Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154388/38457CF68C3711EF80901C2EC4F9AE02/uyoPSTIeCAsicL0MjZuNS3k7EEQ.mft
File:                     uyoPSTIeCAsicL0MjZuNS3k7EEQ.mft (raw, json)
Hash identifier:          hvBUeLns53/KeABwO7dtTBartNaT2acVlqSMI4wnHlk=
Subject key identifier:   0E:4F:3F:E8:9F:B2:90:CA:64:11:74:1F:A4:D0:27:6A:09:99:3F:89
Authority key identifier: BB:2A:0F:49:32:1E:08:0B:22:70:BD:0C:8D:9B:8D:4B:79:3B:10:44
Certificate issuer:       /CN=A9154388/serialNumber=BB2A0F49321E080B2270BD0C8D9B8D4B793B1044
Certificate serial:       6E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uyoPSTIeCAsicL0MjZuNS3k7EEQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154388/38457CF68C3711EF80901C2EC4F9AE02/uyoPSTIeCAsicL0MjZuNS3k7EEQ.mft
Manifest number:          6E
Signing time:             Thu 15 May 2025 06:10:24 +0000
Manifest this update:     Thu 15 May 2025 06:10:24 +0000
Manifest next update:     Thu 22 May 2025 06:10:24 +0000
Files and hashes:         1: uyoPSTIeCAsicL0MjZuNS3k7EEQ.crl (hash: 3NmT4fEkFtzPxiCk5PBFl+ImXI3yzTY9JdbQImv/+UQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154388/38457CF68C3711EF80901C2EC4F9AE02/uyoPSTIeCAsicL0MjZuNS3k7EEQ.crl
                          rsync://rpki.apnic.net/member_repository/A9154388/38457CF68C3711EF80901C2EC4F9AE02/uyoPSTIeCAsicL0MjZuNS3k7EEQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uyoPSTIeCAsicL0MjZuNS3k7EEQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 May 2025 06:10:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110 (0x6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154388, serialNumber=BB2A0F49321E080B2270BD0C8D9B8D4B793B1044
        Validity
            Not Before: May 15 06:10:24 2025 GMT
            Not After : May 22 06:10:24 2025 GMT
        Subject: CN=68258550-b0ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:92:d3:62:fc:0e:8b:17:f8:79:7f:6e:e6:8b:
                    ca:20:80:c2:40:4e:bd:7e:3c:68:b9:e4:90:bd:d3:
                    1b:94:83:f4:86:5f:42:8e:6b:b7:8b:e8:8b:88:c2:
                    5e:70:5a:18:b4:58:ab:3d:b9:dd:e6:45:3b:20:ab:
                    47:f3:52:d5:c3:f1:62:9d:a4:bc:31:9b:aa:fb:60:
                    69:1a:62:33:e6:c6:d4:cd:c7:ec:bc:04:64:e5:02:
                    f6:3b:61:b0:de:60:ae:f2:cf:07:cb:3c:13:ec:e6:
                    67:99:f7:3c:4a:e4:d7:91:d0:cd:c5:5b:ab:74:9b:
                    c8:2e:af:5d:b7:48:c4:4d:4a:5c:05:bb:78:2b:02:
                    11:f3:bb:8d:03:b9:1b:66:38:b4:cc:ef:9f:55:20:
                    97:68:09:4e:67:fd:8d:95:57:3e:3c:cd:34:de:82:
                    fb:df:22:cf:1e:76:a6:23:a5:5c:43:b5:ef:a8:76:
                    cc:18:90:ca:e6:8f:33:c5:5d:41:d3:bc:0a:3c:15:
                    85:0d:63:17:2f:99:ad:bd:61:4d:28:f0:d8:87:f0:
                    14:c5:69:dd:97:0c:08:dd:be:6e:99:91:07:c7:bc:
                    e1:07:6d:62:33:c4:27:f7:e9:28:6f:12:3e:ec:e2:
                    54:ab:39:ce:0f:28:09:ea:37:be:72:34:e6:ba:60:
                    2f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:4F:3F:E8:9F:B2:90:CA:64:11:74:1F:A4:D0:27:6A:09:99:3F:89
            X509v3 Authority Key Identifier:
                keyid:BB:2A:0F:49:32:1E:08:0B:22:70:BD:0C:8D:9B:8D:4B:79:3B:10:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154388/38457CF68C3711EF80901C2EC4F9AE02/uyoPSTIeCAsicL0MjZuNS3k7EEQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uyoPSTIeCAsicL0MjZuNS3k7EEQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154388/38457CF68C3711EF80901C2EC4F9AE02/uyoPSTIeCAsicL0MjZuNS3k7EEQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:ac:52:61:1f:5c:77:6b:46:ab:af:ee:90:5b:3e:13:f2:a1:
         63:53:95:0e:ce:f4:cd:f3:c8:2b:96:23:27:13:28:1d:7f:c7:
         55:79:1b:44:43:42:8f:dd:3a:db:c6:da:e4:27:50:d4:f3:58:
         90:58:62:89:ed:02:8e:d1:3a:de:d5:4a:be:be:0f:eb:98:8a:
         25:3d:c9:82:96:3b:6e:ca:23:58:30:4e:f1:14:e9:44:03:51:
         f8:5f:05:f7:22:b6:06:2c:42:c4:2b:e7:d3:c0:81:ca:13:6c:
         ca:50:23:10:26:14:fa:57:46:38:ec:4f:90:7f:7c:ce:5e:3e:
         83:e6:4b:e1:91:20:6f:e8:16:e6:b7:4c:f8:f1:d6:cd:6e:bb:
         9d:48:77:c2:cd:b6:73:33:17:6c:8a:e1:02:46:cd:b6:5c:11:
         21:d8:d6:b5:3d:f5:59:16:31:d2:c4:21:30:76:0b:10:54:81:
         20:ed:72:8c:ea:c1:68:de:a4:19:e9:19:35:36:a3:96:f2:9a:
         f4:33:42:b7:8e:ae:49:9c:a1:35:e8:1e:c6:e9:cf:64:48:da:
         6d:c1:8b:49:98:53:3b:fb:62:8d:17:3b:44:7e:eb:ad:ca:bc:
         5a:82:b1:6a:23:49:ed:1e:5b:3f:cd:9c:ff:1c:13:1f:d0:db:
         c9:d2:79:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 15:30:06 2025 by rpki-client