Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/UVabSMA4kUVORphTpn25Cb7CytY.mft
File:                     UVabSMA4kUVORphTpn25Cb7CytY.mft (raw, json)
Hash identifier:          ScdiEadb7IQvtoHryW01cjZ1zTs8iuoslo//oTKE8h8=
Subject key identifier:   95:B0:E2:FF:46:B9:A3:0E:04:8B:CB:57:21:CA:4A:CB:20:A0:A9:92
Authority key identifier: 51:56:9B:48:C0:38:91:45:4E:46:98:53:A6:7D:B9:09:BE:C2:CA:D6
Certificate issuer:       /CN=A91C7672/serialNumber=51569B48C03891454E469853A67DB909BEC2CAD6
Certificate serial:       1C0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UVabSMA4kUVORphTpn25Cb7CytY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/UVabSMA4kUVORphTpn25Cb7CytY.mft
Manifest number:          1BEE
Signing time:             Sat 10 May 2025 16:09:46 +0000
Manifest this update:     Sat 10 May 2025 16:09:45 +0000
Manifest next update:     Sat 17 May 2025 16:09:45 +0000
Files and hashes:         1: UVabSMA4kUVORphTpn25Cb7CytY.crl (hash: HAEg/1IY032ZuD8e3ezAH9Ev7BaTNTo7w+dK2x7hk9Y=)
                          2: 0A93D802C98211EE90C9B71DC4F9AE02.roa (hash: Y3sZNAz5VO/CqU2frod5jtPUGXORcEPTYLfslcOyRnM=)
                          3: 2ADC134C973F11EEA24DBE15C4F9AE02.roa (hash: 8/z6rgF6teVFhicWWNTVjQYLZN9iyUUhAVzuykrg5Nc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/UVabSMA4kUVORphTpn25Cb7CytY.crl
                          rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/UVabSMA4kUVORphTpn25Cb7CytY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UVabSMA4kUVORphTpn25Cb7CytY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 May 2025 16:09:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7181 (0x1c0d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7672, serialNumber=51569B48C03891454E469853A67DB909BEC2CAD6
        Validity
            Not Before: May 10 16:09:45 2025 GMT
            Not After : May 17 16:09:45 2025 GMT
        Subject: CN=681f7a4a-eaad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:81:5a:86:66:d3:d3:60:e6:e8:3d:ee:87:95:
                    59:74:0a:f6:1f:7d:d9:81:48:95:a7:d1:4c:81:1f:
                    76:c8:8f:09:06:d3:e4:05:d9:88:6f:fb:f0:f1:50:
                    79:cf:2d:d3:e5:72:b8:9c:c9:14:ab:d2:94:6e:3c:
                    cf:e0:15:36:86:3a:5c:0a:df:e9:c4:51:9d:b7:74:
                    a4:f7:2a:67:06:bf:0b:e2:1a:a7:2f:e1:b7:99:40:
                    d6:9f:3b:12:39:d0:8d:61:7d:d5:39:28:07:ec:81:
                    44:1c:2d:1e:87:65:c1:c6:ce:c2:2e:9b:5b:e3:df:
                    c0:ef:50:ff:a4:18:bd:a3:f7:40:4c:b7:41:54:f0:
                    a9:48:87:24:a4:84:ef:bf:2a:53:39:1f:76:56:b2:
                    0a:2a:ae:35:52:27:df:d2:76:e0:b7:ee:31:13:f1:
                    21:ac:2a:42:d1:af:27:f9:aa:69:8a:11:16:8a:f1:
                    93:34:b0:c3:18:ec:df:53:fa:60:09:80:41:a4:73:
                    cf:77:ba:79:32:37:12:fd:10:96:1e:8b:9e:f3:11:
                    47:ab:f1:86:b4:97:b4:5e:71:55:87:2e:7b:23:e7:
                    e9:04:cc:7f:57:8b:e0:a0:72:de:e3:98:e2:d6:99:
                    ab:a6:92:03:4b:ac:e9:7b:29:08:b9:eb:06:ce:81:
                    29:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:B0:E2:FF:46:B9:A3:0E:04:8B:CB:57:21:CA:4A:CB:20:A0:A9:92
            X509v3 Authority Key Identifier:
                keyid:51:56:9B:48:C0:38:91:45:4E:46:98:53:A6:7D:B9:09:BE:C2:CA:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/UVabSMA4kUVORphTpn25Cb7CytY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UVabSMA4kUVORphTpn25Cb7CytY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/UVabSMA4kUVORphTpn25Cb7CytY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:ef:fb:6d:0f:3f:92:df:48:6f:d3:5d:51:04:cf:27:e9:f2:
         b5:50:1b:f8:10:d1:0a:6d:ab:62:0d:55:5b:d0:77:17:4a:f0:
         d4:86:90:61:f6:84:36:2b:a9:b2:1e:a3:3f:d7:fb:1e:02:71:
         c4:7c:07:26:e5:a6:62:69:ca:56:12:86:98:5e:b0:d8:6e:e5:
         80:1e:4c:aa:a3:bf:ab:de:ed:45:7f:5f:e2:0a:74:e3:5a:b6:
         9e:8f:88:f3:bf:e1:f7:ca:1d:af:b7:82:da:1f:95:5d:c6:c3:
         0a:f6:ac:34:e8:ce:0b:9b:e9:0d:47:98:d3:62:6b:ed:bd:a5:
         e5:86:76:96:c0:72:af:44:78:b2:65:e9:b3:e6:b5:ca:2f:ea:
         47:c8:24:13:9f:5f:55:81:59:dc:98:b5:b3:93:ef:f6:57:f3:
         ef:7f:41:92:16:78:cc:fe:48:aa:69:39:5e:53:34:08:ab:ce:
         41:dd:b4:5f:a1:6d:15:c4:14:4f:93:27:b5:4d:de:17:7f:a4:
         65:2c:54:6f:ea:c3:f1:96:35:7c:b3:60:9b:b0:ff:1e:9d:d6:
         49:d8:5e:59:48:8e:ac:1c:2e:c9:63:f7:e7:00:5e:29:cc:7b:
         fd:f0:5b:7e:62:1a:18:53:48:e2:f9:84:85:57:58:79:3b:f9:
         52:8e:12:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:47:50 2025 by rpki-client