRJx+rLaAj8mGttNMniUbcbpONbZhdO1Lvba8pVgm
bXA3WIRTAMXUcFyQCc+ezp0C0L5iapat/rEV4/jrawNHPnUMB7q5/tItesDapXp1
ND2c2XThI5YUv5x8JZzDeyinEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB3gQGyA
RMMGTfxPblIjBHCm7gYBMB8GA1UdIwQYMBaAFLjDL8TXkxrUJBQHMGoLmWrIyZ/r
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDQ2Ny85QUE5ODBENkYx
RTAxMUVBOEQ0QTlFMzJDNEY5QUUwMi91TU12eE5lVEd0UWtGQWN3YWd1WmFzakpu
LXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VNTXZ4TmVUR3RRa0ZBY3dhZ3VaYXNqSm4tcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MDQ2Ny85QUE5ODBENkYxRTAxMUVBOEQ0QTlFMzJDNEY5QUUwMi91TU12eE5lVEd0
UWtGQWN3YWd1WmFzakpuLXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBoj43AZJpaFSDYW/BfhNogoavikLm9Ou6M5nRrbkof+pSrvjmd+oLk
k52JOZI4ngRasmjMwyG6iuxJXM0wFwBac1EGHTE3GusaP4/hEwbM1EO1rnICLSRC
dUWwwuhgI5RQfolM6vs1FHyre+ljTcYu/W1vn8kxgV0OwEOJJe/D9mlnLlfp93T4
JLKOodlEguFFLsegLw+L+8XJ0JVvcZwJO0XyqQdqjHxT9ZcxXtW81w+6hTNUPc3U
cJMHVN0AnF14f0wEK+0dS1QCNRHTitQ53DZEsjOzWDRQ1/wqafg+7cPYIt2FnVRO
OThqSbypf9GVngzODNHx8wp7K/chWyGq
-----END CERTIFICATE-----
Generated at Sat May 17 10:43:45 2025 by rpki-client