Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.mft
File:                     uBXPhQU2i6f5dnTpuxoUAJW0_5s.mft (raw, json)
Hash identifier:          KiJPzLuisVbhs1ENJ9GuzUMP69jXA5ULrBlYleT2aYM=
Subject key identifier:   E6:1B:18:E0:12:44:0C:59:5A:32:93:E1:AA:2A:88:58:D0:22:5B:08
Authority key identifier: B8:15:CF:85:05:36:8B:A7:F9:76:74:E9:BB:1A:14:00:95:B4:FF:9B
Certificate issuer:       /CN=A919D88F/serialNumber=B815CF8505368BA7F97674E9BB1A140095B4FF9B
Certificate serial:       70
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uBXPhQU2i6f5dnTpuxoUAJW0_5s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.mft
Manifest number:          6E
Signing time:             Thu 15 May 2025 06:12:43 +0000
Manifest this update:     Thu 15 May 2025 06:12:43 +0000
Manifest next update:     Thu 22 May 2025 06:12:43 +0000
Files and hashes:         1: uBXPhQU2i6f5dnTpuxoUAJW0_5s.crl (hash: FhAO+qcUefYCSlzqqdOJpb/J2cEU7MkxFhVqXTPEVlE=)
                          2: 17613044905F11EF8B4BC46BC4F9AE02.roa (hash: NvjP/LYwW9l6MqSSpH5THMx2WmCXtMYC8PmhjmLmzIg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.crl
                          rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uBXPhQU2i6f5dnTpuxoUAJW0_5s.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 May 2025 06:12:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112 (0x70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D88F, serialNumber=B815CF8505368BA7F97674E9BB1A140095B4FF9B
        Validity
            Not Before: May 15 06:12:43 2025 GMT
            Not After : May 22 06:12:43 2025 GMT
        Subject: CN=682585db-a4a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:03:50:f5:fc:71:c3:6b:97:de:8c:e8:4d:32:
                    3b:83:52:65:0c:c4:f3:f3:bb:c2:99:ba:31:98:47:
                    ff:86:c3:7f:f7:61:61:75:86:7c:a4:ec:46:2d:54:
                    7e:04:91:f5:3d:81:5f:67:1c:fc:0d:e5:55:86:aa:
                    18:ca:34:2e:11:2e:81:1d:a8:7f:75:8a:15:e1:f8:
                    94:1f:18:a3:27:1a:75:95:d9:98:ae:d5:58:7a:67:
                    ba:6f:c9:60:bc:85:fe:d6:b7:03:f6:07:cf:3e:d3:
                    a8:d8:a0:9f:bc:cf:f6:83:eb:cf:ce:72:fa:da:d3:
                    d8:d1:ed:7e:82:10:2b:7a:c7:bc:77:e3:1f:b5:ce:
                    4d:c4:79:6c:5d:de:44:24:a5:28:a8:c1:fd:4c:61:
                    5f:ce:a4:0c:25:e5:ea:32:1e:c9:f9:a0:c7:6d:b0:
                    70:b1:f6:22:b4:77:ed:df:3b:d9:ca:2f:9d:49:24:
                    b7:79:5b:4d:b4:a2:91:1b:bf:eb:18:20:c8:78:36:
                    b4:1b:23:2c:d1:c8:2f:fb:2c:f2:e9:e0:b0:75:58:
                    c9:88:1c:f7:00:cd:8a:31:49:36:5a:58:6b:0d:2e:
                    fb:95:f3:16:60:bd:9c:b9:3c:e8:b5:35:b3:48:88:
                    e5:5d:80:11:07:f1:e3:4b:7e:de:f6:1d:02:4c:8d:
                    06:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:1B:18:E0:12:44:0C:59:5A:32:93:E1:AA:2A:88:58:D0:22:5B:08
            X509v3 Authority Key Identifier:
                keyid:B8:15:CF:85:05:36:8B:A7:F9:76:74:E9:BB:1A:14:00:95:B4:FF:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uBXPhQU2i6f5dnTpuxoUAJW0_5s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:bb:ea:6e:12:f1:bb:4b:02:b3:25:5f:65:e6:24:70:51:7c:
         25:dc:c5:a5:98:0b:d9:6d:9c:1f:cb:2a:4f:60:d3:cb:ae:67:
         7b:08:91:85:67:e3:37:4a:60:e1:43:d0:5f:d2:d3:66:e9:37:
         06:5d:ab:18:d0:14:e7:f3:a0:df:02:b7:f7:c3:a8:2f:f1:9e:
         51:14:88:d1:96:6e:76:e5:bb:77:9d:93:14:c7:ad:bc:00:59:
         d5:14:07:bd:7b:ab:d5:25:d8:22:8a:57:69:3a:24:6a:d0:35:
         88:c7:1f:55:d3:7d:ca:a4:08:80:c2:c2:39:1f:ef:37:17:68:
         84:86:24:ad:11:be:da:56:b0:20:fb:eb:91:88:c5:87:91:50:
         78:52:9e:30:61:37:ed:da:e9:95:82:fc:c3:c1:98:8a:9a:5f:
         14:0d:b8:1d:fe:12:86:02:e7:69:a9:bf:14:b2:68:dc:73:2d:
         ba:08:97:56:a7:5a:40:b2:6f:75:a9:3a:ae:71:62:d9:b9:65:
         8e:00:2e:79:fe:e6:0f:31:36:27:80:82:eb:e0:bd:d6:c6:ff:
         2d:4d:df:d5:70:b0:ff:70:77:ed:cd:0a:c6:1a:25:7a:bb:18:
         15:8f:72:62:4b:a9:c9:e9:48:b9:03:d0:df:84:8c:86:21:36:
         b4:58:e5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 08:02:53 2025 by rpki-client