Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft
File:                     uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft (raw, json)
Hash identifier:          bRrjyKQATGw0ZjqUpF8gD1HXavN294MSLKy0ECg2XR0=
Subject key identifier:   A5:17:80:17:7E:A2:84:8D:89:54:20:A5:97:C3:DB:45:E6:81:D0:38
Authority key identifier: B8:89:11:17:80:68:D5:75:DF:DD:F8:49:40:CA:BE:AF:45:1C:8C:2B
Certificate issuer:       /CN=A91B4DC7/serialNumber=B88911178068D575DFDDF84940CABEAF451C8C2B
Certificate serial:       0371
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft
Manifest number:          0362
Signing time:             Thu 03 Jul 2025 01:19:33 +0000
Manifest this update:     Thu 03 Jul 2025 01:19:33 +0000
Manifest next update:     Thu 10 Jul 2025 01:19:33 +0000
Files and hashes:         1: uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl (hash: 1Tve4CZWWPBw7zKiiI91dxo3nJi/ZTtSHBWiYMC5xgE=)
                          2: F8400A20C80811ED9ADBA05EC4F9AE02.roa (hash: F6jPBh9YlNU7RVZYywXLeNlWgnFuc8x8f5OICDCdyXk=)
                          3: A6168350176711EFA13E2C6DC4F9AE02.roa (hash: 2CbWH78pD8qfhUqfDIT0bY8YAkS+SCmh9qliGFNOvyU=)
                          4: 9ABED502176711EFA0260C6DC4F9AE02.roa (hash: vsntEPAhq1q52SAuxi87DOT8T6ZFM5p3hlzlxYIzgx0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl
                          rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 01:19:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 881 (0x371)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B4DC7, serialNumber=B88911178068D575DFDDF84940CABEAF451C8C2B
        Validity
            Not Before: Jul  3 01:19:33 2025 GMT
            Not After : Jul 10 01:19:33 2025 GMT
        Subject: CN=6865daa5-2f08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:4d:2a:c0:4e:f4:65:ae:80:35:3d:fe:73:8c:
                    2b:5b:f2:ab:4b:9b:e2:7f:d4:d8:74:08:49:3d:fc:
                    4c:39:4d:c4:78:7e:a7:81:c0:7b:a8:d9:9a:0d:51:
                    6e:c2:d0:46:49:8d:ba:1f:b7:b5:53:80:31:7d:a0:
                    68:47:6a:de:8d:b4:0e:22:27:ab:62:a0:c3:d0:a7:
                    e3:f0:2d:27:c6:43:30:15:8a:af:6d:d7:c5:4d:90:
                    9a:10:95:53:8b:3b:7b:e0:88:93:85:55:bf:c9:3e:
                    6d:b7:47:55:0c:22:3d:36:dc:52:38:71:f3:db:e9:
                    10:eb:45:38:90:64:4c:d8:f5:ee:6a:00:bc:5b:1c:
                    ff:a8:41:80:9f:06:50:f3:4c:c1:ba:c6:fb:ba:13:
                    9c:5d:b7:dd:ee:06:97:c4:ce:0e:57:94:a1:f2:c2:
                    da:e8:d3:4a:c6:4e:db:ce:96:50:60:f1:01:16:50:
                    96:b0:a4:90:47:45:6d:98:47:9c:6e:5f:6f:20:c4:
                    9e:c3:82:1e:d5:24:02:c2:fc:7e:ea:cc:9d:e6:a2:
                    d1:1e:2a:95:a8:0d:6b:c5:30:00:68:9e:12:24:98:
                    20:3b:f7:41:36:a5:b5:ec:04:32:3a:7b:2e:f9:08:
                    eb:11:cd:be:5c:62:d9:de:f3:f0:ff:d6:35:2d:ac:
                    fa:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:17:80:17:7E:A2:84:8D:89:54:20:A5:97:C3:DB:45:E6:81:D0:38
            X509v3 Authority Key Identifier:
                keyid:B8:89:11:17:80:68:D5:75:DF:DD:F8:49:40:CA:BE:AF:45:1C:8C:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:d8:9e:b7:87:11:c9:9d:5d:40:3c:47:16:e9:4a:55:1c:11:
         49:d3:a1:d6:a8:33:67:64:5d:d2:18:d6:d9:6b:72:75:e8:34:
         86:63:61:ff:04:bf:01:a3:d9:b3:4d:05:ca:1c:87:ba:29:9f:
         0b:ad:78:f3:13:0f:16:95:63:e6:6d:61:14:8e:d1:cf:78:54:
         1d:7b:25:b5:7c:21:93:2e:84:64:b2:81:31:26:0c:d0:0f:e5:
         fb:c1:37:54:82:c2:c6:d0:2c:e2:50:12:be:3d:c1:b6:dd:9c:
         eb:9d:f2:cd:29:79:43:bb:57:c4:20:2b:d9:4b:6c:11:e2:e4:
         de:3c:03:5d:7d:34:75:b2:e0:a9:86:95:0b:d5:3d:59:79:ab:
         4b:7c:fb:19:2b:45:f0:ac:08:56:2d:b0:27:4a:52:a8:04:ab:
         db:f8:56:0e:17:3a:1d:30:3c:c9:21:c6:02:e8:8b:d4:4e:e6:
         85:13:e4:e9:19:8b:2a:b6:2c:db:83:08:5b:b6:de:8c:7e:6c:
         7f:8e:2f:ba:dc:41:5c:84:e6:12:fc:15:11:0c:72:d9:02:26:
         e6:4c:6b:66:25:c6:e9:61:bb:97:9a:a8:08:1c:ba:9f:2b:a8:
         5c:a8:8d:37:1e:9c:bd:e5:6c:f8:56:f0:57:76:a0:48:ca:7e:
         76:db:81:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 08:07:54 2025 by rpki-client